microsoft/mcw-azure-stack

MCW Azure Stack

This workshop is archived and is no longer being maintained. Content is read-only.

For additional Azure Stack content, please visit https://docs.microsoft.com/en-us/learn/modules/intro-to-azure-stack/.

Azure Stack

This Microsoft Cloud Workshop contains two solution paths, Azure Stack Migrate, and Azure Stack Operate. Scenarios and abstracts for each are provided below.

Azure Stack - Migrate

Contoso Finance is one of the largest banks in the United States with a significant amount of their revenue coming from their residential mortgage business. As part of Contoso's shift to a cloud first strategy they are planning to migrate their loan web applications to a hybrid cloud solution. During the planning stages, Contoso realized they would not be able to retain their customer data in US based Azure regions due to corporate compliance policies and regulatory issues. They have selected Azure Stack as the deployment method to take advantage of Azure technologies while still maintaining compliance. In this workshop, you will help them design a migration strategy for moving one of their key workloads to Azure.

July 2020

Target audience

• Infrastructure Engineer
• System Administrator
• Cloud Engineer

Abstracts

Workshop

In this workshop, you will learn how to design and manage a hybrid cloud architecture using a combination of the Azure public cloud and Azure Stack. This functional architecture will enable customers to leverage their investments in Azure as a "cloud platform," rather than Azure as a "place." You will learn to determine which systems are good candidates for the Azure public cloud and which are better suited on Azure Stack.

At the end of this workshop, you will be better able to recommend, design, and manage hybrid cloud systems that leverage one application and deployment model, Azure.

In addition, you will learn to understand when the Azure public cloud versus Azure Stack is appropriate based on customer requirements, describe possible integrations between Azure public cloud solutions and Azure Stack, understand the taxonomy of Azure Stack (tenants, regions, subscriptions, offers, plans, services and quotas), describe the resource providers that are available for use with Azure Stack, design and deploy hybrid connectivity between Azure public cloud and Azure Stack, as well as perform the most common Azure Stack management and maintenance operational tasks.

Whiteboard design session

In this whiteboard design session, you will work with a group to design a hybrid cloud architecture using a combination of the Azure public cloud and Azure Stack. This functional architecture will enable customers to leverage their investments in Azure as a "cloud platform," rather than Azure as a "place."

At the end of the session, you will be able to determine which systems are good candidates for the Azure public cloud, and which are better suited on Azure Stack.

Hands-on lab

This lab you will start with deploying the Azure Stack Development Kit, deploying the SQL Database and Azure App Service resource providers, as well as downloading several virtual machine images from the Azure Stack Marketplace. From there, you will implement a full taxonomy in Azure Stack consisting of a region, subscription, plan, offer, and quotas. After Azure Stack is configured, you will then deploy Azure SQL Database, Web and API apps and then deploy the Contoso application.

At the end of the hands-on lab, you will be better able to deploy and manage solutions running on Azure Stack.

Azure services and related products

• Azure Stack
• Azure Stack Hub
• Azure Stack HCI
• Azure App Services
• Azure SQL Database
• Azure Virtual Machines
• Azure Functions

Related references

• MCW

Azure Stack - Operate

Contoso Finance is one of the largest banks in the United States with a significant amount of their revenue coming from their residential mortgage business. As part of Contoso's shift to a cloud first strategy they are planning to migrate their loan web applications to a hybrid cloud solution. During the planning stages, Contoso realized they would not be able to retain their customer data in US based Azure regions due to corporate compliance policies and regulatory issues. They have selected Azure Stack as the deployment method to take advantage of Azure technologies while still maintaining compliance. In this workshop, you will help design an strategy to ensure workloads are operating using best practices.

July 2020

Target audience

• Infrastructure Engineer
• System Administrator
• Cloud Engineer

Abstracts

Workshop

In this workshop, you will learn how to design and manage a hybrid cloud architecture using a combination of the Azure public cloud and Azure Stack. This functional architecture will enable customers to leverage their investments in Azure as a "cloud platform," rather than Azure as a "place." You will learn to determine which systems are good candidates for the Azure public cloud and which are better suited on Azure Stack.

At the end of this workshop, you will be better able to recommend, design, and manage hybrid cloud systems that leverage one application and deployment model, Azure.

In addition, you will learn to understand when the Azure public cloud versus Azure Stack is appropriate based on customer requirements, describe possible integrations between Azure public cloud solutions and Azure Stack, understand the taxonomy of Azure Stack (tenants, regions, subscriptions, offers, plans, services and quotas), describe the resource providers that are available for use with Azure Stack, design and deploy hybrid connectivity between Azure public cloud and Azure Stack, as well as perform the most common Azure Stack management and maintenance operational tasks.

Whiteboard design session

In this whiteboard design session, you will work with a group to design a hybrid cloud architecture using a combination of the Azure public cloud and Azure Stack. You will learn how to configure networking for your Azure Stack deployment so that your workload will work in a hybrid environment. You will also configure business continuity and disaster recovery, monitoring and logging, plan for automation as well as several other best practices to operate Azure Stack.

At the end of the session, you will be understand many of the aspects of successfully operating Azure Stack.

Hands-on lab

This hands-on lab starts with deploying the Azure Stack Development Kit. From there, you will create and publish a custom Azure Marketplace item as well as to implement multi-tenant topology by provisioning another Azure Active Directory tenant and adding it to the existing Azure Stack environment. Once that is completed, you will set up delegation by using the delegated provider model and Azure Stack Role-Based Access Control (RBAC). You will conclude this lab by carrying out common Azure Stack maintenance tasks, including log collection (via Privileged Endpoint) and infrastructure backup (by using the Azure Stack Admin portal).

At the end of this hands-on lab, you will be better able to deploy and operate solutions running on Azure Stack.

Azure services and related products

• Azure Stack
• Azure Stack Hub
• Azure Stack HCI
• Azure App Services
• Azure SQL Database
• Azure Virtual Machines
• Azure Functions

Related references

• MCW

Help & Support

We welcome feedback and comments from Microsoft SMEs & learning partners who deliver MCWs.

Having trouble?

• First, verify you have followed all written lab instructions (including the Before the Hands-on lab document).
• Next, submit an issue with a detailed description of the problem.
• Do not submit pull requests. Our content authors will make all changes and submit pull requests for approval.

If you are planning to present a workshop, review and test the materials early! We recommend at least two weeks prior.

Please allow 5 - 10 business days for review and resolution of issues.

mcw-azure-stack's Issues

Failed to deploy Free SQL Server License: SQL Server 2017 Developer on Windows Server 2016

I was not able to deploy Free SQL Server License: SQL Server 2017 Developer on Windows Server 2016 specified in Task 1 > Subtask 4.
It was showing an error : "failed to attach Disk to the VM".

Script name and Parameters have changed for ASDK Configurator impacting Before Hol-LAB

https://github.com/mattmcspirit/azurestack/blob/master/deployment/AzSPoC.ps1

.\AzSPoC.ps1 -azureDirectoryTenantName "" -authenticationType "" -downloadPath "" -ISOPath "" -asdkHostPwd "" -VMpwd "" -azureAdUsername "" -azureAdPwd "" -useAzureCredsForRegistration -azureRegUsername "" -azureRegPwd "" -azureRegSubId ""

Get-AADToken : Exception calling "AcquireToken" with "3" argument(s): "Sequence contains no elements"

Hi All,
I keep getting error in script number 4 during the HOL-Azure Stack Migrate.md.
Details are as follows.

[Script No. 4 on HOL-Azure Stack Migrate.md]
.\Install-ASDK.ps1 -DownloadASDK -DeploymentType AAD -LocalAdminPass $localAdminPass -AADTenant [tenant].onmicrosoft.com -version '2002-35' -InfraAzureDirectoryTenantAdminCredential $azcred

But when i run the script i keep getting the error like below.
Get-AADToken : Exception calling "AcquireToken" with "3" argument(s): "Sequence contains no elements"
At C:\CloudDeployment\Setup\Common\AzureADConfiguration.psm1:198 char:14

• ... $token = Get-AADToken -ResourceUri $AzureURIs.ManagementServiceUri ...

•             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: (:) [Get-AADToken], MethodInvocationException
  • FullyQualifiedErrorId : InvalidOperationException,Get-AADToken

I'm tracking the script in question, so I think the command below can't find the uri.

The accounts and subscriptions I tested,
Azure Internal subscriptions (with @microsoft.com and [email protected]), MSDN subscriptions, and Free Trial subscriptions.
However, the Free Trial subscription couldn't grow to 20 cores, so I couldn't even deploy VMs.
And the subscription shown in the screenshot above is an MSDN subscription.

Can you give me any ideas?

Update syntax PowerShell script

https://github.com/microsoft/MCW-Azure-Stack/blob/master/Hands-on%20lab/Before%20the%20HOL%20-%20Azure%20Stack%20Migrate.md#task-4-download-and-run-the-azure-stack-hub-configurator-script

7. From the Administrator: Windows PowerShell window, execute the script to configure the Azure SDK (ensure you replace the placeholder values, where [azure-admin-upn] and [azure-admin-password] designate the user name and password of the account with the Owner role in the Azure subscription you are using in this lab and the Global Administrator role in the Azure AD tenant associated with that subscription, [tenant] is the name of the Azure AD tenant associated with the Azure subscription you are using in this lab, and [subscription-id] is the identifier of that subscription):

.\AzSPoC.ps1 -azureDirectoryTenantName '[tenant].onmicrosoft.com' -authenticationType AzureAD -downloadPath 'D:\ASDKfiles' -ISOPath 'D:\WS2016EVALISO.iso' -asdkHostPwd 'demo@pass123' -VMpwd 'demo@pass123'
-azureAdUsername '[azure-admin-upn]' -azureAdPwd '[azure-admin-password]' -registerAzS -useAzureCredsForRegistration `
-azureRegSubId '[subscription-id]'-branch 'master'

Note * use of "" results in script failure instead replace with ''

Images in Operations step-by-step lab not showing

Please review/fix images in the Operations section of the lab. Images are not showing in the HTML version.

https://github.com/microsoft/MCW-Azure-Stack/blob/master/Hands-on%20lab/images.operations/Hands-onlabstep-by-step-AzureStackimages/media/image1.png

Unable to login using domain accounts

I am familiar with the Cloud Workshop from last year but trying to test it again now. I get to the point where it says wait for 6 hours for setup to complete and to then login as AZURESTACK\AzureStackAdmin with password demo@pass123 but I get an unable to authenticate error after 10+ hours. I am able to login as local administrator AzS-Host1\administrator with password demo@pass123 and Server Manager shows that AD DS and DNS etc have been installed but I cannot access the domain directly. Hyper-V Manager shows no VMs. I have tried the setup for both labs with the same results. Is there something I am missing? A special password for domain users perhaps?
Thanks
Brian D. Egler
MCSE/MCT 2019

Missing Step

Missing Step in Exercise 1- Task 1 -Sub task 6 - Step 11 in https://github.com/Microsoft/MCW-Azure-Stack/blob/master/Hands-on%20lab/HOL%20step-by-step%20-%20Azure%20Stack.md#sub-task-6-install-the-app-service-resource-provider

After Step 11 user have to login in SQL Server and Run the following query in SQL Server Database.

Invoke-Webrequest : 404: Not Found

Hello,

when running the script below, I got error message. Please help.

Invoke-Webrequest http://bit.ly/configasdk -UseBasicParsing -OutFile ConfigASDK.ps1

Invoke-Webrequest : 404: Not Found
At line:1 char:1

• Invoke-Webrequest http://bit.ly/configasdk -UseBasicParsing -OutFile ...

•   + CategoryInfo          : InvalidOperation: (System.Net.HttpWebRequest:HttpWebRequest) [Invoke-WebRequest], WebException
    + FullyQualifiedErrorId : WebCmdletWebResponseException,Microsoft.PowerShell.Commands.InvokeWebRequestCommand
  

Policy Deployment Fails

I have a few policy deployments that fail when trying to run the ASDK build template. Both failures can't find a Resource Group: "message": "Resource group 'defaultresourcegroup-eus' could not be found."

Documentation Update - https://cloudworkshop.blob.core.windows.net/azure-stack/Hands-on%20lab/Before%20the%20lab%20-%20Azure%20Stack.html

Task 2: Install the Azure Stack Developer Kit
Select ASK Version 1804 and press C to continue

1804-1 is offered not 1804

Issues with AzSPoC.ps1 failing.

Hello,

I am following Hands-on lab/Before the HOL - Azure Stack Operate.md

A few of the jobs are falling and It looks like its due to the "addserver******Image" jobs, In the error logs for these jobs I get:

VERBOSE: GET https://management.azure.com/subscriptions/f08079fe-74bb-45f1-a6e1-cd442c3153be/resourceGroups/azurestack/providers/Microsoft.AzureStack/registrations/azsreg-azs-host1-010821-085901/products?api-version=2016-01-01 with 0-byte payload
VERBOSE: received 946884-byte response of content type application/json; charset=utf-8
Azure Stack POC Configurator Stage: ServerCore2019Image failed. Updating AzSPoC Progress database
You cannot call a method on a null-valued expression..Exception.Message

This causes the rest to fail:

At least one of the jobs failed.
FAILED JOB: Job Name: AddServerCore2016Image | Error Message: You cannot call a method on a null-valued expression.
FAILED JOB: Job Name: AddServerFull2016Image | Error Message: You cannot call a method on a null-valued expression.
FAILED JOB: Job Name: AddServerCore2019Image | Error Message: You cannot call a method on a null-valued expression.
FAILED JOB: Job Name: AddServerFull2019Image | Error Message: The remote server returned an error: (503) Server Unavailable.
FAILED JOB: Job Name: AddMySQLRP | Error Message: ScriptHalted
FAILED JOB: Job Name: AddSQLServerRP | Error Message: ScriptHalted
FAILED JOB: Job Name: AddMySQLSku | Error Message: The MySQLRP stage of the process has failed. This should fully complete before the SKU and Quota are created. Check the MySQLRP log, ensure that step is completed first, and rerun.
FAILED JOB: Job Name: AddSQLServerSku | Error Message: The SQLServerRP stage of the process has failed. This should fully complete 
before the SKU and Quota are created. Check the SQLServerRP log, ensure that step is completed first, and rerun.
FAILED JOB: Job Name: AddMySQLHosting | Error Message: The MySQLSKUQuota stage of the process has failed. This should fully complete before the MySQL database host has been deployed. Check the MySQLSKUQuota log, ensure that step is completed first, and rerun.
FAILED JOB: Job Name: AddSQLHosting | Error Message: The SQLServerSKUQuota stage of the process has failed. This should fully complete before the SQLServer database host has been deployed. Check the SQLServerSKUQuota log, ensure that step is completed first, and
 rerun.
FAILED JOB: Job Name: DeployAppServiceFS | Error Message: The ServerCore2016Image stage of the process has failed. This should fully complete before the File Server can be deployed. Check the ServerFullImage log, ensure that step is completed first, and rerun.
FAILED JOB: Job Name: DeployAppService | Error Message: Deploying the App Service Resource Provider failed after 3 attempts. Check 
the logs and rerun the script
[10:10 AM]::[LAUNCHJOBS]:: Please review the logs for further troubleshooting.Exception.Message

I found that other people are having the same issue with these server ISO's : mattmcspirit/azurestack#129 (comment)

This is the 2nd attempt, the first attempt was on an existing tenant and an existing subscription. I thought that environment may have caused the issue so I created a new tenant and subscription and the issue persists. Can anyone confirm they have been able to build this recently from scratch?

Screenshot:

Get-AADToken : Exception calling "AcquireToken"

I am getting the following error while installing in before HOL exercise
.\Install-ASDK.ps1 -DownloadASDK -DeploymentType AAD -LocalAdminPass $localAdminPass -AADTenant xxxxx.onmicrosoft.com -version '1907-20' -InfraAzureDirectoryTenantAdminCredential $azcred

Get-AADToken : Exception calling "AcquireToken" with "3" argument(s): "AADSTS50079: Due to a configuration change made by your administrator, or because you moved to a new location, you must enroll in
multi-factor authentication to access 'xxxxxxxxxxxxxxxxx'.
Trace ID: 55b40f03-354b-4ea5-a38c-d408fe2b4900
Correlation ID: 18e8ce41-7feb-42b2-a812-e67ffdd72db8
Timestamp: 2020-03-12 20:40:57Z"
At C:\CloudDeployment\Setup\Common\AzureADConfiguration.psm1:160 char:14

• ... $token = Get-AADToken -ResourceUri $AzureURIs.ManagementServiceUri ...

•             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: (:) [Get-AADToken], MethodInvocationException
  • FullyQualifiedErrorId : AdalServiceException,Get-AADToken

VM template no longer works correctly.

We executed this template several times during testing Dec 3-7 2018 and it worked well. We now execute it and the VM is not setup correctly. After deployment, AD, DNS and Hyper-V is not setup for AzureStack. Even Server Manager crashes when we click on Local Server. Please help!

all issues resolved

Sept test/fix QC - QC complete, please address the following...

WDS trainer guide (PPT) -
Slides missing alt-text

Before HOL -
See Pull request #13 to verify that this test/fix addressed issue. Please respond and/or close request as needed.

Hands-on lab unguided -
Please create an Archive folder and place the Unguided HOL document in that folder.

Hands-on lab - step by step
Please see pull requests #17 & #14 to verify that this test/fix addressed. Please respond and/or close as necessary

WDS trainer guide & student guides

Missing image -
Line 195 - trainer guide
Line 76 - student guide

ready for QC

Azure Stack Hub Operations before the hands-on lab setup guide

I have done with installation the ASDK, and in Azure Stack Hub Operations before the hands-on lab setup guide, Do I need re-install everything for the operations part on a separate environment or Should I jump to Prepare the Azure Stack Hub Operator Station task install appropriate VSCode extensions and continue till I register the ADSK with the subscription?

App Service is missing

Dear All,
I have 14 hr. of trying to install ADKS, it had been installed successfully. But, in Task 3 before-HOL- to install SQL, App Service, my SQL. Still Can't see the App Service, I have repeated again, It shows only App service, and I do one more again, it shows everything except the App service.

Before the HOL

Updated to match current template, still needs a TOC

Section on creating Offer for tenant does not include Microsoft.Web

Content and screenshots in Exercise 1 Task 3 does not include Microsoft.Web which means if you follow this document you will not be able to complete the following exercises to deploy web, api and function apps

Setup Document - Blurry Image

Hello,
In the Setup Document, the image for Task 1, step 9 is blurry and not passing partial vision accessibility checks. Please replace the image.
Dawnmarie

June 2019 - Content update

@mwasham @Jeff-Opsgility
Hello,
This workshop is has been scheduled for a June 2019 content update. Please have your author review open issue #24 and open pull requests #21 and #23 and add their suggestions to update the workshop inside of this issue. Once done, I'll request SME approval. Due: EOD 5/14/19
Thanks, Dawnmarie