Administrator Guide
Table Of Contents
- Dell Hybrid Cloud System for Microsoft Cloud Platform System Standard Version 1.5 Administrators Guide based on release 1803
- Overview
- Administration
- What to do first
- Next steps
- Managing Dell Hybrid Cloud System for Microsoft
- Creating tenant VM networks
- Adding tenant VM networks to the cloud
- Flagging the operating system VHD in the VM templates
- Enabling guest-specified IP addresses in VMM
- Creating additional tenant storage shares
- Using Windows Azure Pack
- Default Windows Azure Pack configuration
- Before you go into production
- Setting up tenant portal access on an isolated network
- Replacing self-signed certificates
- Disabling the tenant AuthSite and the admin Windows AuthSite websites
- Updating to a Security Token Service and re-establishing trust
- How to open the management portal for administrators
- How to open the management portal for tenants
- Offering services to tenants
- Optional configuration
- Automating tasks for efficiency
- Windows Azure Pack API reference content for developers
- Configuring disaster recovery protection
- Operations
- Monitoring
- Backup and recovery
- Onboard to Azure Backup
- Default backup schedule and retention policy
- DPM protection groups
- Disable machine account password rotation on management VMs
- Protecting tenant VMs
- Recovering VMs and databases—high level
- Recovering from management component failures
- Recovering a tenant VM
- Recovering DPM from DPM failures
- Adding extra disks to DPM
- Monitoring DPM
- Using the Dell Hybrid Cloud System for Microsoft data consistency runbooks
- Updating the Dell Hybrid Cloud System for Microsoft
- Shutting down and starting up the stamp
- Security
- Appendix A Expanding the stamp
- Appendix B Performing a factory reset
- Appendix C Retrieving cluster names, host names, and IP addresses
- Appendix D Ports and protocols
Type Accounts Privileges Usage Password Management
Directory Domain
Services
.
Dell Managed Accounts iDRAC Account administrator Out-of-band
management
Default password:
p@ssw0rd
Password rotation:
Manual
Service accounts
This section discusses:
• Local service accounts
• Domain service accounts.
Local service accounts
The local service accounts that are required for Windows Azure Pack are listed in the following table.
Table 34. Local service accounts
Account Account Type Privileges/Usage
MonitoringClient Local user WAP to talk to Monitoring Service.
WebAppGalleryClient Local user WAP to talk to WAG service.
UsageAdminAPIClient Local user WAP to talk to Usage.
Spfuser (on APA01) Local user WAP to talk to SPF. Not owned by WAP.
SMAUser (on APA01) Local user WAP to talk to SMA. Not owned by WAP.
The following are the Windows Azure Pack service runtime accounts that are used for SQL Auth Connection strings. They are all SQL
Serv
er logins on <Prex>SQLIN01\SQLIN01.
• AdminSiteNoticationServiceUser
• AuthSiteNoticationServiceUser
• MgmtSvc-AdminAPI
• MgmtSvc-AdminSite
• MgmtSvc-AuthSite
• MgmtSvc-Monitoring
• MgmtSvc-TenantAPI
• MgmtSvc-TenantPublicAPI
• MgmtSvc-TenantSite
• MgmtSvc-Usage
• MgmtSvc-UsageCollector
Security 115