Administrator Guide

6 Open the VMM console.
7 In the Settings workspace, expand Security, and then click Run As Accounts.
8 Right-click the < Prex >-Fabric Run As account, and then click Properties.
9 Type the same password that you set in Active Directory Users and Computers. Click OK, and then close the VMM console.
10 Try running the MCPasswordReset script again.
Rotating Windows Azure Pack encryption keys
Windows Azure Pack for Windows Server uses encryption algorithms, encryption keys, and passwords to secure communications between
the databases and users in the management and tenant portals.
You can reset Windows Azure Pack account encryption keys if you believe they have been compromised or accessed by unauthorized
users; or as part of periodic, regular security maintenance.
NOTE: Before you run Windows Azure Pack encryption key rotation runbooks, we strongly recommend that you back up the SQL
Server databases, and all Windows Azure Pack VMs. For information about how to do this, see Backup and recovery .
Use the following runbooks for password and encryption key rotation. You must run them in the listed order.
Table 36. Runbooks for Encryption
Runbook Name Description Order
Reset-MgmtSvcCoreEncryption.ps1 Rotates encryption keys for sites on <Prex>APA01. 1
Reset-MgmtSvcPublicEncryption.ps1 Rotates encryption keys for sites on <Prex>APT01. 2
To run the runbooks:
1 Sign in to the Windows Azure Pack management portal for administrators with an account that is a member of the < Prex >-Ops-
Admins
group.
2 On the Automation page, click Runbooks.
3 Find and run the Reset-MgmtSvcCoreEncryption runbook.
4 Find and run the Reset-MgmtSvcPublicEncryption runbook.
Managing antivirus and antimalware
The following sections discuss strategies for dealing with malware and virus threats.
Overview of default antimalware conguration
During Dell Hybrid Cloud System for Microsoft deployment, Microsoft does the following.
1 Sets up VMM to install update baselines on managed servers.
2 Sets up Windows Server Update Services to automatically approve antimalware updates.
3 Installs System Center 2012 R2 Endpoint Protection.
The System Center Endpoint Protection management tools in the Operations Manager console displays the computers that are protected.
The following screenshot is an example.
Security
125