03.1-subscription.md

Create or reuse a deployment subscription

Create a deployment subscription

Note

If you have an existing subscription, skip to Step 3.
If you don't have a subscription follow below steps to create it using command shell or create it using Azure Portal under Confidential Online management group of the SLZ:

1. Open PowerShell 7.x. command shell and install Azure Az PowerShell module 10.2.0.

   Install-Module -Name Az -RequiredVersion 10.2.0 -AllowClobber -Force
   

2. Create subscription and wait 1-3 minutes for subscription to be created

   New-AzSubscriptionAlias -AliasName "<your-sub-alias>" -SubscriptionName "<your sub-name>" -BillingScope "/providers/Microsoft.Billing/BillingAccounts/<your-billing-account>/enrollmentAccounts/<your-enrollment-account>" -Workload "Production"

3. Verify that subscription was created and grab the subscription ID.

   Get-AzSubscription -SubscriptionName "<your-sub-name>"
   ``
   

4. Add the subscription to your SLZ confidential online management group. See image to identify the id of the management group in Azure Portal:

   New-AzManagementGroupSubscription -GroupName <confidential-corp-management-group> -SubscriptionId <your-subscription-id-from-previous-step>

Note

• If you are deploying the sample sovereign app or confidential VM template, we recommend using the Confidential Online management group of the SLZ.
• If you are deploying the lighthouse template, we recommend using the Management management group of the SLZ under Platform management group.

Next step

• If you're deploying the sovereign app, continue with prerequisites.
• If you're deploying confidential VM template, continue with deployment step 4.