When using the Azure portal to create the virtual machine, set the following configuration.

You can leave the default values for the settings not listed on this page.

Basics

Set the following values in the Basics tab of the Create a virtual machine page.

Setting

Value

​Project details / Subscription​

Select your Azure subscription.

​Project details / Resource group

Select the resource group described in Creating the Azure storage account.

Instance details / Virtual machine name

Enter a name for the new virtual machine.

Instance details / Region

Select the region shared by the rest of Azure resources. 

Instance details / Image

Select the image described in Creating the Azure image.

Instance details / Size

Select one of the following: Standard_D4s_v3, Standard_D4ds_v5, Standard_D4ds_v4, Standard_D4as_v4, Standard_F4s.

Administrator account / Authentication type

Select SSH public key.

Administrator account / SSH public key source

Select the key described in Creating the SSH key for Azure.

Administrator account / Key pair name

Select the name of the key described in Creating the SSH key for Azure.

Inbound port rules / Public inbound ports

Select None.

Licensing type / License type

Select Other.

Disk

Set the following values in the Disk tab of the Create a virtual machine page.

Setting

Value

OS disk / OS disk size

Select 1 TiB (P30) or higher.

OS disk / OS disk type

Select Premium SSD (locally-redundant storage) or higher.

Under Data disks, click Create and attach a new disk, and set the following value.

Setting

Value

Size

15 GiB or higher

Networking

Set the following values in the Networking tab of the Create a virtual machine page.

Setting

Value

NIC network security group 

Select Advanced.

Configure network security group 

Select the network security group described in Creating the Azure network rules.

Advanced

Paste the following code in the Custom data field of the Advanced tab.

#!/bin/bash
/opt/entrust/scripts/configure-os.sh

This code will allow the sysadmin Entrust PKI Hub administrator to log in using the SSH key.