Azure / Azure/azure-cli

Create two configurations for the interactive serial console when customers are configuring their VM settings

Open
#32,813 6 comments 0 reactions 1 assignee Claimed by @yanzhudd View on GitHub
Azure CLI Team feature-request Security-Issue
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 2h
Merged PRs (30d)
60

Description

### Preconditions

- [x] No need to upgrade Python SDK or the Python SDK is ready.

### Related command

_No response_

### Resource Provider

Confidential Virtual Machines (CVM)

### Description of Feature or Work Requested

Any traffic on the serial console is accessible to the Azure Host in clear text. This includes any secrets logged during boot diagnostics, the username and password that a customer may enter to log into their VM, and any traffic post login.

Currently the serial console is disabled by default but can be re-enabled by Azure operators without customer knowledge or consent. Customers can add a check for the disabled state of the serial console in a custom SKR policy. This requires work and extra cost on their behalf.

Core OS has enabled 3 configurable settings for the interactive serial console. These settings will be chosen by the customer when configuring their VM from the CLI, and hence we need CLI changes to support these new configurations,

### Minimum API Version Required

N/A

### Swagger PR link / SDK link

PR from Core OS team - [link](https://microsoft.visualstudio.com/OS/_git/os.2020/pullrequest/14629550)

### Request Example

_No response_

### Target Date

2026-07-31

### PM Contact

ananyagarg

### Engineer Contact

gaswamy

### Additional context

PM spec - [here]( https://microsoft.sharepoint.com/:w:/t/ACCS826/IQD0QeUn7a5wRrIIqWAtWFdfAV-HJVLJGxHzZYS9yNul6qI?e=TTnkkO)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.