Passing Parameter Values to DSC Configuration from

Question

I have a simple DSC Config file that contains a credential and string input parameter. I want this DSC configuration deployed with a VM deployed in an ARM template but am missing the concept of how to pass these two parameters securely. How do I accomplish this?

Answer 1

I was receiving the same error but, after some shenanigans, it is working for me. The important part is the settings/Properties/SqlAgentCred/password reference to protectedSettings/Items/AgentPassword. Below is the properties node under my Powershell.DSC extension resource in my template.

"properties": {
        "publisher": "Microsoft.Powershell",
        "type": "DSC",
        "typeHandlerVersion": "2.17",
        "autoUpgradeMinorVersion": false,
        "settings": {
                "ModulesUrl": "https://blobstore.blob.core.windows.net/windows-powershell-dsc/DBServer.ps1.zip",
                "ConfigurationFunction": "DBServer.ps1\\DBServer",
                "Properties": {
                    "SqlAgentCred": {
                            "userName": "[e-mail]",
                            "password": "PrivateSettingsRef:AgentPassword"
                        }
                },
                "WmfVersion": "latest",
                "Privacy": {
                        "DataCollection": "Disable"
                }
        },
        "protectedSettings": {
                "Items": {
                    "AgentPassword": "Pa$$word"
                },
                "DataBlobUri": ""
        }
}

Answer 2

You will specify protected settings under protectedsettings section. Anything under ProtectedSettings are sent encrypted. Check https://blogs.msdn.microsoft.com/powershell/2016/02/26/arm-dsc-extension-settings/ for details.