Uredi

Connect to an Azure Local VM using SSH or RDP over SSH for multi-rack deployments

Applies to: Multi-rack deployments of Azure Local 2511 and later

This article describes how to connect to an Azure Local virtual machine (VM) using Secure Shell (SSH) and Remote Desktop Protocol (RDP) over SSH for multi-rack deployments.

  • SSH is supported for both Windows and Linux VMs.
  • RDP over SSH is supported for Windows VMs only.

About SSH and RDP over SSH

Azure Arc uses the SSH service (sshd) running inside the VM, but you establish connections through Azure Arc rather than directly over the network. You don't need to open any public IP address or inbound SSH ports on the VM for connectivity. For more information, see SSH access to Azure Arc-enabled servers.

The SSH server extension provides access to both Windows and Linux Azure Local VMs.

Prerequisites

Before you begin, make sure that you:

  1. Have access to the Azure Local VM that you want to connect to.

  2. For Windows VMs, install the OpenSSH Server Extension. Linux VMs typically have SSH enabled by default and don't require this extension.

    You can install the OpenSSH Server Extension via Azure portal or using Azure CLI. Installing the extension via Azure portal is the recommended method.

    Note

    Starting with Windows Server 2025, OpenSSH is installed by default.

Install the OpenSSH Server Extension via Azure portal

To install the extension via Azure portal, navigate to Extensions and select the OpenSSH for Windows - Azure Arc option.

Screenshot of the Azure Arc Extensions page.

Install the OpenSSH Server Extension via Azure CLI

Use the following steps to install the OpenSSH Server Extension via Azure CLI:

  1. Run the following commands to ensure that the required Azure CLI Extensions are installed:

    az extension add --upgrade --name connectedmachine
az extension add --upgrade --name ssh

  2. Sign in to Azure:

    az login --use-device-code

  3. Set appropriate parameters:

    $resourceGroup="<your resource group>"
$serverName = "<your server name>"
$localUser = "<your username>" # Use a local admin account for testing

  4. Install the OpenSSH Arc Extension:

    az connectedmachine extension create --name WindowsOpenSSH `
  --type WindowsOpenSSH --publisher Microsoft.Azure.OpenSSH `
  --type-handler-version 3.0.1.0 --machine-name $serverName `
  --resource-group $resourceGroup

  5. You can see the WindowsOpenSSH extension in the Azure portal Extensions list view.

    Screenshot of Azure portal Extensions list view.

Use SSH to connect to an Azure Local VM

Note

You might be prompted to allow Azure Arc to use port 22 as the local SSH endpoint inside the VM.

Use the following steps to connect to an Azure Local VM. This procedure works for both Windows and Linux VMs.

  1. Run the following command to launch Arc SSH and sign in to the VM:

    az ssh arc --resource-group $resourceGroup --name $serverName --local-user $localUser

    You're now connected to the Azure Local VM over SSH.

    Screenshot of server connection over SSH.

Use RDP over SSH to connect to an Azure Local VM

For Windows VMs only, you can use RDP over SSH to connect to an Azure Local VM. Linux VMs don't support RDP over SSH.

  1. Run the following command with the RDP parameter:

    az ssh arc --resource-group $resourceGroup --name $serverName --local-user $localUser --rdp

  2. Sign in to the local server for RDP over SSH.

    Screenshot of server sign-in dialog to connect to Windows Server over SSH.

  3. Sign in to authenticate for RDP.

    Screenshot of the remote desktop server sign-in dialog to connect to Windows Server over SSH.

  4. You can see the desktop for the remote desktop connection.

    Screenshot of the remote desktop to connect to Windows Server over SSH.

    You set up an RDP tunnel over SSH into your Azure Local VM using Azure CLI without any VPN or open ports at your firewall.

Next steps

  • Last updated on