Cloud, everybody is talking about that.
And with the new ConfigMgr 2012 SP1 fully integrating with
Windows Azure it's time to see how this works.
You need to have some things in place first, so here we go:
- A Windows Azure subscription (duh)
- A working PKI Infrastructure
- 2 (a .cer and a .pfx) certificates to talk to the Management service of Windows Azure
- A certificate (the .cer) added to the Management service of Windows Azure
- Your Windows Azure Subscription ID. This can be found on the Management Portal of Windows Azure.
- And well, uh SCCM 2012 SP1 ;-)
The subscription isn't much of a hassle. Takes about 10 min!
In
Part 1 I will setup the necessary PKI Infrastructure and take care of the Certificate part..
In
Part 2 I will configure SCCM 2012 SP1 for talking to that big Cloud called Windows Azure.
PKI Infrastructure
Nothing fancy here as this is a lab environment. Just setup the PKI infrastructure.
Add Server Role
à Active Directory Certificate Services
Certificate Authority:
Enterprise:
Root CA:
New private key:
Select
2048 for Key character length:
CA Name:
Validity period (I don't think my lab will last this long ;-))
Now Install the CA.
Deploy the Certificate
So that's up and running, now for the fun part.
Microsoft has some good info on what certificates you need.
Source:
- Deployment of the PKI Certificates for Configuration Manager:
http://technet.microsoft.com/en-us/library/230dfec0-bddb-4429-a5db-30020e881f1e#BKMK_clouddpcreating2008
- PKI Certificate Requirements for Configuration Manager:
http://technet.microsoft.com/en-us/library/gg699362.aspx
We will go from there.
- Create a Security Group that contains the member servers to install System Center 2012 Configuration Manager SP1 primary site servers that will manage cloud-based distribution points.
- On your Certificate Authority (CA) server go to the console and right-click Certificate Templates, choose Manage.
- Right-click the entry that displays Web Server in the column Template Display Name, and then click Duplicate Template.
- Select Windows Server 2003, Enterprise Edition
- On the General tab enter a name (ConfigMgr Cloud-Based Distribution Point Certificate)
- On the Request Handling tab – Allow private key to be exported.
- Security tab – Remove Enroll for Enterprise Admins and Add your Security Group.
- Click OK and close the Template console.
- Right-click Certificate Templates, New – Certificate Template to Issue.
- Select your Template and select OK.
Request the Certificate
Now we have to request the certificate.
- Go to your site server.
- Open up a MMC and add Certificates – Local computer as snap-in.
- Go to Personal and in All Tasks select Request New Certificate.
Now you have to enter some information:
The info you need for Windows Azure is:
- the name of your Windows Azure Cloud Distribution Point
- Select and Enroll.
- Enrollment successful.
- The Certificate will be visible in the CA console under Issued Certificates.
Export the Certificate
You will have to export the Certificate twice, once
with and once
without the private key!
- Without the Private Key:
- And with the Private Key:
The certificate is now ready to be imported when you create a cloud-based distribution point.
In
Part 2 I will continue!
And the result is visible:
Create the Windows Azure Cloud Distribution Point:
Now it's time to create the Distribution Point in the Cloud!
Launch you ConfigMgr Console and let's start.
Under Administration – Overview – Hierarchy Configuration – Cloud is the Create Cloud Distribution Point.
And here you need your Subscription ID and Certificate (the .PFX one)
Select your Region, and Certificate:
Specify the alerts:
And off we go
Look good:
You can follow the process by looking in the CloudMgr.log.
This can take a while! So be patient, it will come eventually.
Still working:
And there we are!
And also in the Windows Azure Management Portal:
Distribute content to the Windows Azure Cloud Distribution Point:
There are no extra steps needed to distribute content to a Windows Azure DP.
You take an application and distribute it to the Cloud.
Logging under DistrMgr.log.
And in the console:
Cloud rules!
Read Part 1 Here!
