Azure Virtual Machine Scale Set: Microsoft.Azure.Diagnostics.IaaSDiagnostics has exited with Exit code: -3 -

when deploying arm template create virtual machine scale set, installation of final, azure diagnostics extension fails.

handler 'microsoft.azure.diagnostics.iaasdiagnostics' has reported failure vm extension 'vmdiagnostics_name' terminal error code '1009' , error message: 'enable failed plugin (name: microsoft.azure.diagnostics.iaasdiagnostics, version 1.7.4.0) exception command c:\packages\plugins\microsoft.azure.diagnostics.iaasdiagnostics\1.7.4.0\diagnosticspluginlauncher.exe of microsoft.azure.diagnostics.iaasdiagnostics has exited exit code: -3'

can't see caused problem when remote desktop connected 1 of servers.

from arm template (standard):

"extensionprofile": {     "extensions": [ (...) {     "properties": {         "publisher": "microsoft.azure.diagnostics",         "type": "iaasdiagnostics",         "typehandlerversion": "1.5",         "autoupgrademinorversion": true,         "settings": {             "wadcfg": {                 "diagnosticmonitorconfiguration": {                     "overallquotainmb": "50000",                     "etwproviders": {                         "etweventsourceproviderconfiguration": [                             {                                 "provider": "microsoft-servicefabric-actors",                                 "scheduledtransferkeywordfilter": "1",                                 "scheduledtransferperiod": "pt5m",                                 "defaultevents": {                                     "eventdestination": "servicefabricreliableactoreventtable"                                 }                             },                             {                                 "provider": "microsoft-servicefabric-services",                                 "scheduledtransferperiod": "pt5m",                                 "defaultevents": {                                     "eventdestination": "servicefabricreliableserviceeventtable"                                 }                             }                         ],                         "etwmanifestproviderconfiguration": [                             {                                 "provider": "cbd93bc2-71e5-4566-b3a7-595d8eeca6e8",                                 "scheduledtransferloglevelfilter": "information",                                 "scheduledtransferkeywordfilter": "4611686018427387904",                                 "scheduledtransferperiod": "pt5m",                                 "defaultevents": {                                     "eventdestination": "servicefabricsystemeventtable"                                 }                             }                         ]                     }                 }             },             "storageaccount": "storageaccountname"         }     },     "name": "vmdiagnostics_name" } 

anyone know what's breaking deployment?

i have same problem on 1 of clusters vmss. have yet solve dug 1 of vms , checked windows logs , exit due missing cert thumbprint in runtime settings file: c:\packages\plugins\microsoft.azure.diagnostics.iaasdiagnostics\1.7.4.0\runtimesettings in working vmss configuration settings file has:

{   "runtimesettings": [     {       "handlersettings": {         "protectedsettingscertthumbprint": "7f7682dbf9cb9c4d8f6768602973a49cc16d2523" 

where thumbprint "tenantencryptioncert". vmss failure has equivalent cert settings file missing thumbprint entry. removed extension , attempted redeploy same result.