Press CTRL+K to open search

Creating an Endpoint Security (HX) virtual machine

  • Published on Sep 10, 2026
  • 3 minute(s) read
Prev Next

This topic describes how to create an Endpoint Security (HX) virtual machine in Azure.

To create an Endpoint Security (HX) virtual machine:

  1. In the Azure portal, select All services, and then select Images under Compute.

  2. Select the image you created in Creating an image file from an Azure blob file.

  3. Click Create VM.

  4. Select the tabs at the top of the Create a virtual machine page, and configure settings as described in the following sections.

    Note

    Settings that are not required for an Endpoint Security (HX) virtual appliance are not covered in these sections. You can accept the default values for the other settings, or specify values that are appropriate for your environment.

Basics

The Basics page contains the following sections.

Project details

  • Make sure the correct Subscription and Resource group are selected.

Instance details

  • Enter a Virtual machine name.

  • Make sure the correct Region is selected.

  • Make sure the correct Image is selected.

  • Select the virtual machine Size based on your requirements. The specifications are displayed when you make your selection.

    Note

    For a list of the sizes supported for an Endpoint Security (HX) virtual machine, see Endpoint Security models and sizes.

Administrator account

You can use this section to configure an SSH key to authenticate the initial admin user in the appliance CLI.

Important

You must select the SSH public key option for Authentication Type.

  • The Username you provide is ignored during the first CLI login attempt, because the first login user is always "admin." You can create additional admin user accounts later from the appliance Web UI or CLI.

  • If you enter a Password, it cannot be used when you initially log in to the virtual appliance from the Azure console or an SSH session. You must log in to the Azure console using "admin" as the username, and then immediately change the password. You can then log in to the virtual appliance CLI in an SSH session, and run the configuration jump-start wizard. You can optionally change the password again in the wizard. You can then configure SSH public keys from the virtual appliance Web UI or CLI.

  • If you enter an SSH public key, you will be unable to log into the Azure console, but you can use the key to log in to the virtual appliance CLI in an SSH session. After you run the configuration jump-start wizard and set a password, you can use that password to log in to the Azure console.

Important

You cannot change the SSH key from the Azure portal after the virtual machine is created. You must use the virtual appliance Web UI or CLI to change it.

Inbound port rules

  • Select Allow selected ports for Public inbound ports.

  • Select HTTPS (443) and SSH (22) for Select inbound ports.

Networking

  • Make sure the correct Virtual network and Subnet are selected.

  • Accept the default Public IP, unless you plan to deploy the virtual machine in a VPN or behind a NAT device.

  • Click Advanced for NIC network security group.

  • Select the correct security group for Configure network security group.

  • Make sure Accelerated networking is Off.

Tags

  • Define name and value pairs for the tags to apply to the virtual machine.

Review + create

  • Click Create after the validation passes and you confirm the information on the page.

:
Related articles