Day 2, Session 3

Service Delivery and Automation

• Quick Intro to Azure VMs • Connecting to Azure from

Orchestrator • Connecting to Azure with PowerShell • Developing Azure-integrated

Runbooks• Short Course on Service Provider

Foundation (SPF)

Session 3 Overview

Quick Intro to Azure VMs

Anatomy of an Azure Virtual Machine

VM

VMCloud SvcVirtual Network

Azure Storage Account

VHDVHD VHD

An Azure VM consists of:• Storage

• One or more VMs (VHD format) • Allocated to a specific storage account• Placed in a storage container

• VM is hosted in a Cloud Service• One or more VMs (VHD format)

• Networking • Virtual networks provide connectivity across

services • DNS name resolution within a cloud service

• Endpoint enables RDP connectivity to a VM• One IP per Cloud Service• Port Forwarding Enables External RDP

A Primer: Azure Virtual Machines

VHDVHD

VM

VMCloud Svc

Virtual NetworkOn-Premise

Network

Azure Storage Account

Azure Storage Account

VHDVHDVHD VHD

AD 1

APPSVM

VMCloud Svc

VM

VPN TUNNEL

Migrating SharePoint to Windows Azure

AD

Azure Virtual Machine

File System

WACWFE

Cloud Svc

ADWACWFE

Azure Storage

SQL SQL

SharePoint Farm Configuration on Azure

WFE1

WFE2

Virtual Network

On-Premise Network

WACWACAD 1

APPS

Cloud SvcWFE

3

WFE4

WACWAC

SQL1

SQL2

VPN TUNNEL

AD 2

AD 1

Corp Users

Cloud Svc

WFE AppSvr SQL AD/DC/DNS

Azure On-Premise

Creating Your First VM in AzureDemo

Connecting to Azure from Orchestrator

Connecting to OrchestratorRequires a Management CertificateConfiguration Steps • Create a Management

Certificate (2 methods)• Provide a Certificate

Password• Place Certificate on a

Secure Share • Configure Connection in

Orchestrator (Options menu)

Windows Azure IPCategory Activities

AzureAzure Cloud ServicesAzure DeploymentsAzure StorageAzure Virtual Machine DiskAzure Virtual Machine ImagesAzure Virtual Machines

63 Activities

Notes from the Field • Remember the following when working • The password “P@ssw0rd” is forbidden• Azure does not like capital letters • No “Test Connection” button in UI• Can be tested with an Azure IP activity

Chances are you will need the Azure PowerShell module for some small tasks….more on this in a minute

Connecting Azure from OrchestratorDemo

Connecting to Azure with PowerShell

Connecting to Azure from PowerShellThis is just the first step! We’ll take this into a Run .NET Script activity in Orchestrator

• Run the Get-AzurePublishSettingsFile to retrieve the Publish Settings file  

• This opening a web page

• Download and save this file to a secure directory

Azure Connection String

Connecting to Azure is 3-Step Process

Import-Module Azure

Import-AzurePublishSettingsFile -PublishSettingsFile 'E:\Azure\Windows

Azure MSDN - Visual Studio Ultimate-5-6-2013-credentials.publishsettings‘

Set-AzureSubscription -SubscriptionName 'Windows Azure MSDN -

Visual Studio Ultimate' -CurrentStorageAccount 'portalvhds9jvtzqtdw3dz6'

Connecting to Azure in PowerShellUsing Azure PowerShell in Orchestrator Runbooks

Demo

Developing Azure-Integrated Runbooks

At the most basic level, this a 3-step process

Orchestrator “Create Azure VM” Workflow

Create a Cloud

Service

Create a Container (for VHD)

Create VM

Record Results & Notify Request

or

Runbook: Create an Azure VM

Deploying Services to Azure with Orchestrator

Demo

Short Course on Service Provider Foundation

Service Provider Foundation

REST OData API

Aggregation Automation

Connecting to a Hosted Private Cloud (IaaS)

Fabric Stamps (VMM)

Tenant 1

Self-service Users

Tenant Admins

Tenant’s Apps,

Scripts, Tools

App Controller or WASWS

http

s

Certificate

Tenant 2

Self-service Users

Tenant Admins

Tenant’s Apps,

Scripts, Tools

Cer

tific

ate

1. Service Provider Admin• Create stamps, clouds, servers,

templates• Create user roles: tenant admin2. Tenant Admin• Manage quotas and VM networks• Create and modify self-service

users3. Tenant Self-Service User• Sees cloud(s)• Create and use VMs &

services

Management Resource Flow

SPF Setup Tasks Service Providers• Setup VMM server(s)• Install and setup SPF web

service• Create/Integrate Tenant

Portal with VMM using SPF

• Install the certificate provided by the customer and associate with the tenant

• Define Chargeback

Customer• Send a signed certificate

with public key that’ll be used to validate the claims with SPF web service

• Register Service Provider with URL provided

• Add membership to the self service user roles in App Controller

In this module, you learned about:• Quick Intro to Azure VMs • Connecting to Azure from

Orchestrator • Connecting to Azure with

PowerShell • Developing Azure-integrated

Runbooks• Short Course on Service Provider

Foundation (SPF)

Module Summary

©2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, Office, Azure, System Center, Dynamics and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.