1. Log in to your Azure account and download the .publishsettings file.

   The .publishsettings file is an .XML file.

2. Open the .publishsettings file using a browser or text editor and look for the ManagementCertificate="XXXX" part where XXXX is the base64 encoded string.

   

3. Copy the base64 encoded string to a text file.

   Example: azurecert.txt

4. Decode the file using certutil (Windows) or base64 (Linux).

   Windows:

   1. Open a command prompt and go to the location of the text file you created in Step 3.
   2. Using the certutil command, decode the text file to create a .PFX file.

      certutil -decode <input file> <output file>

      Example: certutil -decode azurecert.txt azurecert.pfx

   Linux:

   1. Go to the directory of the text file you created in Step 3.
   2. Use the base64 command to decode the text file into a .PFX file:

      base64 -d inputfile > outputfile

      Example: base64 -d azurecert.txt > azurecert.pfx

5. Using openssl, extract the pem certificate from the pfx file.

   Linux:

   1. For your convenience, create a /certs/ directory and move the .PFX file.
   2. Run the following command:

      # openssl pkcs12 -in /certs/azurecert.pfx -out /certs/azurecert.pem –nodes

   Windows:

   1. Download and install openssl.
   2. Create a C:\certs\ folder and move the .PFX file.
   3. Open a command prompt and go to the OpenSSL\bin folder.

      cd %homedrive%\OpenSSL\bin

   4. Use the openssl command to extract the pem certificate:

      openssl pkcs12 -in c:\certs\azurecert.pfx -out c:\certs\azurecert.pem –nodes

Linux

Using scconfig

1. Go to the SecureCloud installation directory:

   # cd /var/lib/securecloud/

2. Run the scconfig.sh tool:

   # ./scconfig.sh --update_credentials

3. Provide the following information:
   • Azure Subscription ID
   • Management certificate file path (Example: /certs/azurecert.pem)
   • Management certificate password (optional)

Using scprov

1. Go to the SecureCloud installation directory:

   # cd /var/lib/securecloud/

2. Create an agentconfig.ini file:

   # vim agentconfig.ini

3. Add the following in the file:

   [Microsoft-Azure]
   SUBSCRIPTION_ID=ID NUMBER
   CERTIFICATE_PATH=/certs/azurecert.pem
   CERTIFICATE_PASSWORD=

4. Execute the scprov script:

   # ./scprov.sh reconf --agentconfig=agentconfig.ini

    

Windows

Using scconfig

1. Go to SecureCloud installation directory:

   cd C:\Program Files (x86)\Trend Micro\SecureCloud\Agent\

2. Run the scconfig.exe tool:

   scconfig.exe --update_credentials

3. Provide the required information:
   • Azure Subscription ID
   • Management certificate file path (Example: C:\certs\azurecert.pem)
   • Management certificate password (optional)

Using scprov

1. Create an agentconfig.ini file in the SecureCloud installation folder using Notepad or any text editor.

   The installation folder is usually C:\Program Files (x86)\Trend Micro\SecureCloud\Agent\.

2. Add the following in the agentconfig.ini file:

   [Microsoft-Azure]
   SUBSCRIPTION_ID=ID NUMBER
   CERTIFICATE_PATH=/certs/azurecert.pem
   CERTIFICATE_PASSWORD=

3. Run the following commands to execute the scprov script:

   cd C:\Program Files (x86)\Trend Micro\SecureCloud\Agent\
   scprov.exe reconf --agentconfig=agentconfig.ini