Install a distributed deployment of Windows Azure Pack

[This topic is pre-release documentation and is subject to change in future releases. Blank topics are included as placeholders.]

In a distributed deployment of Windows Azure Pack for Windows Server, the components of Windows Azure Pack are installed on multiple machines. Unlike an express deployment, the distributed deployment is supported in production environments.

You can install the management portal for administrators, the management portal for tenants, and the Service Management API on separate machines or in different combinations. For example, you can install the management portal for tenants and the Service Management API on a machine with internet access and the management portal for administrators on a machine that has protected access.

Regardless of the combination of components that you choose to deploy, all components are installed using the Web Platform Installer. Use the following information to install the components.

  • Installing the Service Management API

  • Installing the authentication sites

  • Installing the management portal for administrators and for tenants

You can install the components in any order, although you will not be able to open the management portal for administrators or tenants until you have installed and configured the Service Management API and authentication sites.

After you complete these deployments, the next step is to deploy the Web Sites cloud controller, as described in Install and configure the Web Site clouds controller.

Installing the Service Management API

The Service Management API installation options are presented as three distinct components:

  • Windows Azure Pack: Admin API - Preview

  • Windows Azure Pack: Tenant API - Preview

  • Windows Azure Pack: Tenant Public API - Preview

While you can install all of these components on a single machine, this would not be considered a best practice in a production environment because of the relatively high level of access exposed by the Windows Azure Pack Admin API and to a lesser degree the level of access exposed by the Windows Azure Pack Tenant API. Because of this, you should install the Windows Azure Pack Admin API and Windows Azure Pack Tenant API on machines that are behind a firewall or that are otherwise not accessible by the public. The Windows Azure Pack Tenant Public API is designed to serve all of the needs of end users that subscribe to a hosting service provider’s cloud services.

Use the following steps to install the Service Management API.

To install the Service Management API

  1. Log into the machine where you want to install the API. If you followed the recommended naming scheme, log into WAPAdminAPI, WAPTenantAPI, or WAPTenPubAPI.

  2. Launch the Web Platform Installer.

  3. Click the Products tab, and then click Windows Azure. Click Add next to the Service Management API component you want to install (for example, Windows Azure Pack: Admin API - Preview), and then click Install.

    The Web Platform Installer for Windows Azure Pack

  4. Review the software to be installed. You can view the privacy information for each component by clicking Privacy Terms.

    Accept the terms and conditions on the Prerequisites page by clicking I Accept. The installation will begin.

  5. When the installation is complete, click Continue to launch the Configuration site.

    Important

    Before you click Continue, ensure that all Internet Explorer windows are closed.

  6. The Service Management Configuration Site (https://localhost:30101/) will open in Internet Explorer. If the Internet Explorer security certificate warning page is displayed, click Continue to this website (not recommended).

    Certificate warning for Windows Azure Pack

  7. On the Database Server Setup page, enter the name of the database server.

    Database setup for Windows Azure Pack

  8. Select the type of authentication you want to use (SQL Server or Windows).

    If you chose SQL Server authentication, enter the database server admin username (sa) and password.

  9. Enter a passphrase that will be used to encrypt and decrypt data in the Configuration Store and then click the next arrow.

    Important

    Make sure that you write down the passphrase. Each component needs to use the same passphrase. If you forget or lose this passphrase, there is no way to recover it.

  10. Review the FQDN for this machine. If it is correct, click the next arrow.

  11. Review the features that are going to be configured, and then click the checkmark.

  12. After the features are successfully configured, click the checkmark in the bottom right corner of the Features Setup.

  13. Click Yes to close the browser window.

  14. Click Finish in the Web Platform Installer.

  15. Repeat these steps on each machine where you want to install the Service Management API.

Installing the authentication sites

When you install Windows Azure Pack for Windows Server, by default, it uses the ASP.Net Membership Provider for the management portal for tenants and Windows Authentication for administrators. To enable this, you need to install authentication sites, one for the administrator and one for tenants.

You also have the option of using Active Directory Federation Services (AD FS) to authenticate users. For more information, see Configure Active Directory Federation Services for Windows Azure Pack.

Use the following steps to install the authentication sites.

To install the administrator authentication site

  1. Log into the machine where you want to install the administrator authentication site. If you followed the recommended naming scheme, log into WAPAdminAuth.

  2. Launch the Web Platform Installer.

  3. Click the Products tab and then click Windows Azure. Click Add next to Windows Azure Pack: Admin Authentication Site - Preview, and click Install.

    The Web Platform Installer for Windows Azure Pack

  4. Review the software to be installed. You can view the privacy information for each component by clicking Privacy Terms.

    Accept the terms and conditions on the Prerequisites page by clicking I Accept. The installation will begin.

  5. When the installation is complete, click Continue to launch the Configuration site.

    Important

    Before you click Continue, ensure that all Internet Explorer windows are closed.

  6. The Configuration Site (https://localhost:30101/) will open in Internet Explorer. If the Internet Explorer security certificate warning page is displayed, click Continue to this website (not recommended).

    Certificate warning for Windows Azure Pack

  7. On the Database Server Setup page, enter the name of the database server.

    Database setup for Windows Azure Pack

  8. Select the type of authentication you want to use (SQL Server or Windows).

    If you chose SQL Server authentication, enter the database server admin username (sa) and password.

  9. Enter the passphrase for the Configuration Store and then click the next arrow.

  10. Review the FQDN for this machine. If it is correct, click the next arrow.

  11. Review the features that are going to be configured, and then click the checkmark.

  12. After the authentication site is successfully configured, click the checkmark in the bottom right corner of the Features Setup page to launch the management portal for administrators (https://localhost:30091/#Workspaces/WebSystemAdminExtension/quickStart).

    Note

    Before you launch the management portal, ensure that all Internet Explorer windows are closed.

    If you have not already installed and configured the management portal for administrators on the same machine, this step will not work.

    If the Internet Explorer security certificate warning page is displayed, click Continue to this website (not recommended). You may have to click this link twice.

  13. Log into the management portal for administrators.

To install the tenant authentication site

  1. Log into the machine where you want to install the tenant authentication site. If you followed the recommended naming scheme, log into WAPTenantAuth.

  2. Launch the Web Platform Installer.

  3. Click the Products tab and then click Windows Azure. Click Add next to Windows Azure Pack: Tenant Authentication Site - Preview, and click Install.

    The Web Platform Installer for Windows Azure Pack

  4. Review the software to be installed. You can view the privacy information for each component by clicking Privacy Terms.

    Accept the terms and conditions on the Prerequisites page by clicking I Accept. The installation will begin.

  5. When the installation is complete, click Continue to launch the Configuration site.

    Before you click Continue, ensure that all Internet Explorer windows are closed.

  6. The Configuration Site (https://localhost:30101/) will open in Internet Explorer. If the Internet Explorer security certificate warning page is displayed, click Continue to this website (not recommended).

    Certificate warning for Windows Azure Pack

  7. On the Database Server Setup page, enter the name of the database server.

    Database setup for Windows Azure Pack

  8. Select the type of authentication you want to use (SQL Server or Windows).

    If you chose SQL Server authentication, enter the database server admin username (sa) and password.

  9. Enter the passphrase for the Configuration Store and then click the next arrow.

  10. Review the FQDN for this machine. If it is correct, click the next arrow.

  11. Review the features that are going to be configured, and then click the checkmark.

  12. After the authentication site is successfully configured, click the checkmark in the bottom right corner of the Features Setup page to launch the management portal for tenants (https://localhost:30081/#Workspaces/WebSystemAdminExtension/quickStart).

    Note

    Before you launch the management portal, ensure that all Internet Explorer windows are closed.

    If you have not already installed and configured the management portal for tenants, this step will not work.

    If the Internet Explorer security certificate warning page is displayed, click Continue to this website (not recommended). You may have to click this link twice.

  13. Log into the management portal for tenants.

    If you do not already have an account, you can create one by clicking Sign Up.

Installing the management portal for administrators and for tenants

Before users can interact with Windows Azure Pack, either administrators or tenants, you need to install the management portal for administrators and for tenants. Use the following steps to install the portals.

To install the management portal for administrators

  1. Log into the machine where you want to install the management portal for administrators. If you followed the recommended naming scheme, log into WAPAdmin.

    If you have not previously installed the Web Platform Installer, do so now.

  2. Launch the Web Platform Installer.

  3. Click the Products tab and then click Windows Azure. Click Add next to Windows Azure Pack: Admin Site - Preview, and click Install.

    The Web Platform Installer for Windows Azure Pack

  4. Review the software to be installed. You can view the privacy information for each component by clicking Privacy Terms.

    Accept the terms and conditions on the Prerequisites page by clicking I Accept. The installation will begin.

  5. When the installation is complete, click Continue to launch the Configuration site.

    Before you click Continue, ensure that all Internet Explorer windows are closed.

  6. The Configuration Site (https://localhost:30101/) will open in Internet Explorer. If the Internet Explorer security certificate warning page is displayed, click Continue to this website (not recommended).

    Certificate warning for Windows Azure Pack

  7. On the Database Server Setup page, enter the name of the database server.

    Database setup for Windows Azure Pack

  8. Select the type of authentication you want to use (SQL Server or Windows).

    If you chose SQL Server authentication, enter the database server admin username (sa) and password.

  9. Enter a passphrase that will be used to encrypt and decrypt data in the Configuration Store and then click the next arrow.

    Important

    Make sure that you write down the passphrase. Each component needs to use the same passphrase. If you forget or lose this passphrase, there is no way to recover it.

  10. Review the FQDN for this machine. If it is correct, click the next arrow.

  11. Review the features that are going to be configured, and then click the checkmark.

  12. After the features are successfully configured, click the checkmark in the bottom right corner of the Features Setup page to launch the management portal for administrators (https://localhost:30091/#Workspaces/WebSystemAdminExtension/quickStart).

  13. If you have not yet deployed the Service Management API in the environment, you will see a notification stating the management portal requires the Service Management API. In this case, your next step is to deploy the Service Management API.

    After you do that, return to this machine and click Try Again to open the management portal for administrators.

    Note

    You may need to log out of your system and log back in before you can access the management portal for administrators. This is due to Windows authentication and the need to add the security group to your security token.

    If you continue to see an access denied error, even after logging back in, close all Internet Explorer windows, and run Internet Explorer as an administrator.

  14. The first time you log into the management portal for administrators, a tour of the portal is displayed. Click through the pages in the tour for an introduction to the portal.

To install the management portal for tenants

  1. Log into the machine where you want to install the management portal for tenants. If you followed the recommended naming scheme, log into WAPTenant.

    If you have not previously installed the Web Platform Installer, do so now.

  2. Launch the Web Platform Installer.

  3. Click the Products tab and then click Windows Azure. Click Add next to Windows Azure Pack: Tenant Site - Preview, and click Install.

    The Web Platform Installer for Windows Azure Pack

  4. Review the software to be installed. You can view the privacy information for each component by clicking Privacy Terms.

    Accept the terms and conditions on the Prerequisites page by clicking I Accept. The installation will begin.

  5. When the installation is complete, click Continue to launch the Configuration site.

    Before you click Continue, ensure that all Internet Explorer windows are closed.

  6. The Configuration Site (https://localhost:30101/) will open in Internet Explorer. If the Internet Explorer security certificate warning page is displayed, click Continue to this website (not recommended).

    Certificate warning for Windows Azure Pack

  7. On the Database Server Setup page, enter the name of the database server.

    Database setup for Windows Azure Pack

  8. Select the type of authentication you want to use (SQL Server or Windows).

    If you chose SQL Server authentication, enter the database server admin username (sa) and password.

  9. Enter the passphrase for the Configuration Store and then click the next arrow.

  10. Review the FQDN for this machine. If it is correct, click the next arrow.

  11. Review the features that are going to be configured, and then click the checkmark.

  12. After the management portal for tenants is successfully configured, click the checkmark in the bottom right corner of the Features Setup page to launch the management portal (https://localhost: 30081/#Workspaces/All/dashboard).

  13. The first time you log into the management portal for tenants, a tour of the portal is displayed. Click through the pages in the tour for an introduction to the portal.