Set up the Azure Migrate appliance and start discovery
At the end you will have an Azure Migrate project, a registered appliance on your network and discovery running against vCenter Server or your physical servers, with the inventory flowing into the Azure portal.
What you need before step 1
Applies to: Azure Migrate discovery and assessment for VMware vSphere (vCenter Server 5.5 to 9.0), Hyper-V and physical or other-cloud servers in Azure public cloud (as documented by Microsoft)
Admin roles you need
- An Azure account with the Azure Migrate built-in roles needed to create projects, register appliances and view discovery results (see "Prepare an Azure user account" in Microsoft's VMware discovery tutorial)
- vSphere administrator to create a discovery account and deploy the OVA
- A vCenter Server account with the Read-only role at Global Permissions (add Guest operations privileges for application discovery and dependency analysis; on vCenter 7.x and later clone the Read-only role first)
- For physical servers: a Windows account and/or Linux account (password or OpenSSH key) on each source server
Licences
None needed.
Download
https://go.microsoft.com/fwlink/?linkid=2191847DownloadInstall instructions
https://learn.microsoft.com/en-us/azure/migrate/tutorial-discover-vmware?view=migrateInstall stepshttps://learn.microsoft.com/en-us/azure/migrate/deploy-appliance-script?view=migrateInstall stepsAlso have ready
- Appliance VM for VMware: 32 GB RAM, 8 vCPUs, about 80 GB disk, an external virtual switch and internet access (direct or through an HTTP proxy)
- For the script: Windows Server 2022 or 2025 (VMware: 32 GB RAM, 8 vCPUs, 80 GB disk; Hyper-V: 16 GB RAM, 8 vCPUs, 80 GB disk)
- The appliance server must not be one previously used for the replication appliance or with the Mobility service agent installed
- Outbound access to the Azure Migrate URLs Microsoft lists for the appliance
9 steps
- 1
Create the Azure Migrate project
Where: Azure portal (https://portal.azure.com) > All services > search Azure Migrate > Azure Migrate > Get startedUnder Get started select Servers, databases and web apps, then Create project. Choose your subscription and resource group (or create one), enter a project name and choose the geography, then select Create.
You should see: After a few minutes the project deploys and Azure Migrate: Discovery and assessment is added to it. - 2
Generate the project key
Where: Azure portal > Azure Migrate > your project > Servers, databases and web apps > Azure Migrate: Discovery and assessment > DiscoverIn Are your servers virtualized? choose Yes, with VMware vSphere hypervisor, the Hyper-V option, or Physical or other (AWS, GCP, Xen, etc.). In 1: Generate project key type an appliance name (alphanumeric, 14 characters or fewer) and select Generate key. Do not close the pane while resources are created. Copy the key.
You should see: A project key appears in the pane. Save it somewhere safe; you paste it into the appliance later. - 3
Download the appliance
Where: Same Discover pane, section 2: Download Azure Migrate applianceVMware: select OVA file and Download. Hyper-V or physical: download the installer zip (the script option). Microsoft asks you to check the file is secure before deploying it (see the "Verify security" section of the Azure Migrate appliance article).
You should see: An .ova file or AzureMigrateInstaller.zip is saved to your PC. - 4
VMware: deploy the OVA in vSphere
Where: vSphere Client > File > Deploy OVF TemplateIn Source enter the OVA location. Set the VM name and inventory location, the host or cluster, the datastore and disk format. In Network Mapping pick a network with internet access. Review and select Finish. Power on the VM, right-click it and select Open Console. Accept the licence terms, then set the language, time zone and administrator password.
You should see: The appliance VM boots to the Windows sign-in screen and you can sign in with the password you set. - 5
Hyper-V or physical: run the installer script
Where: The Windows Server 2022/2025 machine that will host the appliance: right-click Start > Terminal (Admin)Extract the zip to a folder, change to that folder in the elevated PowerShell window and run the script. Choose the scenario (Hyper-V or Physical or other), Azure public cloud and default (public endpoint) connectivity when prompted.
cd C:\Users\administrator\Desktop\AzureMigrateInstaller .\AzureMigrateInstaller.ps1You should see: The script installs IIS and the appliance services, then launches the appliance configuration manager automatically. Logs are in C:\ProgramData\Microsoft Azure\Logs. - 6
Open the configuration manager and pass the prerequisites
Where: Any browser that can reach the appliance: https://appliance-name-or-IP-address:44368Accept the licence terms. The appliance checks internet connectivity (select Setup proxy if you use one; only HTTP proxy is supported), time sync with internet time, and installs the latest updates. For VMware agentless migration it also checks the VDDK is extracted to
C:\Program Files\VMware\VMware Virtual Disk Development Kit.You should see: Each prerequisite shows a green tick. - 7
Register the appliance with the project key
Where: Appliance configuration manager > Register with Azure MigratePaste the project key. Select Login, then in Continue with Azure Login select Copy code & Login. In the new browser tab paste the device code and sign in with your Azure username and password (sign-in with a PIN is not supported). Use the same account that generated the key.
You should see: The appliance shows it is registered. Select View details to see the project and subscription. - 8
Add vCenter Server or server credentials
Where: Appliance configuration manager > Manage credentials and discovery sourcesVMware: in Step 1 select Add credentials, give them a friendly name and enter the vCenter discovery account. In Step 2 select Add discovery source and enter the vCenter IP or FQDN (port 443 by default). You can add up to 10 vCenter Servers per appliance. Physical: add credentials with source type Windows Server, Linux Server (Password-based) or Linux Server (SSH key-based), then Add discovery source with each server's IP/FQDN (single item, multiple items or Import CSV) and select Save.
You should see: The appliance validates each source and shows the result in the Validation status column. Select a Failed status to see the error. - 9
Start discovery
Where: Appliance configuration manager, bottom of the pageSelect Start discovery. Check progress in the sources table.
You should see: Discovery status changes to in progress. Microsoft says discovery across 10 vCenter Servers takes about 20 to 25 minutes, and installed application inventory for 500 servers about one hour to appear in the portal.
Expert tips
For VMware, Microsoft says the host must give the appliance 32 GB RAM, 8 vCPUs, about 80 GB of disk, an external virtual switch and internet access directly or through a proxy. An undersized appliance is a common reason for slow or incomplete discovery.
Discovery needs only a read-only vCenter account. To also get installed applications and agentless dependency analysis, add the Guest operations privileges and propagate to children; on vCenter 7.x and later clone the Read-only role and add the privileges to the clone. VMware Tools 10.2.1 or later must be running on the servers.
Allow all the URLs Microsoft lists for the appliance, including aka.ms/*, and enter the proxy in the configuration manager if you have one. The time check fails if the clock is more than five minutes out; run w32tm /resync on the appliance.
Microsoft says discovery across 10 vCenter Servers on one appliance takes about 20 to 25 minutes, installed applications for 500 servers take about an hour to appear, software inventory repeats every 12 hours, and web apps and SQL Server data appear within 24 hours. Leave the appliance running: it collects performance data continuously, and performance-based sizing is better the longer it runs.
You can add domain, Windows, Linux (password or SSH key) and SQL Server credentials, several of each. Add all the sets your estate uses rather than relying on one admin account, and keep each one least-privilege.
How to confirm it worked
In the Azure portal open your project > Servers, databases and web apps > Azure Migrate: Discovery and assessment and check the discovered servers count is above zero.
In the configuration manager, each vCenter Server or server in the sources table shows its discovery status.
Web apps and SQL Server instances should begin to appear within 24 hours of starting discovery.
How to reverse it
Stop discovery by shutting down the appliance VM or server and deleting it from vSphere or Hyper-V. Delete the project (and its resource group if it only holds Azure Migrate resources) in the Azure portal. Remove the vCenter discovery account from Global Permissions in vSphere. Export any assessment reports you need before deleting the project.
Errors you might see
Failed to connect to the Azure Migrate projectCause: The account signed in to the configuration manager is not the one that generated the project key and lacks the required roles.
Fix: Sign in with the account that generated the key, or give your account the required Azure Migrate roles.
Project key error during registration (symptom)Cause: The wrong key was copied, or the key is for a different cloud or scenario.
Fix: In the project select Discover > Manage existing appliance, choose the appliance and copy its key. Check the cloud type and appliance type shown at the top of the configuration manager.
Time sync check failsCause: The appliance clock is more than five minutes off.
Fix: Fix the date and time in Control Panel, or run w32tm /tz and w32tm /resync in an admin command prompt.
Unable to connect to vCenter ServerCause: The appliance cannot resolve the vCenter name or the port is wrong (443 is used by default).
Fix: Ping vCenter from the appliance, try the IP address, confirm the correct port and that vCenter is running, and update the appliance.
Validation failed (domain credentials)Cause: The domain name or credentials are wrong, or the domain is unreachable from the appliance.
Fix: Check the details, confirm the domain resolves from the appliance, select Edit, then Revalidate credentials.
Questions
Can I discover AWS or Google Cloud VMs?
Yes. Treat them as physical servers: choose Physical or other (AWS, GCP, Xen, etc.) and use the installer script.
Can one appliance discover several vCenter Servers?
Yes, up to 10 vCenter Servers per appliance.
Are LDAP accounts or PuTTY keys supported?
No. Microsoft says LDAP accounts are not supported for discovery, and SSH keys with a passphrase or created by PuTTY are not supported.
Is the OVA available in Azure Government?
No. Microsoft says the OVA option is not supported in Azure Government; use the script instead.
Official sources
Vendors change menus and requirements. Confirm on the source before you rely on a detail. Last checked 4 Nov 2026.