How-to · Azure

Set up the Azure Migrate appliance and start discovery

At the end you will have an Azure Migrate project, a registered appliance on your network and discovery running against vCenter Server or your physical servers, with the inventory flowing into the Azure portal.

Updated 9 steps4 official sources
Before you start

What you need before step 1

Applies to: Azure Migrate discovery and assessment for VMware vSphere (vCenter Server 5.5 to 9.0), Hyper-V and physical or other-cloud servers in Azure public cloud (as documented by Microsoft)

Admin roles you need

  • An Azure account with the Azure Migrate built-in roles needed to create projects, register appliances and view discovery results (see "Prepare an Azure user account" in Microsoft's VMware discovery tutorial)
  • vSphere administrator to create a discovery account and deploy the OVA
  • A vCenter Server account with the Read-only role at Global Permissions (add Guest operations privileges for application discovery and dependency analysis; on vCenter 7.x and later clone the Read-only role first)
  • For physical servers: a Windows account and/or Linux account (password or OpenSSH key) on each source server

Licences

None needed.

Download

AzureMigrateInstaller.zip (script for VMware, Hyper-V or physical)Also downloadable from the project. The only option for physical servershttps://go.microsoft.com/fwlink/?linkid=2191847Download

Install instructions

Azure Migrate appliance OVA (VMware)Downloaded from the project: Discover > 2: Download Azure Migrate appliancehttps://learn.microsoft.com/en-us/azure/migrate/tutorial-discover-vmware?view=migrateInstall steps
Set up an Azure Migrate appliance with a script (Microsoft Learn)Script requirements and stepshttps://learn.microsoft.com/en-us/azure/migrate/deploy-appliance-script?view=migrateInstall steps

Also have ready

  • Appliance VM for VMware: 32 GB RAM, 8 vCPUs, about 80 GB disk, an external virtual switch and internet access (direct or through an HTTP proxy)
  • For the script: Windows Server 2022 or 2025 (VMware: 32 GB RAM, 8 vCPUs, 80 GB disk; Hyper-V: 16 GB RAM, 8 vCPUs, 80 GB disk)
  • The appliance server must not be one previously used for the replication appliance or with the Mobility service agent installed
  • Outbound access to the Azure Migrate URLs Microsoft lists for the appliance
Step by step

9 steps

  1. 1

    Create the Azure Migrate project

    Where: Azure portal (https://portal.azure.com) > All services > search Azure Migrate > Azure Migrate > Get started

    Under Get started select Servers, databases and web apps, then Create project. Choose your subscription and resource group (or create one), enter a project name and choose the geography, then select Create.

    You should see: After a few minutes the project deploys and Azure Migrate: Discovery and assessment is added to it.
  2. 2

    Generate the project key

    Where: Azure portal > Azure Migrate > your project > Servers, databases and web apps > Azure Migrate: Discovery and assessment > Discover

    In Are your servers virtualized? choose Yes, with VMware vSphere hypervisor, the Hyper-V option, or Physical or other (AWS, GCP, Xen, etc.). In 1: Generate project key type an appliance name (alphanumeric, 14 characters or fewer) and select Generate key. Do not close the pane while resources are created. Copy the key.

    You should see: A project key appears in the pane. Save it somewhere safe; you paste it into the appliance later.
  3. 3

    Download the appliance

    Where: Same Discover pane, section 2: Download Azure Migrate appliance

    VMware: select OVA file and Download. Hyper-V or physical: download the installer zip (the script option). Microsoft asks you to check the file is secure before deploying it (see the "Verify security" section of the Azure Migrate appliance article).

    You should see: An .ova file or AzureMigrateInstaller.zip is saved to your PC.
  4. 4

    VMware: deploy the OVA in vSphere

    Where: vSphere Client > File > Deploy OVF Template

    In Source enter the OVA location. Set the VM name and inventory location, the host or cluster, the datastore and disk format. In Network Mapping pick a network with internet access. Review and select Finish. Power on the VM, right-click it and select Open Console. Accept the licence terms, then set the language, time zone and administrator password.

    You should see: The appliance VM boots to the Windows sign-in screen and you can sign in with the password you set.
  5. 5

    Hyper-V or physical: run the installer script

    Where: The Windows Server 2022/2025 machine that will host the appliance: right-click Start > Terminal (Admin)

    Extract the zip to a folder, change to that folder in the elevated PowerShell window and run the script. Choose the scenario (Hyper-V or Physical or other), Azure public cloud and default (public endpoint) connectivity when prompted.

    cd C:\Users\administrator\Desktop\AzureMigrateInstaller
    .\AzureMigrateInstaller.ps1
    You should see: The script installs IIS and the appliance services, then launches the appliance configuration manager automatically. Logs are in C:\ProgramData\Microsoft Azure\Logs.
  6. 6

    Open the configuration manager and pass the prerequisites

    Where: Any browser that can reach the appliance: https://appliance-name-or-IP-address:44368

    Accept the licence terms. The appliance checks internet connectivity (select Setup proxy if you use one; only HTTP proxy is supported), time sync with internet time, and installs the latest updates. For VMware agentless migration it also checks the VDDK is extracted to C:\Program Files\VMware\VMware Virtual Disk Development Kit.

    You should see: Each prerequisite shows a green tick.
  7. 7

    Register the appliance with the project key

    Where: Appliance configuration manager > Register with Azure Migrate

    Paste the project key. Select Login, then in Continue with Azure Login select Copy code & Login. In the new browser tab paste the device code and sign in with your Azure username and password (sign-in with a PIN is not supported). Use the same account that generated the key.

    You should see: The appliance shows it is registered. Select View details to see the project and subscription.
  8. 8

    Add vCenter Server or server credentials

    Where: Appliance configuration manager > Manage credentials and discovery sources

    VMware: in Step 1 select Add credentials, give them a friendly name and enter the vCenter discovery account. In Step 2 select Add discovery source and enter the vCenter IP or FQDN (port 443 by default). You can add up to 10 vCenter Servers per appliance. Physical: add credentials with source type Windows Server, Linux Server (Password-based) or Linux Server (SSH key-based), then Add discovery source with each server's IP/FQDN (single item, multiple items or Import CSV) and select Save.

    You should see: The appliance validates each source and shows the result in the Validation status column. Select a Failed status to see the error.
  9. 9

    Start discovery

    Where: Appliance configuration manager, bottom of the page

    Select Start discovery. Check progress in the sources table.

    You should see: Discovery status changes to in progress. Microsoft says discovery across 10 vCenter Servers takes about 20 to 25 minutes, and installed application inventory for 500 servers about one hour to appear in the portal.
From experience

Expert tips

Size the appliance VM properly

For VMware, Microsoft says the host must give the appliance 32 GB RAM, 8 vCPUs, about 80 GB of disk, an external virtual switch and internet access directly or through a proxy. An undersized appliance is a common reason for slow or incomplete discovery.

Use a read-only vCenter account with guest operations

Discovery needs only a read-only vCenter account. To also get installed applications and agentless dependency analysis, add the Guest operations privileges and propagate to children; on vCenter 7.x and later clone the Read-only role and add the privileges to the clone. VMware Tools 10.2.1 or later must be running on the servers.

Open the URLs and fix the clock first

Allow all the URLs Microsoft lists for the appliance, including aka.ms/*, and enter the proxy in the configuration manager if you have one. The time check fails if the clock is more than five minutes out; run w32tm /resync on the appliance.

Set expectations on timing

Microsoft says discovery across 10 vCenter Servers on one appliance takes about 20 to 25 minutes, installed applications for 500 servers take about an hour to appear, software inventory repeats every 12 hours, and web apps and SQL Server data appear within 24 hours. Leave the appliance running: it collects performance data continuously, and performance-based sizing is better the longer it runs.

Add every credential type you need

You can add domain, Windows, Linux (password or SSH key) and SQL Server credentials, several of each. Add all the sets your estate uses rather than relying on one admin account, and keep each one least-privilege.

Check it worked

How to confirm it worked

  • In the Azure portal open your project > Servers, databases and web apps > Azure Migrate: Discovery and assessment and check the discovered servers count is above zero.

  • In the configuration manager, each vCenter Server or server in the sources table shows its discovery status.

  • Web apps and SQL Server instances should begin to appear within 24 hours of starting discovery.

Undo

How to reverse it

Rollback:

Stop discovery by shutting down the appliance VM or server and deleting it from vSphere or Hyper-V. Delete the project (and its resource group if it only holds Azure Migrate resources) in the Azure portal. Remove the vCenter discovery account from Global Permissions in vSphere. Export any assessment reports you need before deleting the project.

Troubleshooting

Errors you might see

Failed to connect to the Azure Migrate project

Cause: The account signed in to the configuration manager is not the one that generated the project key and lacks the required roles.

Fix: Sign in with the account that generated the key, or give your account the required Azure Migrate roles.

Project key error during registration (symptom)

Cause: The wrong key was copied, or the key is for a different cloud or scenario.

Fix: In the project select Discover > Manage existing appliance, choose the appliance and copy its key. Check the cloud type and appliance type shown at the top of the configuration manager.

Time sync check fails

Cause: The appliance clock is more than five minutes off.

Fix: Fix the date and time in Control Panel, or run w32tm /tz and w32tm /resync in an admin command prompt.

Unable to connect to vCenter Server

Cause: The appliance cannot resolve the vCenter name or the port is wrong (443 is used by default).

Fix: Ping vCenter from the appliance, try the IP address, confirm the correct port and that vCenter is running, and update the appliance.

Validation failed (domain credentials)

Cause: The domain name or credentials are wrong, or the domain is unreachable from the appliance.

Fix: Check the details, confirm the domain resolves from the appliance, select Edit, then Revalidate credentials.

FAQ

Questions

Can I discover AWS or Google Cloud VMs?

Yes. Treat them as physical servers: choose Physical or other (AWS, GCP, Xen, etc.) and use the installer script.

Can one appliance discover several vCenter Servers?

Yes, up to 10 vCenter Servers per appliance.

Are LDAP accounts or PuTTY keys supported?

No. Microsoft says LDAP accounts are not supported for discovery, and SSH keys with a passphrase or created by PuTTY are not supported.

Is the OVA available in Azure Government?

No. Microsoft says the OVA option is not supported in Azure Government; use the script instead.

Sources

Official sources

Vendors change menus and requirements. Confirm on the source before you rely on a detail. Last checked 4 Nov 2026.