Error Windows Admin Center extension on Azure Local

Question

Error Windows Admin Center extension on Azure Local

Dal Passo Fabrizio 35

Version 0.70.00 does not install on Azure local clusters.

I can setup a previuos version (0.66) on the nodes but on the cluster instance the update installs the 0.70.00 and it does ot succed

Anonymous

2026-02-26T13:42:09.71+00:00
Hello Dal,

Thank you for reaching out on Microsoft Q&A. To better understand and troubleshoot the issue with the Windows Admin Center extension on Azure Local, could you please provide the details below?

What is the exact error message shown during the extension deployment in the Azure Portal? (A screenshot or copied text would be helpful.)

Which resource fails — the cluster Arc resource, individual nodes, or only the cluster-level installation?

What version of the Operating System are you using for the local cluster nodes, and are all nodes running the same version?

Please confirm the extension versions you are seeing:

Version installed manually on the nodes (for example, 0.66)

Version being enforced or attempted by Azure (for example, 0.70.0.0)

Have there been any recent changes in the environment, such as updates, configuration changes, or security policy modifications before the issue started?

Have you verified that firewall/proxy settings allow outbound connectivity to the required Azure endpoints?

These details will help us further analyze and isolate the cause of the installation failure
Dal Passo Fabrizio 35 Reputation points

2026-02-26T14:56:44.5266667+00:00

when I try to install wac on the cluster instance it simply fails.
the error reported is the following

Extension Message: Executing Enable operation, CheckingCompatibility: Checking if system is compatible with Windows Admin Center, CheckingWACInstallationStarted: Checking if Windows Admin Center installation has started, SearchingForWindowsAdminCenter: Windows Admin Center is not installed, ExecutingWindowsAdminCenterInstaller: Executing Windows Admin Center installer (attempt number: 1), AttemptingToInstallWindowsAdminCenter: Attempting to install Windows Admin Center, SettingDnsRecords: Creating/updating DNS records, GetDataFromMetadataService: Getting data from Azure metadata service, GetInstanceMetadataForArc: Retrieving the virtual machine instance metadata information, GettingWacPort: Getting Windows Admin Centers configured port, UpdatingWindowsAdminCenterConfiguration: Updating Windows Admin Center Configuration, StoppingWindowsAdminCenterService: Stopping Windows Admin Center service, UpdatingInstallationTypeSettings: Updating Installation type for Windows Admin Center, UpdatingCSPSettings: Updating CSP Frame Ancestors for Windows Admin Center, UpdatingCORSSettings: Updating CORS origins for Windows Admin Center, UpdatingPort: Updating port for Windows Admin Center, UpdatingWebSocketValidationOverride: Updating WebSocket validation override settings, UpdatingTokenAuthenticationEnabled: Updating token authentication setting, UpdatingAutoUpdate: Updating auto update setting, SettingProxy: Updating proxy for Windows Admin Center, GettingWacPort: Getting Windows Admin Centers configured port, UpdatingWindowsAdminCenterConfiguration: Updating Windows Admin Center Configuration, GetDataFromMetadataService: Getting data from Azure metadata service, GetInstanceMetadataForArc: Retrieving the virtual machine instance metadata information, TestWACAppServiceReachability: Testing reachability of Application Web Service of Windows Admin Center, GetAccessTokenForArc: Getting access token from Azure Arc's identity endpoint, GetDataFromMetadataService: Getting data from Azure metadata service, GetInstanceMetadataForArc: Retrieving the virtual machine instance metadata information, RetrieveCertificate: Failed to retrieve certificate from key vault using app service

Please note that, if I install WAC extension version 0.66 on the cluster's nodes only, it installs without any issue, but I can't select the version I want on the cluster instance and this is by design.

No changes on the environment except for the autoupdate of the extension
All the connectivity is checked and working
Bourret, Laurent 10 Reputation points

2026-03-02T14:23:14.4433333+00:00

Hi

We have the same issue since we update Wac 2511 and extension to 0.70.

Answer accepted by question author

0 additional answers

Your answer

Anonymous

2026-02-26T13:42:09.71+00:00

Hello Dal,

Thank you for reaching out on Microsoft Q&A. To better understand and troubleshoot the issue with the Windows Admin Center extension on Azure Local, could you please provide the details below?

What is the exact error message shown during the extension deployment in the Azure Portal? (A screenshot or copied text would be helpful.)

Which resource fails — the cluster Arc resource, individual nodes, or only the cluster-level installation?

What version of the Operating System are you using for the local cluster nodes, and are all nodes running the same version?

Please confirm the extension versions you are seeing:

Version installed manually on the nodes (for example, 0.66)

Version being enforced or attempted by Azure (for example, 0.70.0.0)

Have there been any recent changes in the environment, such as updates, configuration changes, or security policy modifications before the issue started?

Have you verified that firewall/proxy settings allow outbound connectivity to the required Azure endpoints?

These details will help us further analyze and isolate the cause of the installation failure
Bourret, Laurent 10 Reputation points

2026-03-02T14:23:14.4433333+00:00

Hi

We have the same issue since we update Wac 2511 and extension to 0.70.

Answer 1

Anonymous

Hello Dal Passo Fabrizio

Thank you for sharing the details, and we appreciate your patience.

We have engaged the engineering team regarding this issue, and they have confirmed that the behavior is due to a known regression in the current extension package. The issue has been identified internally and is actively being addressed. A corrected version of the VM extension is planned for release and will be made available through the standard update channel once validation is complete.

At this time, no action is required from your side. Once the updated extension version is published, installation should proceed successfully.

Workaround (if immediate access is required): If you need access to Windows Admin Center in the interim, you may continue using the previously installed version on individual cluster nodes as a temporary workaround until the fixed extension is released.

Hope this helps! Please let us know if you have any further questions.

Anonymous

2026-02-27T12:08:24.7533333+00:00

Hello Dal Passo Fabrizio

Just checking if above provided information was helpful! Please let me know if you have any queries in comments
Anonymous

2026-03-03T21:32:54.8733333+00:00

Hi All,

I wanted to provide an update regarding the Windows Admin Center (WAC) extension version 0.70 installation issue on Azure Local clusters.

The engineering team has confirmed that the issue was not resolved by recent certificate rotations and continues to affect Azure Local as well as Windows Server machines. They have identified a potential fix, but a precise ETA is not yet available. A deployment addressing this fix is planned following a separate ongoing deployment.

We will keep you informed as soon as the deployment with the fix is available
Anonymous

2026-03-09T19:16:46.46+00:00

Hello Dal Passo Fabrizio/Bourret, Laurent

Engineering team reviewed the issue and suggested a remediation step from their side. They recently refreshed one of the backend services, and this may have resolved the problem.

Could you please uninstall and then redeploy the Windows Admin Center (WAC) extension from your environment and let us know if the issue still persists after the redeployment?
Bourret, Laurent 10 Reputation points

2026-03-09T19:41:32.0166667+00:00

Sorry, the extension installs correctly on both servers, but after 2 minutes they fail with the same error message.
Dal Passo Fabrizio 35 Reputation points

2026-03-10T13:24:37.9866667+00:00

Still not working, but different error

Extension Message: Executing Enable operation, CheckingCompatibility: Checking if system is compatible with Windows Admin Center, CheckingWACInstallationStarted: Checking if Windows Admin Center installation has started, SearchingForWindowsAdminCenter: Windows Admin Center is not installed, ExecutingWindowsAdminCenterInstaller: Executing Windows Admin Center installer (attempt number: 1), AttemptingToInstallWindowsAdminCenter: Attempting to install Windows Admin Center, SettingDnsRecords: Creating/updating DNS records, GetDataFromMetadataService: Getting data from Azure metadata service, GetInstanceMetadataForArc: Retrieving the virtual machine instance metadata information, GettingWacPort: Getting Windows Admin Centers configured port, UpdatingWindowsAdminCenterConfiguration: Updating Windows Admin Center Configuration, StoppingWindowsAdminCenterService: Stopping Windows Admin Center service, UpdatingInstallationTypeSettings: Updating Installation type for Windows Admin Center, UpdatingCSPSettings: Updating CSP Frame Ancestors for Windows Admin Center, UpdatingCORSSettings: Updating CORS origins for Windows Admin Center, UpdatingPort: Updating port for Windows Admin Center, UpdatingWebSocketValidationOverride: Updating WebSocket validation override settings, UpdatingTokenAuthenticationEnabled: Updating token authentication setting, UpdatingAutoUpdate: Updating auto update setting, SettingProxy: Updating proxy for Windows Admin Center, GettingWacPort: Getting Windows Admin Centers configured port, UpdatingWindowsAdminCenterConfiguration: Updating Windows Admin Center Configuration, GetDataFromMetadataService: Getting data from Azure metadata service, GetInstanceMetadataForArc: Retrieving the virtual machine instance metadata information, TestWACAppServiceReachability: Testing reachability of Application Web Service of Windows Admin Center, GetAccessTokenForArc: Getting access token from Azure Arc's identity endpoint, GetDataFromMetadataService: Getting data from Azure metadata service, GetInstanceMetadataForArc: Retrieving the virtual machine instance metadata information, GetAccessTokenForArc: Getting access token from Azure Arc's identity endpoint, GetDataFromMetadataService: Getting data from Azure metadata service, GetInstanceMetadataForArc: Retrieving the virtual machine instance metadata information, GetDataFromWACService: Getting data from WAC service, GetDataFromWACService: Getting data from WAC service, GetDataFromWACService: Getting data from WAC service, GetDataFromWACService: Getting data from WAC service, GetDataFromWACService: Getting data from WAC service, WriteCertificateThumbprint: Storing certificate thumbprint for future reference., CreateCertificate: Requesting certificate creation in key vault using app service, RetrieveCertificate: Retrieving certificate from key vault using app service, ImportingCertificate: Importing Certificate to Certificate Store, StoppingWindowsAdminCenterService: Stopping Windows Admin Center service, UpdatingSubjectName: Updating WAC certificate subject name, RemoveOlderCertificates: Removing older certificates. Only the latest certificate will be kept., CleaningUpOlderWacCertificates: Cleaning up older WAC certificates. Only the latest certificate will be kept., UpdatingCertificateACL: Updating WAC certificate ACL, UpdatingServicesEndpoints: Updating WAC endpoint FQDN, StartingWindowsAdminCenterService: Failed to start Windows Admin Center service
Anonymous

2026-03-10T16:42:22.9533333+00:00

Thanks for sharing update. Will check with PG team and get back to you. Thanks
Bourret, Laurent 10 Reputation points

2026-03-11T13:49:18.34+00:00

It now works; after installing the extensions, they fail.

After restarting the Windows Admin Center service on the hosts and Restart-Service ExtensionService, the extension turns green and everything is OK.
Anonymous

2026-03-11T14:47:42.0733333+00:00

Thanks for update Bourret, Laurent,Dal Passo Fabrizio, could you please try from your end and update us on this.
Dal Passo Fabrizio 35 Reputation points

2026-03-11T14:57:44.2266667+00:00
Hello, my windows admin center service in stopped and if I try to start it I have an error 1067: the process terminated unexpectedly

the WAC service starts with network service acocunt

on event log I have this

Application: WindowsAdminCenter.exe CoreCLR Version: 8.0.2125.47513 .NET Version: 8.0.21 Description: The process was terminated due to an unhandled exception. Exception Info: System.AggregateException: One or more errors occurred. (SQLite Error 14: 'unable to open database file'.)
Anonymous

2026-03-13T18:51:52.5066667+00:00
Hello Dal Passo Fabrizio,

Thank you for your patience.

We have reviewed the issue internally with the product team, and they asked us to confirm whether Windows Defender Application Control (WDAC) is enabled on the local node in your environment.

Currently, there is a known issue affecting WDAC-enabled clusters on Azure Local when using the Portal to install the Windows Admin Center extension. The engineering team is actively working on deploying a fix.

In the meantime, if WDAC is enabled in your environment, could you please try the following workaround:

Temporarily switch WDAC from Enforced mode to Audit mode on the local node.

Attempt to install the Windows Admin Center extension again.

After the installation completes successfully, you can switch WDAC back to Enforced mode.

Additionally, to help the product group further investigate the issue, could you please share the following logs:

All Event Logs from the affected node

The 0.log files related to the extension installation

Portal logs / HAR file captured while reproducing the issue from the Azure portal

These logs will help the engineering team confirm whether the issue is related to the known WDAC behavior.
Dal Passo Fabrizio 35 Reputation points

2026-03-16T10:03:15.4166667+00:00

Success
I've changed the WDAC to audit mode and I was able to install the extension. Thank you!
Anonymous

2026-03-16T11:46:27.47+00:00

Hello Dal Passo Fabrizio

Thanks for update. If it is helpful! Could you please accept the answer and upvote it. Thanks
Jshot 15 Reputation points

2026-06-03T18:13:42.05+00:00

Any update?
Dal Passo Fabrizio 35 Reputation points

2026-06-04T10:29:23.5766667+00:00

Now With version 0.70.0.0 all worked well. I see that there is a newer version but I'm a little scared to try updating