--- title: "Enroll a Compute Node Using Azure Marketplace" slug: "users-guide-enroll-a-compute-node-using-azure-marketplace-1" updated: 2026-06-26T16:28:11Z published: 2026-06-26T16:28:11Z canonical: "support.fortanix.com/users-guide-enroll-a-compute-node-using-azure-marketplace-1" --- > ## Documentation Index > Fetch the complete documentation index at: https://support.fortanix.com/llms.txt > Use this file to discover all available pages before exploring further. # Enroll a Compute Node Using Azure Marketplace ## 1.0 Enroll Compute Node Using Azure Marketplace Perform the following steps: 1. Generate a Join Token using Fortanix CCM UI. To generate your Join Token, log in to [https://ccm.fortanix.com](https://ccm.fortanix.com/). 2. Navigate to the **Infrastructure** → **Compute Nodes** menu item in the CCM UI left navigation panel, and then click the **+ ADD NODE**. ![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Screenshot (3612)(4).png) **Figure 1: Enroll Compute Node** 3. Click **COPY** to copy the Join Token. This Join Token is used by the compute node to authenticate itself. ![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Screenshot (3611)(2).png) **Figure 2: Copy Join Token** 4. Visit [https://azuremarketplace.microsoft.com/en-us/marketplace/apps/fortanix.rte_node_agent](https://azuremarketplace.microsoft.com/en-us/marketplace/apps/fortanix.rte_node_agent) to create the Node Agent VM to register the compute node. > [!NOTE] > NOTE > > Alternatively, you can also download the latest node agent software from [fortanix-node-agent-software-intel-sgx-platform](https://fortanix.zendesk.com/hc/en-us/articles/360043407012-Fortanix-Node-Agent-Software-Intel-SGX-Platform) and install it on your own machine. > > For Fortanix CCM on-premises deployments, ensure the Fortanix node agent software version for SGX is 4.9 or later. 5. Click **GET IT NOW** on the “Fortanix Confidential Computing Node Agent” page. ![azure_1.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/4414194782612.png) **Figure 3: Get the Node Agent** 6. Click **Continue** in the Node Agent wizard. ![azure_2.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/4414179681044.png) **Figure 4: Confirm Creating App in Azure** 7. In the Node Agent preview page, click **Create**. ![azure_3.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/4414187820948.png) **Figure 5: Proceed to Create a Node Agent** 8. In the **Create Fortanix Confidential Computing Node Agent** form (**Figure 6**), fill in all the necessary details. 1. Information about the available regions can be found [here](/v1/docs/supported-vms-for-azure-confidential-computing-1#regional-availability). 2. Information about the supported VMs can be found [here](/v1/docs/supported-vms-for-azure-confidential-computing-1#supported-vms). 3. In the **Join Token** field, paste the join token that you generated using the Fortanix CCM UI. 4. It is strongly recommended to use DCAP attestation as the **Attestation Protocol** while installing the node agent on Azure VM. 9. Click **Review + create** to validate the node agent details. ![Createnodeagent.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/4414833841172.png) ![Createnodeagent1.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/4414815075092.png) ![Createnodeagent3.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/4414840630164.png) **Figure 6: Validate Node Agent** 10. Wait for the validation to pass. 11. After the validation is successful, click **Create** to create the node agent. ![Createnodeagent4.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/4414840673556.png) **Figure 7: Create Node Agent** ![CCM_54.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/4414187840660.png) **Figure 8: Node Agent Created** 12. After the node agent is created, the compute node will be enrolled in the Fortanix CCM. You will see it under the **Compute Nodes** overview table. ![](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/Screenshot (3615) - Copy.png) **Figure 9: Enrolled Node** > [!NOTE] > NOTE > > To know the attestation type of the node, hover over the certificate icon. The attestation type is either "DCAP" or "EPID" 13. **Add Labels:** To control which applications are allowed to run on which nodes, we add Labels for applications and nodes in the form of “Key:Value” pairs. *For more information, refer to* [*Application and Compute Node Policy Enforcement*](/v1/docs/application-and-compute-node-policy-enforcement-1)*.* 1. **Suggested Labels** – This field will show the top 10 labels that are frequently used by users of an account. 2. **Add Labels** – Enter the Key and Value pair and click **LABEL** to save the label. The newly created label will appear in the **Labels Added** field. A user can also choose an existing label from the **Suggested Labels** field. > [!NOTE] > NOTE > > - A label's key and value can have a maximum of 256 characters and are **case-sensitive**. > - Some keys are reserved for internal use, which are called system-defined labels. > - Such as: 'Fortanix', 'fortanix', ‘CCM’, ‘ccm’, confidentialcomputingmanager. Or > - {Fortanix|Fortanix|CCM|ccm|confidentialcomputingmanager| Confidentialcomputingmanager}. . 3. If we are adding labels for an application, then it is mandatory to add the same labels on the node on which the application will run. 4. A node can have different labels that belong to multiple applications. For example: App1’s label => Location1: Value1 App2’s label => Location2: Value2 Then the Node can have labels => Location1: Value1, Location2: Value2. ![NODE LABEL.png](https://cdn.us.document360.io/c3bd85d2-4ad8-4d85-9f60-f1c168a3aad9/Images/Documentation/21649205132436.png) **Figure 10: Node Label** ## Related - [Provision Nitro Compute Node Using AWS Marketplace](/fortanix-ccm-provision-nitro-compute-node-using-aws-marketplace.md) - [Enroll a Compute Node (bare metal or VM) - SGX](/fortanix-ccm-enroll-a-compute-node-bare-metal-or-vm-sgx.md) - [Compute Nodes](/ccm-compute-nodes.md) - [Bringing EDP Rust Apps to Confidential Computing Manager](/bringing-edp-rust-apps-to-fortanix-ccm.md)