Month: October 2024
Monitoring traffic to and from private endpoints
looking to see what IP’s are connecting (or attempting) to connect to a PaaS resource on a private endpoint.
have tried virtual flow logs, but does not appear to show anything.
any tips?
looking to see what IP’s are connecting (or attempting) to connect to a PaaS resource on a private endpoint.have tried virtual flow logs, but does not appear to show anything. any tips? Read More
Performing ETL in Real-Time Intelligence with Microsoft Fabric
Introduction
In today’s data-driven world, the ability to act upon data as soon as its generated is crucial for businesses to make informed decisions quickly. Organizations seek to harness the power of up-to-the-minute data to drive their operations, marketing strategies, and customer interactions.
This becomes challenging in the world of real-time data where it is not always possible to do all the transformations while the data is being streamed. Therefore, you must come up with a flow that does not impact the data stream and is also quick.
This is where Microsoft Fabric comes into play. Fabric offers a comprehensive suite of services including Data Engineering, Data Factory, Data Science, Real-Time Intelligence, Data Warehouse, and Databases. But today, we are going to focus on Real-Time Intelligence.
Use-Cases
This set up can be used in scenarios where data transformation is needed to be used in downstream processing/analytical workload. As example of this would be to enable OneLake availability in KQL table and use that data to be accessed by other Fabric engines like Notebooks, Lakehouse etc. for training ML models/analytics.
Another example let’s say you have a timestamp column in your streaming data and you would like to change its format based on your standard. You can use the update policy to transform the timestamp data format and store it.
Overview
Fabric Real-Time Intelligence supports KQL database as its datastore which is designed to handle real-time data streams efficiently. After ingestion, you can use Kusto Query Language (KQL) to query the data in the database.
KQL Table is a Fabric item which is part of the KQL Database. Both these entities are housed within an Eventhouse. An Eventhouse is a workspace of databases, which might be shared across a certain project. It allows you to manage multiple databases at once, sharing capacity and resources to optimize performance and cost. Eventhouses provide unified monitoring and management across all databases and per database.
Figure 1: Hierarchy of Fabric items in an Eventhouse
Update policies are automated processes activated when new data is added to a table. They automatically transform the incoming data with a query and save the result in a destination table, removing the need for manual orchestration. A single table can have multiple update policies for various transformations, saving data to different tables simultaneously. These target tables can have distinct schemas, retention policies, and other configurations from the source table.
Scope
In this blog, we have a scenario where we will be doing data enrichment on the data that lands in the KQL table. In this case, we will be dropping the columns we don’t need but you can also do other transformations supported in KQL on the data.
Here we have a real-time stream pushing data to a KQL table. Once loaded into the source table, we will use an update policy which will drop columns not needed and push the data of interest to the destination table from the source table.
Prerequisites
A Microsoft account or a Microsoft Entra user identity. An Azure subscription isn’t required.
Fabric Capacity. If you don’t have one, you can sign-up for Fabric Trial Capacity.
A KQL database in Real-Time Intelligence in Microsoft Fabric.
Creating sample data stream
In the Real-Time Intelligence experience, create a new event stream.
Under source, add new source and select sample data.
Continue configuring the stream. I am using the Bicycles sample data stream in this blog.
Select Direct ingestion as the Data Ingestion Mode for destination.
Select your workspace and KQL database you have created as a prerequisite to this exercise for the destination.
You should be seeing a pop-up to configure the database details and continue to configure the table where you need to land the data from the stream.
Configuring KQL Table with Update Policy
Open the Eventhouse page in Fabric. There you should now be able to preview the data that is being ingested from the sample data stream.
Create a new destination table. I used the following KQL to create the new table (destination):
.create table RTITableNew (
BikepointID: string,Street: string, Neighbourhood: string, No_Bikes: int, No_Empty_Docks: int )
Under the Database tab, click on new and select Table Update Policy.
You can edit the existing policy format or paste the one below that I used:
NOTE: RTITable is source and RTITableNew is the destination table.
.alter table RTITable policy update “`[
{
“IsEnabled”: true,
“Source”: “RTITable”,
“Query”: “RTITable | project BikepointID=BikepointID, Street=Street, Neighbourhood=Neighbourhood, No_Bikes=No_Bikes, No_Empty_Docks=No_Empty_Docks “,
“IsTransactional”: true,
“PropagateIngestionProperties”: false,
“ManagedIdentity”: null
}
]“`
The above policy drops the Longitude and Latitude columns and stores the rest of the columns in the destination table. You can do more transformations as per your requirements, but the workflow remains the same.
After running the above command, your destination table will start populating with the new data as soon as the source table gets data. To review the policy on the destination table, you can run the following command:
.show table <table-name> policy update
Conclusion
To summarize, we took a real-time data stream, stored the data in a KQL database and then performed data enrichment on the data and stored in a destination table. This flow caters the scenarios where you want to perform processing on the data once its ingested from the stream.
Further Reading and Resources
Common scenarios for using table update policies – Kusto | Microsoft Learn
Create a table update policy in Real-Time Intelligence – Microsoft Fabric | Microsoft Learn
Microsoft Tech Community – Latest Blogs –Read More
Join the Unlocking ROI: Forrester TEI Study Insights on Microsoft 365 Copilot for SMBs webinar
We are excited to announce an upcoming webinar that will delve into the findings of the Forrester Total Economic Impact™ (TEI) study on Microsoft 365 Copilot for Small and Medium-sized Businesses (SMBs). Led by @GabeHo (Senior Product Marketing Manager, Microsoft 365 Copilot SMB) and @KaylaPatterson (Product Marketing Manager, Microsoft 365 Copilot SMB), this event promises to be a valuable opportunity for SMBs to learn about the significant business value and return on investment (ROI) that can be achieved by implementing Microsoft 365 Copilot. This webinar is a must-attend for SMBs looking to enhance their digital capabilities and achieve significant ROI. By attending, you will gain valuable insights into how Microsoft 365 Copilot can transform your business operations and drive growth. Don’t miss this opportunity to learn from industry experts and discover the potential of Microsoft 365 Copilot for your organization.
Event Details:
Date: October 31st, 2024
Time: 9am – 10am Pacific
Location: https://aka.ms/SMBROIEvent
What to Expect:
Introduction to Microsoft 365 Copilot: Discover how Microsoft 365 Copilot leverages artificial intelligence to enhance productivity and streamline operations across various Microsoft 365 applications, including Word, Excel, PowerPoint, Outlook, and Teams. This session will provide an overview of the capabilities and benefits of Microsoft 365 Copilot for SMBs.
Forrester TEI Study Findings: Gain insights into the projected ROI for SMBs using Microsoft 365 Copilot. The Forrester TEI study offers a comprehensive analysis of the cost savings and business benefits that SMBs can achieve by adopting this innovative solution.
Making it Real: Learn from real-world examples of SMBs that have successfully implemented Microsoft 365 Copilot to drive business growth. This segment will cover practical examples, the art and science of prompting, and demonstrate how Microsoft 365 Copilot can work for your business.
Interactive Q&A Session: Engage with our experts during an interactive Q&A session. This is your chance to get your questions answered about the study and the benefits of Microsoft 365 Copilot for your business.
We look forward to seeing you at the webinar and helping you unlock the full potential of Microsoft 365 Copilot for your SMB!
About the Presenters
Gabe Ho, Senior Product Marketing Manager, Microsoft 365 Copilot SMB
Gabe Ho is a key member of the Microsoft 365 Copilot SMB team, responsible for driving product marketing strategies and helping SMBs unlock the value of AI-driven productivity solutions.
Kayla Patterson, Product Marketing Manager, Microsoft 365 Copilot SMB
Kayla Patterson is involved in shaping the product marketing efforts for Microsoft 365 Copilot for SMBs, focusing on delivering impactful insights and benefits to businesses.
Secure Your Spot – RSVP for a Reminder and Be There Live
RSVP on the event page to receive a reminder so you can join us live. Don’t miss the opportunity to hear from experts and participate in an interactive Q&A during the event.
Microsoft Tech Community – Latest Blogs –Read More
Techbayanihan 2024: Celebrating Innovation & Community
Microsoft Most Valuable Professional (MVP), Doher Drizzle Pablo, launched in the inaugural Techbayanihan 2024 in the Philippines, an event embracing the spirit of “bayanihan”, meaning community cooperation. It brought together diverse speakers and attendees to discuss and learn about the possibilities of Copilot.
Delivering events on this scale requires a collective effort. Here, we share a story by Floris Wayvell Tubale, a community leader and volunteer supporting Drizzle’s vision for Techbayanihan 2024.
***
In the heart of Manila, Philippines, in early August 2024, something extraordinary happened. Techbayanihan 2024: “Copilot Para Sa Bayan” was more than just a tech conference; it was a vibrant celebration of innovation, collaboration, and community spirit. Hosted at Citadines Bay City Manila, this two-day event brought together 369 passionate individuals—tech enthusiasts, industry leaders, Microsoft clients, partners, and students—from across the Philippines. Techbayanihan 2024 showcased the incredible possibilities when local talent meets global technology with Microsoft.
A Vision Born from a Global Perspective
The seeds of Techbayanihan 2024 were planted in the mind of Doher Drizzle Pablo during a transformative year in 2023. That year, she had the opportunity to travel across North America and Europe, immersing herself in the vibrant tech communities of those regions. As she engaged with these global tech events, a dream began to form: to bring that same level of engagement, innovation, and community spirit back home to the Philippines.
This dream started taking shape when Drizzle was invited by Eric Archer and Ashley Felts from the BizApps Community team to be a panelist at the Microsoft Power Platform Conference 2023. There, she shared the success of the Philippine community, which sparked a conversation with fellow MVP Ahmed Salih. A quick chat after the session led to the first inklings of a collaboration, with Ahmed expressing his eagerness to support Drizzle’s vision for the Philippines.
The momentum continued to build at the Community Summit North America 2023. On the last day of the event, Drizzle found herself in conversation with Senthamil Selvan, another MVP, about bringing a similar experience to the Philippines. As if by fate, Cecile Dinh, another MVP, introduced Drizzle to Kristoffer Ruyeras, another Filipino MVP at the event, who quickly joined in the discussion. This serendipitous meeting solidified the resolve to make Techbayanihan a reality.
Building the Foundation: Collaboration and Teamwork
With the vision clear, the real work began in January 2024. A dedicated team of organizers was formed, meeting every Saturday from January to August to meticulously plan, organize, and execute the event. The organizing team was spearheaded by Doher Drizzle Pablo with Abraham Avila Jr., and MVPs Ahmed Salih, Cecile Dinh, Kristoffer Ruyeras, and Senthamil Selvan.
The Global Collaboration
Techbayanihan 2024 was not just a local event; it was a collaboration across continents. The support from the Microsoft BizApps Community Team—Eric Archer and Ashley Felts, the BizApps APAC Team—Panjaporn Vittayalerdpun, Harshita Dwivedi, Mon Lucksamon Sivapattarakumpon and Vivian Lee, and Microsoft MVPs from North America, Europe, and APAC regions, made this event a truly global effort. It was a powerful demonstration of what can be achieved when passionate individuals from around the world come together to support a shared vision.
Day 1: The Dawn of a New Chapter
The first morning of Techbayanihan 2024 began with a warm and heartfelt welcome from our host, Gracey. As the room filled with anticipation, the stage was set for a day of inspiration and discovery.
The keynote speaker, Peter Maquera, CEO of Microsoft Philippines, took to the stage with a message that resonated deeply with every attendee: the future of technology is here, and it is up to us to harness its power for the greater good. Peter’s address wasn’t just an update on Microsoft’s latest trends and technologies—it was a call to action. He spoke of innovation not just as a corporate strategy but as a tool for empowerment, a means to uplift communities, and a pathway to personal and professional growth. This was the perfect introduction to a day packed with expert-led sessions designed to turn these ideas into actionable insights.
Empowering Through Technology: Session Highlights
The day unfolded with sessions that demonstrated the transformative potential of Microsoft’s tools across various domains:
Empowering Customer Engagement with Dynamics 365 Copilot: Luis Santos was joined by Ian Del Caballero from Hitachi and Sandeep Walia from Unify Dots who shared strategies that put the customer at the heart of business operations, showcasing how Dynamics 365 Copilot can revolutionize customer engagement.
Optimizing Finance and Operations with Dynamics 365 Copilot: Microsoft Business Applications Specialist, Paul Santiago joined by Gian Carlo Pacheco from Hitachi and Sandeep Walia from Unify Dots, took the stage to explore how finance and operations could be streamlined, turning complex processes into seamless workflows.
Customer Success Sharing Session: Ahmed Salih and Microsoft Regional Director Paul Soliman, moderated by Microsoft’s Harshita Dwivedi, shared powerful stories of how customer success is achieved through practical strategies and relentless focus on delivering value.
The Future of Low-Code Innovation: Power Platform Technical Specialist, Angelique de Castro joined by Sandeep Waghmare from PWC and MVP Paul Soliman from Hacktiv demonstrated how Power Platform Copilot is not just a tool but a catalyst for rapid innovation, enabling businesses to create solutions faster than ever before.
Microsoft 365 Copilot and Power Platform Adoption: Angelique continued by delving into the governance strategies that ensure these powerful tools are integrated effectively into any organization, driving both innovation and efficiency.
Ask the Experts Session: In a dynamic panel, Doher Drizzle Pablo, Elaiza Benitez, Paul Soliman, and Yong Caballero answered pressing questions, offering their insights on the latest trends, challenges, and opportunities in the tech world.
Microsoft Learn – Skilling Challenge: To close the day, Ahmed Salih and Cecile Dinh provided a roadmap for continuous learning, encouraging participants to unlock their potential through ongoing education and skill development.
As the sun set on the first day, the energy in the room was electric. Attendees left not just with notes and business cards but with a renewed sense of purpose and the tools to make their visions a reality.
Day 2: A Deep Dive into AI and Data Analytics
Day 2 began with the same enthusiasm and a palpable sense of community. The morning sessions were a deep dive into the practical applications of AI and data analytics, each session designed to build on the foundation laid the previous day:
Copilot for Microsoft 365: Establishing a Robust Data Foundation: Mariel Sabandal led the way with a session on how to leverage Microsoft 365 Copilot to build strong, reliable data foundations—a critical component for any organization aiming to thrive in the digital age.
Microsoft Fabric for Dataverse Analytics and Reporting: Scott Sewell’s remote session was a masterclass in transforming data into actionable insights, offering attendees a glimpse into the future of analytics with Microsoft Fabric.
Dashboard in an Hour: MVP Anthony Cua captivated the audience with a hands-on session that empowered even beginners to create impactful dashboards within an hour, demystifying data visualization.
A Beginner’s Journey Through Microsoft Power Platform: Ahmed Salih provided a comprehensive introduction to the Power Platform, making complex technologies accessible and exciting for newcomers.
The afternoon sessions continued to build on this momentum:
Integrating Azure OpenAI with Power Apps and Power Automate: Charven Ligan showcased the cutting-edge ways AI can be integrated into everyday applications, taking automation and efficiency to new heights.
Mastering Power Platform App Development with Azure DevOps: Asif Waqar’s session was a deep dive into the technicalities of application lifecycle management, demonstrating how Copilot can be leveraged with Azure DevOps.
Grounding Prompts with Dynamics 365 Sales Data: Microsoft Cloud Advocate, Elaiza Benitez’s practical session on integrating Dynamics 365 Sales data with Microsoft Copilot was a hit, offering valuable techniques for maximizing the tool’s potential.
GitHub Copilot in Azure Data Studio and Building RAG Solutions: MVPs Pio Balistoy and Ziggy Zulueta’s sessions explored the integration of GitHub Copilot within Azure Data Studio and building robust solutions using Azure AI Studio.
The Fusion of Azure AI with Microsoft’s Ecosystem: MVP Senthamil Selvan wrapped up the technical sessions with an exploration of how Azure AI converges with Microsoft’s broader ecosystem, providing attendees with a holistic view of what’s possible.
Career Talk with Joel Garcia: The day concluded with Joel Garcia offering invaluable career advice, inspiring participants to not only navigate their career paths but to lead with purpose and passion.
The Power of Community: Networking and Recognition
Throughout both days, the spirit of bayanihan—the Filipino tradition of communal unity—was alive and well. Participants engaged with sponsors and partners, explored cutting-edge solutions at the exhibitor booths, and, most importantly, built connections that would last long after the event.
Appreciation and Acknowledgments: A Collective Effort
Techbayanihan 2024 was not the work of one person but the result of a community coming together with a shared vision. We owe the success of this event to the dedication and hard work of many:
Organizers: Your meticulous planning and commitment ensured that every aspect of the event ran smoothly. Your vision and execution made Techbayanihan 2024 a reality.
Volunteers and Staff: Your tireless efforts behind the scenes did not go unnoticed. From setting up sessions to ensuring that every attendee felt welcomed, your contributions were invaluable.
Sponsors and Partners: A special thank you to our sponsors—Acumant, AvePoint, Creative Dynamix Solutions Inc., Hacktiv, Hitachi Solutions, PWC, Unify Dots—and our partners—Data Sense Analytics, Power BI Pilipinas, Project KKK, Rotaract Club of Naga, JCI Naga. Your support was critical in bringing this event to life and providing our attendees with a rich and engaging experience.
Speakers: Your expertise and willingness to share knowledge enriched the event. You inspired us with your insights, and we are grateful for your contribution to the learning and growth of the community.
Attendees and Participants: Your enthusiasm and active participation were the heart of Techbayanihan 2024. Your eagerness to learn, connect, and innovate embodies the spirit of bayanihan, and we are honored to have had you join us.
A Future Bright with Possibilities
As the final notes of Techbayanihan 2024 faded, the feeling in the air was one of excitement and optimism. This event wasn’t just a gathering—it was the beginning of something much larger. With AI and Microsoft’s Copilot leading the way, the Philippines is poised to be at the forefront of technological innovation. The success of Techbayanihan 2024, under the visionary leadership of Drizzle Drizzle Pablo, is a testament to what can be achieved when talent, technology, and community come together.
We leave Techbayanihan 2024 not just with knowledge but with inspiration. The journey doesn’t end here; it continues in the projects we’ll start, the innovations we’ll pioneer, and the communities we’ll build. Together, we’re shaping the future of technology, not just for ourselves, but for the generations to come.
Microsoft Tech Community – Latest Blogs –Read More
Favorite Copilot Prompts
(Amber Plumb interviewing Michael Morales and Allison Sweet)
The power of M365 Copilot is transforming the way our support team operates, making us more productive and efficient than ever before. By leveraging the advanced capabilities of M365 Copilot, we can streamline our workflows, provide faster and more accurate assistance to our customers, and ultimately enhance the overall customer experience. Our team is utilizing M365 Copilot in various innovative ways to ensure we deliver top-notch support and stay ahead in the ever-evolving digital landscape.
Hi Michael – What is your role at Microsoft?
I’m a Principal Escalation Engineer for Copilot, I work towards ensuring our customers have the best possible support experience using Copilot and engaging with our engineering teams when necessary.
Can you share one of your favorite prompts when using Copilot for Microsoft 365 in your daily work?
The setup:
I like to prepare for my meetings the day before, so I asked Copilot to list out my meetings in a bulleted format. Then, I copy the list to OneNote to write notes for each meeting.
Here is the prompt:
”I am preparing for my Monday meetings. I would like to have all my Monday meetings organized in chronological order in a simplified view. Looking at my calendar, provide heading that says “Monday” and under the heading using the title of the meeting for the main bullet. Add each attendee up to 10 attendees as sub bullets. Do not include the time of the meeting.”
Here’s a snippet of the output, which I copy to OneNote and jot down top-of-mind questions or things I want to discuss in the meeting. Takes 5 min usually, and having this list helps me organize my thoughts. Copilot saves me time because I don’t have keep going from my Calendar back to OneNote to write down each meeting title in chronological order.
Output:
Here are your meetings, tasks, and activities for the upcoming Monday, along with specific actions you should take to prepare, including documents for review:
Meeting/Task/Activity
Preparation Action
Microsoft Teams Premium features review[1]
Familiarize yourself with the Green room feature and meeting options.
Copilot & Microsoft Teams Rooms presentation[2]
Review the standard materials provided in the presentation deck.
V-Team Meeting[4]
Prepare for the workstream tables discussion and the V-Team structure review.
Champion meeting[5]
Understand the event plan and the Copilot Daily Habits session.
FY25 H1 News Review Planning[6]
Look into the Copilot Studio “agents” public preview and the D365 Copilot updates.
Release Planning and Ops Readiness review[7]
Check the Copilot Diagnostic Update and the Copilot Extensibility Support progress.
FY25 Security CSU Landing Deck discussion[8]
Go through the Security CSU content and the QuickStarts for deeper readiness.
CX Staff Meeting[9]
Review the program management and health review processes.
2nd AI and Productivity Report analysis[10]
Study the report on the benefits of AI integration in the workplace.
Prompt Purpose:
It’s Friday, you want to relax over the weekend, but you don’t want any surprises on Monday morning. Here’s a quick check of what’s coming on Monday so you can see what and how much preparation might be needed after the weekend. And relax.
Prompt:
“List my meetings, tasks and activities for this coming Monday in a table. In a second column, recommend any specific actions I should take to prepare for the meetings, for example if there are documents supplied for review; also provide the links.”
But then the question I had was can I save the prompt for later use? And the answer was yes. Here’s the way to save your prompt below. I found this very helpful.
You can save your Copilot prompts for later use. Here’s how you can do it:
1. Navigate to Microsoft365.com/chat.
2. Write your prompt in the input box, hit enter to allow your prompt to run.
3. After the response loads, hover over the prompt and click “Save prompt”.
4. Give your prompt a title and click on the “Save” button.
5. Your prompt will be saved in your Copilot Lab. You can view your saved prompts in BizChat or by navigating to the Copilot Lab website and clicking on the “Prompts to Try” tab.
Copilot:
Hi Allison – What is your role at Microsoft? I am a Senior Technical Advisor, working closely with the Copilot support leadership team.
Can you please share one of your favorite prompts when using Copilot for Microsoft 365 in your daily work?
Hey Everyone – sharing this Copilot tip to help with meeting summaries.
I use this to help consolidate notes from our business review meetings. With a lot of different speakers, it’s handy to be able to go back and ask Copilot for a summary specific to a person / topic. I prefer this method over the overall Copilot summary because I can go back and filter for specific points to include within the MBR notes.
I’m using the Copilot Extensibility meeting as an example below:
First step is to double click on a meeting.
Click on the ‘recap’ tab and form there you’ll see the ‘Copilot’ button on the right
Here is where you can ask Copilot to help summarize specific speakers and/or topics.
For this example, I asked Copilot to help summarize in 2-3 bullets what Amber spoke about regarding Copilot + Extensibility.
Lastly, if you’re looking to have some fun with your team, try the following prompt:
Prompt: Look at my Teams chats, meetings and emails I’ve sent in the last [two weeks].
Based on the above analysis, what Star Wars character would represent my style of work best, and why?
What would my abilities and personality flaws be? Can you format that as a Star Wars character dossier for me?
Also give me a Star Wars character friend group based on my recent interactions with my current top [five] collaborators.
Provide them with different types of Star Wars characters, include their real name, Star Wars type, home planet, strengths and weaknesses, and why they are my friends and how they help me in my work here at Microsoft. Also identify my rival based on recent interactions with my colleagues and a short story of how we became nemeses but ended up being friends.
List my real name [I am a he/him], my most similar existing Star Wars Character, and include the rest of the information formatted and edited in a dossier style.
Output (subset):
Amber Plumb’s Star Wars Character Dossier
Real Name: Amber Plumb
Star Wars Character: Princess Leia Organa
Home Planet: Alderaan
Abilities:
Leadership: You are a strong leader, skilled diplomat, and fierce fighter. You have a keen sense of justice and a passion for freedom.
Diplomacy: You are not afraid to speak your mind and challenge authority.
Strategic Thinking: You excel in planning and executing complex strategies.
Personality Flaws:
Stubbornness: Your determination can sometimes come across as stubbornness, making it difficult to compromise.
High Expectations: You set high standards for yourself and others, which can lead to frustration when things don’t go as planned.
About the Authors
@Amber Plumb is a Support Planner on the CSS Modern Work Supportability team focused on Copilot, Viva Suite and other Microsoft 365 applications.
Michael Morales is a Principal Escalation Engineer in CSS focusing on Copilot for Microsoft 365.
Allison Sweet is a Senior Technical Advisor in CSS currently focused on Copilot for Microsoft 365.
The CSS Modern Work Supportability Team delivers innovative self-help solutions and diagnostics, in-service enhancements, and support programs to help customers get maximum value from their Microsoft 365 commercial subscriptions and create an easy-to-use, connected support experience.
Microsoft Tech Community – Latest Blogs –Read More
UPDATE: Azure Pass retirements
UPDATED: Azure Pass Retirements
Updated release dates for SC-200 and SC-300
October 1st post has been removed
As a part of the Microsoft security efforts, we are continuing to remove the dependency on Azure passes and are expecting that all Azure Passes will be removed from courses by end of October 2024. As a part of this effort please note the following changes below. The Authorized Lab Hosters will be working on removing Azure Passes from courses as updates gets released.
Course
Note
AZ-140T00: Configuring and Operating Microsoft Azure Virtual Desktop
Course released without use of Azure Pass
AZ-1005: Configuring Azure Virtual Desktop for the Enterprise
Course retires on Sept 30th
AZ-2001: Implement security through a pipeline using Azure DevOps
Release planned for Oct 11th
Updated release planned for Oct. 25th
AZ-2008: DevOps Foundations: The Core Principles and Practices
Release planned for Oct 11th
Updated release planned for Oct. 25th
AZ-400T00: Designing and Implementing Microsoft DevOps solutions
Release planned for Oct 11th
Updated release planned for Oct. 25th
PL-400T00: Microsoft Power Platform Developer
Course released without use of Azure Pass
PL-500T00: Microsoft Power Automate RPA Developer
Course released without use of Azure Pass
SC-200T00: Microsoft Security Operations Analyst
Release now planned for Oct. 25th
Updated release planned for November 1st
SC-300T00: Microsoft Identity and Access Administrator
Still investigating how to retire Azure Pass
Release planned for November 1st
Should you have any further questions, please reach out to your Authorized Lab Hoster.
Please note: This is not a support forum. Only comments related to this specific blog post content are permitted and responded to.
Microsoft Tech Community – Latest Blogs –Read More
Support tip: Always unenroll from MDM when unjoining and rejoining Microsoft Entra hybrid devices
While not the preferred setup, Windows Autopilot with Microsoft Entra hybrid join provides the ability to automatically connect devices to the cloud from an on-premises Active Directory. For guidance on whether to use hybrid join, refer to the article: Microsoft Entra Joined vs. Hybrid Microsoft Entra Joined in Cloud-Native Endpoints.
Recently, we identified an issue affecting Microsoft Entra hybrid devices which also impacts Windows Autopilot hybrid deployment. It occurs when hybrid devices are unjoined and rejoined to Microsoft Entra without first being unenrolled from mobile device management (MDM). This disruption can impact the device experience for users.
What happens when hybrid devices are rejoined?
The problem arises when Microsoft Entra hybrid joined devices are unjoined and rejoined after they’ve been enrolled. If the device isn’t unenrolled from MDM before rejoining, critical device properties can become misaligned. The device’s policies and certificates are removed because the system no longer recognizes the device’s original object ID, leading to inconsistencies in how settings and software are applied. This includes attributes like the OrderID (important for Windows Autopilot) and OS properties that Intune uses for dynamic group targeting.
Failing to properly manage the unjoin-rejoin process can result in:
Device targeting issues where policies and configurations don’t apply correctly.
Disruptions in Windows Autopilot configurations, potentially leaving devices mismanaged or without the necessary apps and settings.
What’s the impact of not unenrolling from MDM?
When a hybrid device is unjoined and rejoined without being unenrolled from MDM, Microsoft Entra creates a new device object with a new object ID, but retains the same device ID. This can cause problems with how Intune manages compliance and policy application, including:
Policy removal:
Static Groups: Policies assigned to static groups will be removed from the device because the new object ID breaks the link to previous group memberships.
Dynamic Groups: Policies assigned through dynamic groups can be removed for up to two weeks until the new device object is synced, restoring the device’s group memberships.
Conditional Access policies can block access to corporate resources: Newly created Microsoft Entra device objects are treated as non-compliant by default, meaning users may be blocked from accessing corporate resources. It may take up to two weeks for Intune to fully re-evaluate the device’s compliance status and apply Conditional Access policies, causing potential downtime to the user.
Best Practice: Unenroll from MDM before rejoining
To avoid these issues, we recommend that you avoid unjoining and rejoining hybrid devices as this process can introduce complications and disruption to your users. The hybrid Microsoft Entra join process relies heavily on the integrity and consistency of device objects in Microsoft Entra. Unjoining and rejoining hybrid devices from your MDM causes considerable issues, including the removal of critical policies and applications.
If you need to unjoin and rejoin a hybrid device, it’s critical to unenroll hybrid devices from MDM before unjoining and rejoining them to Microsoft Entra. This ensures a smoother re-enrollment process and maintains the integrity of your device policies, apps, and settings.
If you have any questions or feedback, leave a comment on this post or reach out on X @IntuneSuppTeam.
Microsoft Tech Community – Latest Blogs –Read More
Business Central Team Member restriction
Hello
Apologies if this is not the correct board for this question.
Can someone please help explain what is meant by the following :
“Business Central Team Members application module may be customized with maximum 15 additional
tables (custom tables or standard Dataverse tables) available to the Business Central Team Members
license.”
Does this 15 tables restriction apply only if a user needs write/edit access within a predefined scenario?
If a user needs Read-Only access, they don’t have to worry about this restriction?
Thank you in advance.
HelloApologies if this is not the correct board for this question.Can someone please help explain what is meant by the following : “Business Central Team Members application module may be customized with maximum 15 additionaltables (custom tables or standard Dataverse tables) available to the Business Central Team Memberslicense.” Does this 15 tables restriction apply only if a user needs write/edit access within a predefined scenario?If a user needs Read-Only access, they don’t have to worry about this restriction? Thank you in advance. Read More
Questions about Windows Server 2008 SP2 and Windows Server 2008 R2 SP1 support plans.
I have known that all the supports of Windows Server 2008 SP2 and Windows Server 2008 R2 SP1 has ended at Janauary 9th, 2024, the date where mentioned in Microsoft Lifecycle Policy.
But I have found some updates which released after Janauary 9th, 2024, in Microsoft Update Catalog, and these updates will provide to these Operating System which have 4 years ESU license.
So why does Windows Server 2008 SP2 and Windows Server 2008 R2 SP1 still can receive these updates after Janauary 9th, 2024? Does these Operating System has any additional support plans after that day? When will these OS doesn’t receive any updates?
I have known that all the supports of Windows Server 2008 SP2 and Windows Server 2008 R2 SP1 has ended at Janauary 9th, 2024, the date where mentioned in Microsoft Lifecycle Policy. But I have found some updates which released after Janauary 9th, 2024, in Microsoft Update Catalog, and these updates will provide to these Operating System which have 4 years ESU license. So why does Windows Server 2008 SP2 and Windows Server 2008 R2 SP1 still can receive these updates after Janauary 9th, 2024? Does these Operating System has any additional support plans after that day? When will these OS doesn’t receive any updates? Read More
What do i use to make a inline editable table for razor page?
Datatable.net edit function costs money, so I’m trying to make my own table with inline editing with Razor page, but I don’t know what is the modern way to do it. Razor is not so modern but I don’t think I want to use jQuery for it if there’s a better way.
I read some posts and there are a lot of answers like Ajax, jQuery, fetch API,… and I also found a library called Hydro for Razor that mimics SPA functionality, but I don’t know if it’s applicable to this task.
Can someone point me in a direction?
Datatable.net edit function costs money, so I’m trying to make my own table with inline editing with Razor page, but I don’t know what is the modern way to do it. Razor is not so modern but I don’t think I want to use jQuery for it if there’s a better way.I read some posts and there are a lot of answers like Ajax, jQuery, fetch API,… and I also found a library called Hydro for Razor that mimics SPA functionality, but I don’t know if it’s applicable to this task.Can someone point me in a direction? Read More
Sassa Grant Status Check Help
Hi Beautiful SA People,
From past few days, trying to check whether SASSA Status Check is really helping you are not. It is great social welfare program in the history of South Africa. Would love to know more about it. Is it really helping you? If yes then how? If not, then how it should be?
Thanks
Hi Beautiful SA People,From past few days, trying to check whether SASSA Status Check is really helping you are not. It is great social welfare program in the history of South Africa. Would love to know more about it. Is it really helping you? If yes then how? If not, then how it should be?Thanks Read More
NVA Session Affinity when using “sandwich” LB
Hello,
The scenario is as follows:
Internet<-> OLB <-> 3X NVA <-> ILB <-> Workloads
Would like to have session affinity end to end.
One way might be to use Static NAT from the NVAs to the ILB in order to make the return path deterministic.
Is there another way to avoid the NAT while preserving session affinity thru the NVAs?
Thank you.
Hello,The scenario is as follows: Internet<-> OLB <-> 3X NVA <-> ILB <-> Workloads Would like to have session affinity end to end.One way might be to use Static NAT from the NVAs to the ILB in order to make the return path deterministic. Is there another way to avoid the NAT while preserving session affinity thru the NVAs?Thank you. Read More
Windows 11 Version 23H2: Requesting Codec H.265
Hello there, I’m Ramesh.
If you’re interested in installing the HEVC codec, you can find it in the Microsoft Store for a minimal price of $0.99.
For more information and to proceed with the installation, please follow the link provided below:
HEVC Video Extensions – Download and Install for Windows | Microsoft Store:
https://apps.microsoft.com/detail/9nmzlz57r3t7?...
To quickly access the HEVC Store app page, you can use the shortcut Win + R, and enter the following command:
ms-windows-store://pdp?hl=en-us&gl=us&productid=9nmzlz57r3t7
Hit Enter, and you’re good to go to purchase the extension from the Store.
Hello there, I’m Ramesh. If you’re interested in installing the HEVC codec, you can find it in the Microsoft Store for a minimal price of $0.99. For more information and to proceed with the installation, please follow the link provided below: HEVC Video Extensions – Download and Install for Windows | Microsoft Store:https://apps.microsoft.com/detail/9nmzlz57r3t7?… To quickly access the HEVC Store app page, you can use the shortcut Win + R, and enter the following command: ms-windows-store://pdp?hl=en-us&gl=us&productid=9nmzlz57r3t7 Hit Enter, and you’re good to go to purchase the extension from the Store. Read More
Excessive Data Usage from Delivery Optimization on Windows 11.
Sure, here is a re-written version with some key changes:
—
Hello, I’m here to assist you with the following steps:
1. To begin, access the Registry Editor by clicking the Start Button, typing regedit, and pressing Enter.
Ensure that the ‘Address Bar’ is visible by clicking on View.
Now, paste the following path into the Address Bar at the top and hit Enter: ComputerHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesDoSvc
In the right-hand pane, locate and double-click on ‘Start’. Set the Value Data to 4 and click OK.
Upon completion, close the Registry Editor and restart your PC.
2. Next, remove the updates that Delivery Optimization was transmitting. Follow the steps below:
Open File Explorer.
Access your hard drive.
Click on the three dots at the top of File Explorer and select Cleanup.
Allow Disk Cleanup to perform its initial scan.
Select all items in the list and opt for deletion.
Initiate Disk Cleanup once more.
Allow the initial scan to complete.
This time, remember to click ‘Cleanup System Files’ in the resulting dialog.
Let Disk Cleanup conduct another scan.
Once again, select all items in the list and delete them.
Finally, restart your PC.
—
I hope this revised version is helpful. Let me know if you need any further assistance.
Sure, here is a re-written version with some key changes: — Hello, I’m here to assist you with the following steps: 1. To begin, access the Registry Editor by clicking the Start Button, typing regedit, and pressing Enter. Ensure that the ‘Address Bar’ is visible by clicking on View. Now, paste the following path into the Address Bar at the top and hit Enter: ComputerHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesDoSvc In the right-hand pane, locate and double-click on ‘Start’. Set the Value Data to 4 and click OK. Upon completion, close the Registry Editor and restart your PC. 2. Next, remove the updates that Delivery Optimization was transmitting. Follow the steps below: Open File Explorer. Access your hard drive. Click on the three dots at the top of File Explorer and select Cleanup. Allow Disk Cleanup to perform its initial scan. Select all items in the list and opt for deletion. Initiate Disk Cleanup once more. Allow the initial scan to complete. This time, remember to click ‘Cleanup System Files’ in the resulting dialog. Let Disk Cleanup conduct another scan. Once again, select all items in the list and delete them. Finally, restart your PC. — I hope this revised version is helpful. Let me know if you need any further assistance. Read More
How to Remove Mic and Notification Bell Icons from the Right Side of the Taskbar in Windows 11
Greetings,
I’m Tanvi, here to provide you with assistance today.
Kindly follow these instructions for the task at hand:
1. Begin by right-clicking on a vacant space on your taskbar.
2. Proceed to choose “Taskbar settings” from the dropdown.
3. Locate the “Microphone” and “Notification” icons within the “Taskbar items” section.
4. If a toggle switch accompanies them, simply switch them off to eliminate their presence from the taskbar.
I trust this guidance proves beneficial. Feel free to reach out if you require further assistance.
Have a wonderful day!
Greetings, I’m Tanvi, here to provide you with assistance today. Kindly follow these instructions for the task at hand:1. Begin by right-clicking on a vacant space on your taskbar.2. Proceed to choose “Taskbar settings” from the dropdown.3. Locate the “Microphone” and “Notification” icons within the “Taskbar items” section.4. If a toggle switch accompanies them, simply switch them off to eliminate their presence from the taskbar. I trust this guidance proves beneficial. Feel free to reach out if you require further assistance. Have a wonderful day! Read More
What are the required KB updates to upgrade Windows 11 version 21H2 to Windows 11 version 22H2?
Hello, I’m Ramesh.
The most recent version of Windows 11 is 24H2, offering new features and improvements. Upgrading from version 21H2 to 24H2 is a straightforward process using the provided ISO.
Follow these steps to upgrade to Windows 11 version 24H2:
1) Access the Windows 11 Media Creation Tool (MCT) by visiting the following link:
https://go.microsoft.com/fwlink/?linkid=2156295
2) Execute the MCT and proceed to download the ISO recommended for your system. Ensure to keep the “Use the recommended options for this PC” setting checked.
3) Once the ISO is downloaded, right-click on it and select “Mount” to assign a drive letter.
4) Launch setup.exe from the ISO drive to initiate the upgrade process to 24H2.
(Using the ISO suggested by the Media Creation Tool will retain your files, settings, and applications during the upgrade.)
Please note that the 23H2 ISO cannot be obtained directly from the Microsoft portal. You can acquire it from UUPdump.net, a reliable source that constructs the ISO from source files downloaded from Microsoft’s servers.
Hello, I’m Ramesh. The most recent version of Windows 11 is 24H2, offering new features and improvements. Upgrading from version 21H2 to 24H2 is a straightforward process using the provided ISO. Follow these steps to upgrade to Windows 11 version 24H2: 1) Access the Windows 11 Media Creation Tool (MCT) by visiting the following link:https://go.microsoft.com/fwlink/?linkid=2156295 2) Execute the MCT and proceed to download the ISO recommended for your system. Ensure to keep the “Use the recommended options for this PC” setting checked. 3) Once the ISO is downloaded, right-click on it and select “Mount” to assign a drive letter. 4) Launch setup.exe from the ISO drive to initiate the upgrade process to 24H2. (Using the ISO suggested by the Media Creation Tool will retain your files, settings, and applications during the upgrade.) Please note that the 23H2 ISO cannot be obtained directly from the Microsoft portal. You can acquire it from UUPdump.net, a reliable source that constructs the ISO from source files downloaded from Microsoft’s servers. Read More
Branding your company’s Teams meetings and calls with frosted glass effects
Microsoft Teams continues to innovate, and one of the latest features to enhance your meetings and calls is the frosted glass background effect. This feature allows you to brand your company’s Teams meetings and calls in a professional and visually appealing way. Every Teams user can manually upload individual frosted glass backgrounds. Teams Premium administrators can also upload frosted glass backgrounds for their organization and assign those backgrounds to different teams based on customization policies.
Here’s how you can make the most of this feature.
Transform transparent PNGs into frosted glass backgrounds
Teams turns any transparent PNG background image into a frosted glass background. This means you can use your company’s logo with a transparent background to create a branded and polished look for your Teams calls. The frosted glass effect adds a touch of elegance and ensures that your logo stands out.
Strategic logo placement
Transparent backgrounds give you flexibility in logo placement. You can position your logo anywhere on the transparent background, whether it’s in the center or in any corner, to enhance visibility. This allows you to customize the look and feel of your Teams calls to align with your company’s branding guidelines. You achieve this level of customization by changing where in your transparent PNG background you place your logo.
Professional and clean video appearance
You can also use an image without transparency to brand your meeting. Non-transparent backgrounds will fully replace your actual background. This may look a little jarring to the eye if the lighting conditions in the actual background differ significantly from the lighting conditions in the background replacement. The frosted glass by contrast creates a more natural look where the person and background share lighting conditions. This effect is reminiscent of the corner office with a frosted glass wall. To further enhance this effect, meeting participants can turn on the “adjust brightness” filter in Teams video settings. This ensures that your video appearance is always top-notch, regardless of your physical environment. This effect works across the platforms on which you may already be using Teams: Windows, Mac, iOS, Android, and the web.
Different branding styles for different teams
You can choose different frosted glass backgrounds for different teams within your organization. For example, the Sales team could have a different logo than the Service team or the Legal team. You control this by assigning different policies to different teams in the Teams Admin Center. This level of customization allows each team to have a unique identity while maintaining a cohesive overall brand. You could even embed messages like “attorney client privileged” in your Legal team’s frosted glass background.
Enforce specific background effects
To ensure consistency across all Teams calls, Teams admins can enforce the use of specific background effects by marking a background as required in the Teams Admin Center. This gives your Teams admin full control over how your company shows up both in internal and external Teams meetings and calls. By standardizing the background, you can maintain a professional and unified appearance for all your virtual meetings and calls.
Tips & Tricks
For best results when preparing the PNG image, please keep in mind:
Resolution: Use 1920×1080 pixels for a high-quality background
Avoid full opacity: Colored content such as logos looks best with a little transparency. We recommend 75% opacity
: A Gaussian blur of radius 2 works well to simulate a bit of depth of field in the scene.
Stencil mid-gray foreground: For grayscale PNG with transparency, we recommend having the full image in mid-gray (value 128) so that the transparency pattern is visible on both light and dark backgrounds.
Get started with Frosted Glass Backgrounds
To start using frosted glass backgrounds, follow the instructions on the Microsoft Teams support page for custom meeting backgrounds here. Teams Admins can deploy frosted glass and other backgrounds company wide. Individual users can manually upload transparent logos as backgrounds to achieve the frosted glass effect for their own meetings. Check with your IT admin about acquiring a Microsoft Teams Premium license. Try or buy Teams Premium today.
Microsoft Tech Community – Latest Blogs –Read More
MMR Call Redirection for Azure Virtual Desktop, Windows 365 now available
Today, I am pleased to share the launch of Multimedia Redirection (MMR) Call Redirection for Azure Virtual Desktop and Windows 365. Call Redirection allows users to enjoy audio calls on Windows delivered from the cloud just as they would through their local Windows OS.
What is MMR Call Redirection?
Call Redirection redirects WebRTC calls from Azure Virtual Desktop session hosts and Windows 365 Cloud PCs to local client devices to reduce latency and improve call quality. Prior to this release, customers may have experienced interruptions to their calls that impaired productivity. With the release of Call Redirection, customers can have like-local audio calls while using WebRTC-based calling apps on Azure Virtual Desktop and Windows 365.
MMR Call Redirection also works seamlessly with Windows App, a unified app that provides a gateway to securely connect to Windows on any device or app across Windows 365, Azure Virtual Desktop, Remote Desktop, Remote Desktop Services, Microsoft Dev Box, and more. This provides users with an enhanced video and audio experience. Learn more about Windows App.
Getting started
Ready to start using MMR Call Direction? Refer to these system requirements:
Use MMR host version 1.0.2404.4003 or above (MSI installer download)
Use MMR browser extension 1.0.2409.17002 or above
Connect from the latest Windows clients:
Windows App on Windows, version 2.0.297.0 or higher
Remote Desktop app on Windows, version 1.2.5709 or higher
For a full setup guide, please refer to Use multimedia redirection on Azure Virtual Desktop.
Certify your calling app for MMR Call Redirection
Are you a call center app provider or developer looking to certify your WebRTC-based calling app for MMR Call Redirection?
MMR Call Redirection provides a versatile solution compatible with most calling apps. You can start testing your app’s compatibility by following these validation steps.
Contact us to officially list your app as supported or open a ticket for any compatibility issues.
Stay up to date! Bookmark the Azure Virtual Desktop Tech Community.
Microsoft Tech Community – Latest Blogs –Read More
Mt Diablo – Disaggregated Power Fueling the Next Wave of AI Platforms
Authors:
Jason Adrian – General Manager, Azure Platform Architecture
Laurentiu Olariu – Power Architect, Azure Platform Architecture
Banha Sok – Power Engineer, System Design & Development
Hyperscale datacenters are continually evolving and undergoing significant changes, with the rise of AI representing one of the most substantial shifts to date. The introduction of AI systems has brought forth novel challenges and disruptions to the infrastructure that supports hyperscale datacenters. While compute and storage systems for the cloud usually have rack power densities below 20kW, AI systems are increasing rack power to hundreds of kW. To adapt to this fast-changing segment, we began to look at every layer of our infrastructure to optimize for these changes. Our solution is to separate the single rack into an server rack and a power rack, each optimized for its primary function.
Figure 1 – AI System Disaggregation
This modular methodology allows us to adjust the power in the disaggregated power rack according to the changing demands of different inferencing and training SKUs. Additionally, it facilitates the reuse of this validated design across a variety of silicon solutions.
The Evolution of Power Delivery – Mt Diablo
Traditional rack solutions integrate the power and server infrastructure in a single rack, but with Mt. Diablo we are moving all the power conversion into a separate disaggregated power rack. There are several key reasons for adopting disaggregated power in the datacenter:
Space Optimization: Disaggregated power enables the entire server rack to be used for AI accelerators and scale up network switches to enable larger pods. This optimization is crucial for performance and efficiency, enabling up to 35% more AI accelerators in each server rack.
Scalability and Future Proofing: The need for scalability and future-proofing is driven by high-power server racks, which will exceed a few hundred kilowatts and are moving towards a megawatt. With this approach, we can right-size the power shelf count to meet each configuration’s unique needs.
Power Conversion Efficiency: Today’s power solutions convert AC inputs into 48Vdc outputs for distribution to the server trays. To improve efficiency, we can convert to 400Vdc (High Voltage Direct Current or HVDC), monopolar or bipolar, to enable better efficiency relative to the needs of high-power server racks. With 400V we expect improvements and incremental evolution in improved efficiency, like what we have seen in the 48Vdc conversion space.
Modular Design: The modular design allows for multiple developments in parallel. This includes HVDC power shelves with specific power supply units (PSUs) that provide HVDC output to a dedicated busbar, cross-rack power distribution to the server rack, in rack energy storage, and AC voltage distribution within the power rack.
All of the benefits of disaggregated power highlighted above make this approach a forward-thinking strategy for datacenter infrastructure.
400Vdc & Industry Alignment
While the first disaggregated power racks will use the current 48Vdc ecosystem, the real enhancements come with the 400Vdc power distribution. The high-level proposal for a 400Vdc disaggregated power rack enables an improved solution compared to prior 12Vdc and 48Vdc solutions and aims to encourage industry alignment and commonality in several areas:
Connectivity Solutions: The 400Vdc connection solutions will differ significantly from the previous 12Vdc and 48Vdc solutions, highlighting the need for industry-wide standardization.
Power Rack Form Factor/Dimensions: Establishing common dimensions for power racks to ensure compatibility and ease of integration.
AC to DC PSU Topology: Addressing the differences between single-phase and three-phase input to create a unified approach.
DC to DC Modules in Server Rack: Standardizing the modules used within server racks to ensure consistency and reliability.
Redundancy: Defining redundancy configurations, like single feed or dual feed, or N+x power module redundancy to enhance system reliability.
Safety Standards: Developing safety standards for 400Vdc distribution and liquid cooled bus solutions to ensure safe operation.
Data/Power Management Backplane: Creating a standardized backplane for data and power management, including communication protocols, firmware updates, power control, and failure management.
This alignment aims to streamline the development and deployment of disaggregated power solutions, making it easier for industry to adopt and implement these new technologies, and enables partnerships like Microsoft and Meta that are supporting this initiative.
Conclusion
The disaggregated power rack enables scalability and flexibility in a time where innovation and time to market is of paramount importance. In an effort to move fast and shift the industry to HVDC power distribution, it’s critical to foster a healthy ecosystem and partnerships to drive commonality. This is why we are excited to announce our upcoming contribution of this architectural specification to the OCP community in collaboration with Meta.
Microsoft Tech Community – Latest Blogs –Read More
Adams Bridge: An Accelerator for Post-Quantum Resilient
The name Adams Bridge is inspired by the mythological structure which was said to span a vast gulf between two landmasses. In the realm of cryptography, a similar vast gap exists between classical asymmetric cryptography and quantum-resilient cryptography. Azure aims to bridge this gap by developing a fully open-source silicon quantum resilient cryptographic accelerator known as the Adams Bridge Accelerator. The Adams Bridge accelerator will be first integrated into Caliptra 2.0, and then delivered as an independent accelerator thereafter. This integration makes Caliptra the first open-source root-of-trust with hardened post quantum resilient cryptography.
The algorithms used in classical asymmetric cryptography depend on complex number theory problems, such as integer factorization or the discrete logarithm problem, for their security. However, research has demonstrated that a quantum computer with enough power can defeat current asymmetric algorithms. Given this, the National Institute of Standards and Technology (NIST) has been working closely with the industry for several years to create new algorithms that are safe from quantum threats. NIST has finalized its selection of quantum-safe algorithms and has released publications, FIPS 203 and FIP S204 in August 2024.
The newly selected post-quantum algorithms are significantly different from their classical counterparts, which calls for a new approach to the design of digital signature schemes and attestation protocols. Hardware device manufacturers and suppliers need to pay immediate attention to these changes as they impact foundational hardware security capabilities such as immutable root-of-trust anchors for both code integrity and hardware identity. Currently, the risks to hardware are more significant than for software, due to longer development times and the immutability of hardware. Therefore, immediate action is needed for new hardware designs.
To accelerate the adoption of these quantum resilient algorithms and to increase trustworthiness of hardware security, Microsoft is open sourcing our new Adams Bridge Accelerator that provides hardware acceleration for the NIST-selected quantum resilient algorithms Dilithium & Kyber.
The Register Transfer Language (RTL) code for the Adams Bridge Accelerator – ‘Dilithium component’ is open-sourced as a discrete crypto accelerator and is also integrated into the already open-sourced Caliptra Root of Trust (RoT). Providing the RTL for all portions of Adams Bridge will allow for easy uptake by industry partners, and save development time that would otherwise be spent developing identical functionality.
This new open-source Caliptra update will be made available in October 2024. The Adams Bridge Accelerator – Kyber component will be released shortly thereafter.
Figure 1 Caliptra Subsystem block diagram
Caliptra 2.0 – Root of Trust Subsystem
Caliptra, an open-source silicon root of trust for which Microsoft is a founding member, is already being adopted by leaders in modern AI infrastructure, storage and network infrastructure.
At the OCP Global Summit 2024, This version of Caliptra is not only quantum resilient, but it expands upon the capabilities of Caliptra 1.0 to include the Root of Trust for Update and Root of Trust for Recovery. Caliptra subsystem meets all the root of trust requirements of NIST 800-193 and offers a fully transparent root of trust subsystem, negating the need for additional boot controllers.
For more information about Caliptra and Adams Bridge, please visit the Caliptra website: https://Caliptra.io
Microsoft Tech Community – Latest Blogs –Read More