If you are updating from Azure Stack Hub versions earlier than 1901, acquire and import the two additional SSL certificates required for Extension Host.

For details, see Import extension host certificates.

The following example shows how to import extension host certificates:

$CertPassword = read-host -AsSecureString -prompt "Certificate Password"

[Byte[]]$AdminHostingCertContent = [Byte[]](Get-Content c:\certificate\myadminhostingcertificate.pfx -Encoding Byte)

Invoke-Command -session $session -ArgumentList @($AdminHostingCertContent, $CertPassword) -ScriptBlock { param($AdminHostingCertContent, $CertPassword) Import-AdminHostingServiceCert $AdminHostingCertContent $certPassword }

[Byte[]]$HostingCertContent = [Byte[]](Get-Content c:\certificate\mypublichostingcertificate.pfx -Encoding Byte)

Invoke-Command -session $session -ArgumentList @($HostingCertContent, $CertPassword) -ScriptBlock { param($HostingCertContent, $CertPassword) Import-UserHostingServiceCert $HostingCertContent $certPassword }

Note: You must import the mandatory extension host certificates before running the update, or the update process will fail.