# Distinguish an SSH default reset from restoration of the previous configuration

> Will Azure VMAccess reset-ssh restore the SSH configuration that existed before recovery?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260909-459-distinguish-an-ssh-default-reset-from-restoration-of-the-previous-configuration/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-10T00:24:17+00:00
- Modified: 2026-09-10T02:08:04+00:00
- Last reviewed by DSE: 2026-09-09
- Resource type: Guide
- DSE priority: Information
- Topics: Cybersecurity, IT
- Reading time: 2 minutes

## What you need to know

Will Azure VMAccess reset-ssh restore the SSH configuration that existed before recovery?

## Potentially affected

Operators using VMAccess to recover a supported Azure Linux VM.

## DSE recommendation

Choose default reset or backup restoration according to the intended SSH configuration outcome.

## Article

## Source facts

The Azure CLI reset-ssh operation replaces sshd_config with a default configuration from the extension’s internal resources; it does not restore the VM’s original file. VMAccess also backs up and changes SSH configuration during user updates, setting challenge-response authentication off and password authentication on. Its restore_backup_ssh option restores the backed-up configuration. VMAccess user operations grant sudo privileges to the specified account. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/vmaccess-linux).

## Applicability

Use this distinction during authorized access recovery, especially where the VM had deliberately customized SSH settings. Treat account recovery and restoration of the approved SSH policy as separate completion items.

## DSE recommendation

Choose default reset or backup restoration according to the intended SSH configuration outcome. Have the recovery owner record whether the intended result is a distro default or the prior backed-up configuration. Preserve a safe administrative access path while comparing the recovered settings with the approved policy. Avoid using this recovery extension as a routine way to manage an unprivileged account.

## Verification

Rehearse the chosen operation on a representative nonproduction VM and inspect the resulting SSH configuration. Test the intended authentication path and review the recovered account’s privileges. Before closing the incident, reconcile any temporary authentication changes with the approved configuration and document the outcome without passwords or private keys. A successful login alone should not replace the configuration comparison.

## Official references

[Microsoft Learn: VMAccess Extension for Linux](https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/vmaccess-linux). Source reviewed September 9, 2026.

## Primary reference

- Name: Reset access to an Azure Linux VM - Azure Virtual Machines | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/vmaccess-linux
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Distinguish an SSH default reset from restoration of the previous configuration,” DSE Security, https://update.dsesecurity.com/updates/dse-20260909-459-distinguish-an-ssh-default-reset-from-restoration-of-the-previous-configuration/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.