OPERATIONAL DEFECT DATABASE
...
...
Pushing a Cloud on Ramp for Azure for vmanage .If you have a policy to refuse any service principle with a version less than TLS1.2 ,when the automation kicks off ,it creates a storage account which negotiates only on TLS version 1.0 .This breaks the automation with the following error: Azure Error: RequestDisallowedByPolicy Message: Resource 'f8g8l4qay5dpp39yj3hktqk4' was disallowed by policy. Policy identifiers: '[{"policyAssignment":{"name":"Enforce minimum default TLS version on Storage Accounts to 1_2.","id":"/providers/Microsoft.Management/managementGroups/petdigital/providers/Microsoft.Authorization/policyAssignments/Deny-STA-Tls-version12"},"policyDefinition":{"name":"Enforce minimum default TLS version on Storage Accounts to 1_2.","id":"/providers/Microsoft.Management/managementGroups/petdigital/providers/Microsoft.Authorization/policyDefinitions/Deny-STA-Tls-version12"}}]'.
vmanage running 20.7.1 Attempting to deploy a router using cloud on ramp for multicloud.
Modify the policy to allow any TLS.
Azure too is going to stop support for lower versions Enable TLS 1.2 support as Microsoft Entra TLS 1.0/1.1 is deprecated - Active Directory | Microsoft Learn; It might cause problems in future if TLS is restriced to 1.2 only (and not above)
Cisco Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
