Unable to Connect to Windows Admin Center for Arc-Enabled Servers

Hi Nate Gagne

Confirm that the HIMDS service is running. You can restart it using the following PowerShell command:

Restart-Service -Name himds

Verify that the extension version is 0.0.0.169 or higher. If the version is lower, please uninstall and reinstall the extension.

Verify that the WAC service is running. You can check this in Task Manager under the Services tab.

Run the following command to verify that the required port is enabled for the reverse proxy session:

azcmagent config list

Make sure the port used by WAC appears under incomingconnections.ports

Outbound Connectivity: Please ensure the hybrid machine has outbound access to the following endpoints:

*.wac.azure.com

pas.windows.net

*.servicebus.windows.net

Although your firewall is not blocking traffic, we recommend double-checking for any other network-related issues that may be affecting connectivity.
https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/support/troubleshooting
https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/manage-arc-hybrid-machines#failed-to-connect-with-404-endpoint-not-found

let us know if any help, we will always help as you needed.!

If the comment is helpful, please click "Upvote it".

Thank you. The service is running and I have already tried restarting it. The WAC port is listening:

Local Configuration Settings
 incomingconnections.enabled (preview) : true
 incomingconnections.ports (preview) : [6516]

The extension version is higher than 0.0.0.169:

PS C:\WINDOWS\system32> azcmagent extension list
INFO Stopping and disabling service: Extension Service
Extension: AdminCenter
Version: 0.49.0.0
Extension Path: C:\Packages\Plugins\Microsoft.AdminCenter.AdminCenter
State: ENABLED
Extension: WindowsOsUpdateExtension
Version: 1.0.28.0
Extension Path: C:\Packages\Plugins\Microsoft.SoftwareUpdateManagement.WindowsOsUpdateExtension
State: ENABLED
Extension: AzureMonitorWindowsAgent
Version: 1.34.0.0
Extension Path: C:\Packages\Plugins\Microsoft.Azure.Monitor.AzureMonitorWindowsAgent
State: ENABLED
Extension: ChangeTracking-Windows
Version: 2.29.0.0
Extension Path: C:\Packages\Plugins\Microsoft.Azure.ChangeTrackingAndInventory.ChangeTracking-Windows
State: ENABLED
Extension: WindowsPatchExtension
Version: 1.5.71
Extension Path: C:\Packages\Plugins\Microsoft.CPlat.Core.WindowsPatchExtension
State: ENABLED
INFO Enabling and starting service: Extension Service

And finally, all endpoints are reachable:

PS C:\WINDOWS\system32> azcmagent.exe check
INFO Testing connectivity to endpoints that are needed to connect to Azure... This might take a few minutes.
Use Case |Endpoint |Reachable |Private |TLS |Proxy
core |https://agentserviceapi.guestconfiguration.azure.com |true |false |TLS 1.2 |not used
core |https://eastus-gas.guestconfiguration.azure.com |true |false |TLS 1.2 |not used
core |https://gbl.his.arc.azure.com |true |false |TLS 1.2 |not used
core |https://gbl.his.arc.azure.com/eus/his |true |false |TLS 1.2 |not used
core |https://login.microsoftonline.com |true |false |TLS 1.2 |not used
core |https://management.azure.com |true |false |TLS 1.2 |not used
core |https://pas.windows.net |true |false |TLS 1.2 |not used

Hi @Nate Gagne

Please let me know if your issue has been resolved.

Thankyou

The issue has not been resolved.

Hi Nate Gagne

Verify there are no firewall rules blocking port 6516, which is required for WAC. Even if the port appears to be listening, firewall configurations can still prevent successful connections.

Confirm that the Windows Admin Center service is running. You can do this by opening Task Manager, navigating to the Services tab, and verifying that ServerManagementGateway (Windows Admin Center) is active.

To verify that the Microsoft Certificate and DNS services for WAC are accessible, run the following command in PowerShell:

Invoke-RestMethod -Method GET -Uri https://<your_region>.service.waconazure.com

Replace <your_region> with your appropriate Azure region. You should receive a valid response if connectivity is working as expected.

If you haven’t already, try restarting the HIMDS service again. Occasionally, a second restart can help clear up residual issues.

If the issue persists, we recommend reviewing the logs on both the Azure portal and the hybrid machine. This can help identify any specific errors or configuration issues affecting the connection.

https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/manage-hci-clusters#the-windows-admin-center-extension-failed-to-install

let us know if any help, we will always help as you needed.!

If the comment is helpful, please click "Upvote it".