Azure-docs: The model conversion script does not work or the Quickstart is missing a step

[reneschulte]

I followed the described steps but the conversion PS script is failing after uploading the model to the storage account during the "Getting an authentication token" step:

I'm using the script from commit 6422ff029ba6dee7845cba7daad53c65cddd7180
The Storage Account is located in West Europe since this is the region I'm using for ARR.

I made sure to follow these steps and Link ARR to the Storage Account like described here:
https://docs.microsoft.com/en-us/azure/remote-rendering/how-tos/create-an-account#link-storage-accounts
This is the roles I have configured in the Storage Account providing access to ARR:

Looks all well configured to me. Not sure why it's saying there's an auth issue between the both services. Or is it just some temporary hiccup with a 500 Server error or am I missing a step here?

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: dc7693bc-840f-4744-bc28-884ed562b29f
• Version Independent ID: 39dbf49c-cd15-2e63-a625-e5a40d0b6eb9
• Content: Convert a model - Azure Remote Rendering
• Content Source: articles/remote-rendering/quickstarts/convert-model.md
• Service: azure-remote-rendering
• GitHub Login: @FlorianBorn71
• Microsoft Alias: flborn

[FlorianBorn71]

Does my comment from the other thread (i.e. "re-creating the ARR account if it was created prior to public preview release") apply here?

[reneschulte]

Hey @FlorianBorn71 unfortunately it still fails, even with a freshly created ARR instance.
Interestingly I'm getting a 401 error now after recreating the ARR resource.
Of course I updated the Account ID and Key in the arrconfig.json and recreated the IAM role assignments for the new ARR resource I created.

[rikogeln]

Hi @reneschulte - the 401 of the secure token service (STS) indicates that either the account does not exist (anymore?) or the provided key is incorrect.

Can you please verify that the account with the ID you are using (still) exists and has not been deleted?

[reneschulte]

Hi!

Like I wrote I recreated the ARR resource freshly and made sure the right account info ID and key are being used. Also reassigned IAM. See above comments for details.

So yes, that exists and I can use the same credentials with the quick start sample which successfully loads the model, etc.
Must be something with access issues between Storage account and ARR. Again, I made sure grant the 3 roles the correct rights like shown in the docs.

Let me know if you want to do a live bug tracing next week Tuesday or later. I'm working In CET time zone.

---

From: rikogeln [e-mail]
Sent: Thursday, 9 April 2020 19:40
To: MicrosoftDocs/azure-docs
Cc: Rene Schulte; Mention
Subject: Re: [MicrosoftDocs/azure-docs] The model conversion script does not work or the Quickstart is missing a step (#52079)

Hi @reneschultehttps://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Freneschulte&data=02%7C01%7C%7C5d25bbfc3ba945bbff4208d7dcad1083%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637220508164955459&sdata=%2BbCwzeMKEOQPGQOKFvsljaeneoKl1%2FfkSvzToa%2BuC34%3D&reserved=0 - the 401 of the secure token service (STS) indicates that either the account does not exist (anymore?) or the provided key is incorrect.

Can you please verify that the account with the ID you are using (stil)l exists and has not been deleted?

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fissues%2F52079%23issuecomment-611655638&data=02%7C01%7C%7C5d25bbfc3ba945bbff4208d7dcad1083%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637220508164965470&sdata=Lnt8QNzL7NNBjPBN9vnL1WNH49S7sFfHYrIVX%2B4d9gs%3D&reserved=0, or unsubscribehttps://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FABYYGGJB3QA6O4BIRH6QS73RLYB7BANCNFSM4MEX5YCQ&data=02%7C01%7C%7C5d25bbfc3ba945bbff4208d7dcad1083%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637220508164975481&sdata=PbFHIYN2Pwqj%2FZgY%2BBxyCgC4AYuN8HhBQJmsae5TuE4%3D&reserved=0.

[chwarr]

FYI, @reneschulte, the MS-CV value in the response isn't sensitive and doesn't need to be redacted. It's a Correlation Vector that is used to track requests as the bounce around inside Azure, similar to activity/trace ids used in other systems.

[reneschulte]

Thanks Christopher. Good to know. Would it help to troubleshoot?

---

From: Christopher Warrington [e-mail]
Sent: Thursday, 9 April 2020 20:20
To: MicrosoftDocs/azure-docs
Cc: Rene Schulte; Mention
Subject: Re: [MicrosoftDocs/azure-docs] The model conversion script does not work or the Quickstart is missing a step (#52079)

FYI, @reneschultehttps://eur05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Freneschulte&data=02%7C01%7C%7C83b1d5011021463e288e08d7dcb2b25c%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637220532354324072&sdata=I4jZyH98Bf%2B%2B9EjXM4bfuVO0l8MxJQU%2FvoaxXDHAL3k%3D&reserved=0, the MS-CV value in the response isn't sensitive and doesn't need to be redacted. It's a Correlation Vectorhttps://eur05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMicrosoft%2FCorrelationVector&data=02%7C01%7C%7C83b1d5011021463e288e08d7dcb2b25c%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637220532354334012&sdata=T8xXuHDROcDHu54OCPzxJJj67QYUc%2FbjQRZH8skweug%3D&reserved=0 that is used to track requests as the bounce around inside Azure, similar to activity/trace ids used in other systems.

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://eur05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMicrosoftDocs%2Fazure-docs%2Fissues%2F52079%23issuecomment-611679977&data=02%7C01%7C%7C83b1d5011021463e288e08d7dcb2b25c%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637220532354334012&sdata=ofPzv67rdmzgFh%2BY0xpkn%2BjRxwDYFZjKRxgN6y69Rcw%3D&reserved=0, or unsubscribehttps://eur05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FABYYGGNXCVLLLTHCSRTRCGLRLYGXDANCNFSM4MEX5YCQ&data=02%7C01%7C%7C83b1d5011021463e288e08d7dcb2b25c%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637220532354344007&sdata=Z%2FRY2suMfvyb7WgEJjb1nl%2FIw7va0iIrH8%2F8BW1kUiY%3D&reserved=0.

[chwarr]

They won't hurt, but I don't think they're needed here. @rikogeln knows more details about this than I do.

I don't work on ARR, but on some shared components that ARR uses where the CVs come from. I happened to see this issue when I was poking around looking at other things on GitHub.

[rikogeln]

@reneschulte - the correlation vector (cV) of each call definitely helps us to troubleshoot the issue. so if you can please include them in your reports.

In related news - we found two issues thanks to your report. One with the managed identity UI and one with the inner workings of the conversions/create REST API. We are working on fixes for both of them and will update you here once they have been deployed. Thanks for the feedback!

[archanaiyer]

The change for the conversion REST API have been deployed. The storage account linking should now work. Let us know if you have trouble with that!

[reneschulte]

Woohoo! That worked. 🎉

I had to recreate the ARR resource and re-assign IAM roles so the Storage Account can access the new ARR but after that the conversion script worked now!

Thank you and have a great weekend. 🙌