Adding Azure Stack private cloud configuration
Using Resiliency Platform console, you can add one or more Azure Stack private cloud configurations in your on-premises data center.
To add Azure Stack private cloud instances on-premises the data center
- Navigate
Settings (menu bar) > Infrastructure > Details View
You can also access Manage Asset Infrastructure from the Quick Actions menu.
- Expand the data center > Virtualization and Private Cloud > Azure Stack tab.
- Launch the + Azure Stack Configuration wizard.
- In the Configure Azure Stack panel, enter the following information:
Select an Infrastructure Management Server (IMS) from the list.
Enter the configuration name.
Enter the Azure Stack Endpoint.
Select the Authentication Type
1. Azure Active Directory (AAD)
2. Active Directory Federation Service (ADFS)
For Azure Active Directory (AAD) configuration
Enter the Subscription ID.
Enter the Tenant ID / Directory ID.
Enter the Application ID / Client ID.
Enter the Client Secret Key.
Make sure you to use only client secret based credentials for applications.
For Active Directory Federation Service (ADFS) configuration
Enter the Subscription ID.
Directory ID is adfs (auto-filled).
The default value of Tenant ID / Directory ID is used as adfs and it cannot be changed.
Enter the Application ID.
Enter the Client Secret Key.
Make sure you to use only client secret based credentials for applications.
- Click Verify to review the configuration and proceed to add the storage account details.
- Select the location from the list.
- Select the storage account from the list.
- Enter the container name and click Next.
- Click Submit to complete the configuration on the Configure Azure Stack wizard.
Note:
1. If the Add Azure Stack configuration failed with SSL error, then you need to provide the SSL certificate in .pem file format to convert .cer file to .pem file. Refer to Microsoft documentation link Manage and deploy resources to Azure Stack Hub with Azure CLI.
Note:
2. Make sure the certificate is already installed before configuring the Azure Stack. Refer See Add root and intermediate CA certificate. topic to install the certificate.
Note:
3. The Peer host identity verification is not honored in Azure Stack configuration. So in case of Azure Stack configurations, the secure communication is always enable.
Note:
4. Refer the Microsoft documentation link on how to create Application.
Some important points to look for:
For resolving the Azure Stack endpoints, we need to add Azure default DNS as secondary DNS in IMS using
168.63.129.16. The IP address 168.63.129.16 is a virtual public IP address that is used to facilitate a communication channel to Azure platform resources. Refer What is IP address 168.63.129.16? for more details.The localhost should get resolved with DNS server otherwise the appliance bootstrap may fail.
More information