# Kali virtual machine install
For some penetration testing engagements, it might make sense for you to deploy a penetration testing system in your Azure tenancy, rather than have 7 Minute Security ship you a physical device.  Below are the steps to create the Kali virtual machine:

1. Log into your Azure portal at [https://azure.microsoft.com](https://azure.microsoft.com).

2. From the main portal menu, click **Virtual Machines**:

![](/static/azurevm-01.png)

3. Click **Create > Azure Virtual Machine**:

![](/static/azurevm-02.png)

4. Select and/or fill out the **Subscription**, **Resource Group** and **Virtual Machine Name**.  In our example, we selected our default subscription, made a new resource group called *7MS-KALI_group* and named the machine *7MS-KALI*:

![](/static/azurevm-03.png)

5. Under **Image**, click the drop-down box and choose **See all images**:

![](/static/azurevm-04.png)

6. Within the marketplace, type in the search **Kali**, and then from the results, underneath the *Kali Linux* image, click the drop-down and choose **Kali 2023.4 -x64 Gen 2**:

![](/static/azurevm-05.png)

7. Back at the Create a virtual machine screen, select the Size dropdown and choose **Standard_DS1_v2 - 1 vcpu, 3.5 GiB memory**:

![](/static/azurevm-06.png)

8. Under the *Administrator Account* section, choose **Password**, create a user called **sevminsec** and then a long/strong/unique password such as one generated with [1Password](https://1password.com/password-generator) (7 Minute Security will arrange a secure email thread to send this password through):

![](/static/azurevm-07.png)

9. Near the bottom of this screen, ensure that under *Public inbound ports* that **Allow selected ports** is selected, that **SSH** is highlighted in the drop-down, and then click **Next: Disks >**:

![](/static/azurevm-08.png)

10. Under *OS disk*, click the drop-down next to *OS disk size* and choose **64 GiB (P6)**, then click **Next: Networking >**:

![](/static/azurevm-09.png)

11. Under *Network interface*, ensure the correct *Subnet* is selected.  Then, under *NIC network security group*, choose **Advanced**, and under *Configure network security group*, click the **7MS-KALI-nsg**.  Then click **Next: Management >** to continue:

![](/static/azurevm-10.png)

12. Under the *Management* tab, leave all defaults and click **Next:Monitoring >**

13. Under the *Monitoring* tab, leave all defaults and click **Next: Advanced >**

14. Under the *Advanced* tab, leave all defaults and click **Next: Tags >**

15. Under the *Tags* tab, leave all defaults and click **Next: Review + create >**

16. Under the *Review + create* tab, double-check the configuration and click **Create**.

17. Back at the main Azure portal, search for **network** and then select **Network security groups**:

![](/static/azurevm-11.png)

18. Under *Network security groups*, click the one assigned to the Kali VM:

![](/static/azurevm-12.png)

19. From the network security group rule list, locate and click on **default-allow-ssh**:

![](/static/azurevm-13.png)

20. Within the *default-allow-ssh* rule, ensure under *Source* that **IP Addresses** is selected, and then under *Source IP addresses / CIDR ranges* you copy/paste in the IPs/subnets provided by 7 Minute Security (IPs below are just for demonstration purposes), as well as any IPs you will want to connect to the VM from:

![](/static/azurevm-14.png)

When all the IPs/subnets are configured, click **Save** at the bottom of this rule:

![](/static/azurevm-15.png)