anchor.diff:        "password": "YOUR-CLIENT-SECRET",
         "tenant": "YOUR-TENANT-ID"
       }
  -    </pre>
  -    This is the credential for BBL to access Azure. We recommend that you copy it to a secure location. This credential is only effective in the subscription that you selected in previous step.
  -    <p class="note"><strong>Note</strong>: The service principal created above has default role <strong>Contributor</strong>. You may need more precise access control. Refer to <a href="https://docs.microsoft.com/en-us/cli/azure/create-an-azure-service-principal-azure-cli?view=azure-cli-latest">Create an Azure service principal with Azure CLI 2.0</a> in the Microsoft Azure documentation for more information.<p>
  -
  -## <a id="create-infra-bosh"></a> Step 3: Create Infrastructure, BOSH Director, and Application Gateway
  -
  -Run the following commands to create the required infrastructure, deploy a BOSH Director, and create an application gateway for Cloud Foundry:
  -    <pre class="terminal">
  -    $ bbl plan \
  +    ```
  +    Where:
  +    * `YOUR-CLIENT-ID` is your client ID.
  +    * `YOUR-SERVICE-PRINCIPAL-DISPLAY-NAME` is the display name of your service principal.
  +    * `YOUR-SERVICE-PRINCIPAL-NAME` is the name of your service principal.
  +    * `YOUR-CLIENT-SECRET` is your client secret.
  +    * `YOUR-TENANT-ID` is your tenant ID.
  +    This is the credential for BBL to access Azure. <%= vars.recommended_by %> recommends that you copy it to a secure location. This credential is only effective in the subscription that you selected in previous step.
  +    <p class="note"><strong>Note:</strong> The service principal created above has default role <strong>Contributor</strong>. You may need more precise access control. For more information, see <a href="https://docs.microsoft.com/en-us/cli/azure/create-an-azure-service-principal-azure-cli?view=azure-cli-latest">Create an Azure service principal with Azure CLI</a> in the Microsoft Azure documentation.<p>
  +
  +
  +## <a id="create-infra-bosh"></a> Step 3: Create Infrastructure, BOSH Director, and App Gateway
  +
  +To create the required infrastructure, deploy a BOSH Director, and create an app gateway for <%= vars.platform_name %>:
  +
  +1. Run:
  +    
  +    ```
  +    bbl plan \
         --iaas azure \
         --azure-subscription-id YOUR-SUBSCRIPTION-ID \
         --azure-tenant-id YOUR-TENANT-ID \
  
positive.code: ns4-**.azure-dns.info.
  ```
  
  From your domain registrar, delegate DNS authority for your hosted zone to the
  four Azure name servers. To do this, change the default nameservers provided by your domain registrar to Azure name servers listed in Azure DNS Zone.
  
  After a few minutes, your system domain should resolve to your Azure application gateway.
  
  ## <a id="connect-bosh-director"></a> Step 5: Connect to the BOSH Director
  
  Run the following to connect to the BOSH Director:
  
  <pre class="terminal">
  $ eval "$(bbl print-env)"
  </pre>
  
  ## <a id="destroy-environment"></a> Destroy the BOSH Resources ##
  
  You can use <code>bbl destroy</code> to delete the BOSH Director infrastructure in your Azure environment.
  Use this command if `bbl up` does not complete successfully and you want to reset your environment, or if you want to destroy the resources created by bosh-bootloader for any other reason.
  
  * Run the following commands to delete only the load balancers:
      <pre class="terminal">
      $ bbl plan
      $ bbl up
      </pre>
  
  * Run the following commands to delete the infrastructure, BOSH Director, and load balancers:
      <pre class="terminal">
      $ bbl destroy
      </pre>
  
negative.code: owner: Release Integration
  ---
  
  This topic describes how to use the bosh-bootloader command line tool to set up an environment for <%= vars.platform_name %> on Azure and deploy a BOSH Director. For more information about bosh-bootloader, see the [bosh-bootloader](https://github.com/cloudfoundry/bosh-bootloader) repository on GitHub.
  
  
  ## <a id='overview'></a> Overview
  
  This topic describes how to create:
  
  1. A BOSH Director instance.
  
  1. A set of randomly generated BOSH Director credentials.
  
  1. A generated key pair that allows you to SSH into the BOSH Director and any instances that BOSH deploys.
  
  1. A copy of the manifest used to deploy the BOSH Director. A manifest is a YAML file that defines the components and properties of a BOSH deployment. For more information, see [Deployment Manifest v1](https://bosh.io/docs/deployment-manifest.html) in the BOSH documentation.
  
  1. A basic cloud config. A cloud config is a YAML file that defines IaaS-specific configuration for BOSH. For more information, see [Usage](https://bosh.io/docs/cloud-config.html) in the BOSH documentation.
  
  1. An app gateway. The bosh-bootloader creates the app gateway, but you must still configure DNS to point your domains to the app gateway. For more information, see [Setting Up DNS for Your Environment](../common/dns_prereqs.html).
  
  
  ## <a id='downloads'></a> Step 1: Download Dependencies
  
  To download the required dependencies for bosh-bootloader:
  
  1. Download Terraform v0.9.1 or later from the [Download Terraform](https://www.terraform.io/downloads.html) page on the Terraform website. Unzip the file and move it to somewhere in your PATH by running:
      
      ```
      tar xvf ~/Downloads/terraform*
      sudo mv ~/Downloads/terraform /usr/local/bin/terraform
      ```
  
  1. Download the BOSH CLI v2. For more information, see [Installing the CLI](https://bosh.io/docs/cli-v2-install/) in the BOSH documentation. Make the binary executable and move it to somewhere in your PATH by running:
      
      ```
      chmod +x ~/Downloads/bosh-cli-*
      sudo mv ~/Downloads/bosh-cli-* /usr/local/bin/bosh
      ```
  
  1. To download and install bosh-bootloader, run one of the following sets of commands:
      * On Mac OS X, use Homebrew. Run:
          
          ```
          brew install cloudfoundry/tap/bbl
          ```
      * Download the latest bosh-bootloader from [Releases](https://github.com/cloudfoundry/bosh-bootloader/releases/latest) in the bosh-bootloader repository on GitHub. Make the binary executable and move it to somewhere in your PATH by running:
          
          ```
          chmod +x ~/Downloads/bbl-*
          sudo mv ~/Downloads/bbl-* /usr/local/bin/bbl
          ```
  
  1. Download and install the Azure CLI. For more information, see [Install the Azure CLI](https://docs.microsoft.com/en-us/cli/azure/install-azure-cli?view=azure-cli-latest) in the Microsoft Azure documentation. 
  
  
  ## <a id='create-service-principal'></a> Step 2: Create a Service Principal
  
  To create the service principal that bosh-bootloader needs to interact with Azure:
  
  1. If you installed the Azure CLI for the first time, run:
      
      ```
      az login
      ```
      Follow the instructions to log in.
  
  1. To list subscriptions, run:
      
      ```
      az account list
      ```
  
  1. From the list of your subscriptions, select a preferred subscription by running:
      
      ```
      az account set --subscription SUBSCRIPTION
      ```
      Where SUBSCRIPTION is the name or ID of your preferred subscription.
  
  1. To create the service principal for bosh-bootloader with the Azure CLI, run:
      
      ```
      az ad sp create-for-rbac
      ```
  
  1. You receive a JSON format object like the example below:
      
      ```
      {
        "appId": "YOUR-CLIENT-ID",
        "displayName": "YOUR-SERVICE-PRINCIPAL-DISPLAY-NAME",
  