Administrator Guide

To x this condition, do the f
ollowing:
1 In
Active Directory Users and Computers, expand the Dell Hybrid Cloud System for Microsoft OU, and then click the < Prex >-
Fabric account.
2 Right-click the account, and then click
Reset Password.
3 Change the password.
4 Clear the check box for the User must change password at next logon option, and then click
OK.
5 Close
Active Directory Users and Computers.
6 Open the VMM console.
7 In the
Settings workspace, expand Security, and then click Run As Accounts.
8 Right-click the
< Prex >-Fabric Run As account, and then click Properties.
9 Type the same password that you set in Active Directory Users and Computers. Click OK, and then close the VMM console.
10 Try running the MCPasswordReset
script again.
Rotating Windows Azure Pack encryption keys
Windows Azure Pack for Windows Server uses encryption algorithms, encryption keys, and passwords to secure communications between
the databases and users in the management and tenant portals.
You can reset Windows Azure Pack account encryption keys if you believe they have been compromised or accessed by unauthorized
users; or as part of periodic, regular security maintenance.
NOTE: Before you run Windows Azure Pack encryption key rotation runbooks, we strongly recommend that you back up the SQL
Serv
er databases, and all Windows Azure Pack VMs. For information about how to do this, see
Backup and recovery .
Use the following runbooks for password and encryption key rotation. You must run them in the listed order.
Table 37. Runbooks for Encryption
Runbook Name Description Order
Reset-MgmtSvcCoreEncryption.ps1 Rotates encryption keys for sites on <Prex>APA01. 1
Reset-MgmtSvcPublicEncryption.ps1 Rotates encryption keys for sites on <Prex>APT01. 2
To run the runbooks:
1 Sign in to the Windows Azure Pack management portal for administrators with an account that is a member of the < Prex >-Ops-
Admins group.
2 On the Automation page, click Runbooks.
3 Find and run the Reset-MgmtSvcCoreEncryption runbook.
4 Find and run the Reset-MgmtSvcPublicEncryption runbook.
Managing antivirus and antimalware
The following sections discuss strategies for dealing with malware and virus threats.
Overview of default antimalware conguration
During Dell Hybrid Cloud System for Microsoft deployment, Microsoft does the following:
1 Sets up VMM to install update baselines on managed servers.
2 Sets up Windows Server Update Services to automatically approve antimalware updates.
130 Security