Views:

Update your Azure subscriptions imported from Cloud Posture and Server & Workload Protection.

When updating certain Trend Micro products to Trend Vision One, the Cloud Accounts app automatically imports your monitored Azure subscriptions as legacy connections. Legacy connections include subscriptions added when updating the following products:
  • Updating Trend Cloud One - Conformity to Trend Vision One Cloud Posture.
  • Updating Trend Cloud One Endpoint & Workload Security to Trend Vision One Server & Workload Protection.
To enable the advanced cloud security features of Trend Vision One, including Container Security features, you must update your legacy connections. Updating a legacy Azure subscription connection allows Trend Vision One to access your cloud service to provide security and visibility into your cloud assets. Some Cloud Account features have limited support for Azure regions. For more information, see Azure supported regions and limitations.
Note
Note
The steps are valid for the Azure console as of March 2024.

Procedure

  1. Sign in to the Trend Vision One console.
  2. In a new tab in the same browser session, sign in to the Azure subscription you want to connect and access the Azure Cloud Shell.
  3. In the Trend Vision One console, go to Cloud Security → Cloud Accounts → Azure.
  4. Click the name of the legacy connection subscription you want to update.
  5. In the Subscription Settings screen, click Update Subscription.
    The Connect Azure Subscription screen appears.
  6. Verify the Subscription ID, Name, and Description or edit as needed.
  7. If you have more than one Server & Workload Protection Manager instance, select the instance to associate with the connected subscription.
    Note
    Note
    • If you only have one Server & Workload Protection Manager instance, the subscription is automatically associated with that instance.
    • When updating a legacy connection, the subscription is disconnected from any other Server & Workload Protection instances.
  8. Click Download Azure Resource Creation Script.
    Note
    Note
    If the button is not enabled, verify that you have specified a properly formatted subscription ID.
  9. In Azure Cloud Shell, access the command line interface.
    Note
    Note
    The Connect Azure Subscription screen in the Trend Vision One console provides a set of commands to help complete the following steps. To complete the connection process, you must copy each command provided in the screen to enable the Done button. While you can alter some parameters, Trend Micro recommends using the provided commands as is to prevent the deployment failing.
  10. Create a new directory for the deployment folder and then access the folder.
    Copy the command or type mkdir [directoryName] && cd [directoryName].
    Note
    Note
    The commands provided by Trend Vision One use your subscription ID as the directory name. While you can specify any directory name you want, you must ensure the folder has a unique name and that there are no other terraform files in the deployment folder.
  11. Upload the resource creation script to your Azure Cloud Shell.
    Azure Cloud Shell uploads the resource creation script to the root directory.
  12. Move the resource creation script to the deployment folder.
    Copy the command or type mv ~/cloud-account-management-terraform.tf ./cloud-account-management-terraform.tf.
    Important
    Important
    The resource creation script must be the only terraform file in the directory. Having more than one terraform file in the folder interferes with deployment process and might cause the connection to fail.
  13. Initiate Terraform and apply the resource creation script.
    Copy the command or type terraform init && terraform apply.
    Azure Cloud Shell begins the terraform process to deploy Trend Vision One security resources.
  14. In the Trend Vision One console, in the Connect Azure Subscription screen, click Done.
    Note
    Note
    If the Done button is not enabled, make sure you have copied the command line for each step on the screen.
    The update process might take a few moments to complete. You can refresh the Cloud Accounts screen to check the status of your updated legacy subscription. Once the update process is complete, you can safely remove any Trend Cloud One Endpoint & Workload Security and Trend Cloud One Conformity stack data from your cloud account.