env/windows-arm64/azure: fill in a few missing README bits

Fill in a few more minor steps needed in the recipe for reverse
builder VM creation/setup (builder key, initial login).

Updates golang/go#57408.

Change-Id: Iba36ef50bb2e1bbf734126aabcec0dcf850f695b
Reviewed-on: https://go-review.googlesource.com/c/build/+/462015
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Heschi Kreinick <heschi@google.com>
Run-TryBot: Than McIntosh <thanm@google.com>
diff --git a/env/windows-arm64/azure/README.md b/env/windows-arm64/azure/README.md
index ca96e0f..fec7f00 100644
--- a/env/windows-arm64/azure/README.md
+++ b/env/windows-arm64/azure/README.md
@@ -34,8 +34,8 @@
 az vm create \
   --name=MyNewVmName \
   --resource-group=dev_buildlets \
-  --admin-username=<pick your admin account name> \
-  --admin-password=<pick password> \
+  --admin-username=gopheradmin \
+  --admin-password=<password from valentine> \
   --image=microsoftwindowsdesktop:windows11preview-arm64:win11-22h2-ent:latest \
   --nsg-rule=NONE \
   --size=Standard_D8ps_v5 \
@@ -43,7 +43,7 @@
   --public-ip-address ""
 ```
 
-and then configure as described below in VM setup. This VM will have no public IP address or open ports, thus will be usable only by the coordinator.
+and then configure as described below in VM setup. This VM will have no public IP address or open ports, thus will be usable only by the coordinator. 
 
 Notes:
 * the "image" argument above is arm-specific, and in addition "size" argument also encodes the arm64-ness of the VM (strangely)
@@ -82,6 +82,23 @@
     --scripts @antivirusadditions.ps1
 ```
 
+## First login
+
+Log into the new builder as "gopher" at least once so as to go through the "initial login" Windows workflow.
+
+## Builder key
+
+Generate a builder key for the VMs according to the directions in [x/build/cmd/genbuilderkey](https://go.googlesource.com/build/+/fdfb99e1de1f68b555502056567be459d98a0e71/cmd/genbuilderkey/README.md).
+
+Once the key is available, write it to the builder (via "az vm run-command invoke" as above) using a PowerShell script of the form
+
+```
+Write-Host "writing builder key"
+
+$key = "<insert key here>"
+$key | Out-File -Encoding ascii -FilePath C:\Users\gopher\.gobuildkey-host-windows11-arm64-azure
+```
+
 ## Debugging/testing VM creation
 
 To create a new windows-arm64 VM named "MyNewVM" that is net accessible (e.g. with a public IP and ssh port exposed), use this command: