Add certificate
Export and then import Azure Stack Hub certificate for disconnected integrated systems and for the ASDK.
You need the CA root certificate for Azure Stack Hub to use Azure CLI on your development machine.
Export the Azure Stack Hub CA root certificate
Export the CA root certificate. To export the ASDK root certificate in PEM format:
Get the name of your Azure Stack Hub Root Cert:
1. Sign in to the Azure Stack Hub User or Azure Stack Hub Administrator portal.
Select the lock in the browser address bar.
In the pop-up window, select Connection is secure.
In the Certificate window, select the Certification Path tab.
Note down the name of your Azure Stack Hub Root Cert, for example, *.<locale>.<FQDN>
2. Sign in to the VM, open an elevated PowerShell prompt, and then run the following script:
$label = "*.<locale>.<FQDN> from step 1"
Write-Host "Getting certificate from the current user trusted store with subject CN=$label"
$root = Get-ChildItem Cert:\CurrentUser\Root | Where-Object Subject -eq "CN=$label" | select -First 1 if (-not $root)
{
Write-Error "Certificate with subject CN=$label not found"
return
}
Write-Host "Exporting certificate"
Export-Certificate -Type CERT -FilePath root.cer -Cert $root
Write-Host "Converting certificate to PEM format"
certutil -encode root.cer root.pem
Reference:
https://learn.microsoft.com/en-us/azure-stack/asdk/asdk-cli
https://learn.microsoft.com/en-us/azure-stack/user/azure-stack-version-profiles-azurecli2

Reference:
https://blog.apps.id.au/adventures-cloud-operator-highly-available-app-service-1-4-azure-stack-step-2-deployment/

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/n-series-amd-driver-setup

Instead: Solution: From a privileged endpoint (PEP) session, you run the Install-AzsUpdate cmdlet.
You can use the Azure Stack Hub administrative endpoints to monitor and manage your updates. They're accessible with PowerShell. For instructions on getting set up with PowerShell on Azure Stack Hub.
You can use the following PowerShell cmdlet to manage your updates:
* Install-AzsUpdate
Apply a specific update at an update location.
Reference:
https://docs.microsoft.com/en-us/azure-stack/operator/azure-stack-update-monitor?view=azs-2008