Add Environment Validator TSG: AzStackHci_Subscription_State

[1008covingtonlane]

What

Adds a public Environment Validator remediation TSG for AzStackHci_Subscription_State (ADO 38356879), which confirms the cluster's Azure Stack HCI subscription is Active during Deployment, Update, and Upgrade readiness. No TSG existed for this validator, so front-line support had nothing to point a customer at.

How it was grounded (source + telemetry, not guessed)

• Product source: the check is Test-AzureStackHCISubscriptionState (ASZ-EnvironmentValidator, AzStackHci.ArcIntegration.Helpers.psm1). It runs Get-AzureStackHCISubscriptionStatus per node, selects the Azure Stack HCI subscription, and reports FAILURE when the cmdlet errors, no subscription is found, or SubscriptionStatus != 'Active'; SUCCESS only when Active.
• Live telemetry: harvested the real failure Detail signatures from EnvironmentValidatorResult and grouped them into the three sub-modes the guide branches on. Also confirmed the check currently PASSES fleet-wide (~4,069 clusters), so the guide is honest that a genuinely-disabled subscription is the rarer case.

Structure

Standard sibling house style (at-a-glance table, Overview, Requirements, Troubleshooting Steps 1-6, Glossary):

• Detection: HealthCheckResult JSON, the EventID 17205 event-log query, the portal Updates tab, and the authoritative on-box Get-AzureStackHCISubscriptionStatus.
• Three failure sub-modes, each with its own owner and fix: subscription not Active (Azure subscription/billing), cannot read the subscription (connectivity/registration, with the firewall-requirements reference), and no subscription found (re-registration).
• Per-node identification, consequences, per-sub-mode remediation with risk labels, and verification via Invoke-SolutionUpdatePrecheck -SystemHealth.
• Cross-links the related MSI-access, external-connectivity, and DNS guides. Indexed in the EnvironmentValidator README.

Validation

Graded with the tsg-forge harness: static structure/safety lint Grade A and a 13-persona usability panel at 5/5. This is a cloud/subscription check whose genuinely-disabled failure is not safely injectable on a shared lab (and it only runs on a real Arc-registered cluster), so it is documented and statically graded rather than driven through a live inject loop.

[Copilot]

Pull request overview

Adds an Environment Validator troubleshooting guide for AzStackHci_Subscription_State.

Changes:

• Documents detection, failure modes, remediation, and verification.
• Adds the guide to the Environment Validator index.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 4 comments.

File	Description
Troubleshooting-AzStackHci_Subscription_State.md	Adds the subscription-state TSG.
README.md	Links the new guide.

[1008covingtonlane]

Thanks for the careful read, but .Status is correct here and I am keeping it. Get-AzureStackHCISubscriptionStatus returns AzureStackHCISubscription objects whose properties are Id, Status, and ExpirationTime, plus SubscriptionName used for the filter; the status value is exposed as .Status. The Environment Validator check that emits this result reads the same property: after Where-Object SubscriptionName -like 'Azure Stack HCI*' it evaluates $azureStackHCISubscription.Status (source: AzStackHci.EnvironmentChecker, AzStackHci.ArcIntegration.Helpers.psm1, Test-AzureStackHCISubscriptionState).

SubscriptionStatus is the name of the enum type (and of an internal registration-state field), not the cmdlet's output property. Projecting .SubscriptionStatus would return an empty column, which would be the real defect. Since this validator passes on thousands of clusters in the field today, .Status is confirmed as the live property. No change.

[1008covingtonlane]

Thanks for the careful read, but .Status is correct here and I am keeping it. Get-AzureStackHCISubscriptionStatus returns AzureStackHCISubscription objects whose properties are Id, Status, and ExpirationTime, plus SubscriptionName used for the filter; the status value is exposed as .Status. The Environment Validator check that emits this result reads the same property: after Where-Object SubscriptionName -like 'Azure Stack HCI*' it evaluates $azureStackHCISubscription.Status (source: AzStackHci.EnvironmentChecker, AzStackHci.ArcIntegration.Helpers.psm1, Test-AzureStackHCISubscriptionState).

SubscriptionStatus is the name of the enum type (and of an internal registration-state field), not the cmdlet's output property. Projecting .SubscriptionStatus would return an empty column, which would be the real defect. Since this validator passes on thousands of clusters in the field today, .Status is confirmed as the live property. No change.

[1008covingtonlane]

Good call. Fixed in 571c98a: the not-registered remediation now links Register-AzStackHCI (Az.StackHCI), which documents both registration and the -RepairRegistration repair path, and it names the repair command inline. I kept the aka.ms/UpgradeRequirements pointer as the general Azure Local requirements reference alongside it.

[1008covingtonlane]

Thanks for the careful read, but .Status is correct here and I am keeping it. Get-AzureStackHCISubscriptionStatus returns AzureStackHCISubscription objects whose properties are Id, Status, and ExpirationTime, plus SubscriptionName used for the filter; the status value is exposed as .Status. The Environment Validator check that emits this result reads the same property: after Where-Object SubscriptionName -like 'Azure Stack HCI*' it evaluates $azureStackHCISubscription.Status (source: AzStackHci.EnvironmentChecker, AzStackHci.ArcIntegration.Helpers.psm1, Test-AzureStackHCISubscriptionState).

SubscriptionStatus is the name of the enum type (and of an internal registration-state field), not the cmdlet's output property. Projecting .SubscriptionStatus would return an empty column, which would be the real defect. Since this validator passes on thousands of clusters in the field today, .Status is confirmed as the live property. No change.