6/19/2018 5:24 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or.

6/19/2018 5:24 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

TechReady 16 6/19/2018 Enabling Hosted IaaS Clouds for Service Providers w/ System Center 2012 SP1 & Windows Server 2012 John Ballard Principal Program Manager Microsoft AM-B304 © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Session Objectives And Takeaways
Tech Ready 15 6/19/2018 Session Objectives And Takeaways Session Objective(s): Give you an overview of updates made in System Center 2012 SP1 Virtual Machine Manager to enable hosted multi-tenant environments Show you how System Center investments in the Service Provider Foundation API are beginning to expose existing and new capabilities Takeaways: We are adding new capabilities to benefit all segments We are enabling rapid startup for hosted clouds We are lowering barriers to adoption © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Virtual Machine Manager

Overview: VMM System Center 2012
Services Service Templates Application Deployment Custom Command Execution Image-based Servicing Application Owner Usage Capacity and Capability Delegation and Quota Clouds Fabric Server Lifecycle Management Multiple Hypervisors Network Management Storage Management Dynamic Optimization Infrastructure HA VMM Server PowerShell Upgrade Custom Properties

Themes: VMM System Center 2012 SP1
Multi-tenancy Partner Enablement Windows Server 2012 Perf and Scale Tenant Administrator VM Network Isolation Service Deployment UI Add-ins Service Templates Server Hardware Providers Load Balancer Providers Storage automation Large VMs Live Migration Enhancements Network Virtualization Storage Management Increase Scale Increase Performance Decrease Latency

Private Cloud Usage Scenario
Configure the fabric (servers, network, storage) Create clouds from the fabric Delegate the cloud to a Self Service User Self Service User creates VMs and Services in the cloud

Private Clouds Compute Network Storage Cloud Consumer View Capacity
Capabilities Libraries VM Networks Load Balancers Logical Networks Storage Classifications Storage Capacity Hosts Clusters Library Servers Logical Networks IP Address Pools MAC Address Pools Storage Pools Storage Providers Storage Arrays Cloud Provider View

Cloud Capacity Cloud can expose Dimensions of Capacity
Limited set of underlying resources “Overstated” set of underlying resources Actual aggregate capacity of underlying resources (vCPU, Memory, Storage) Dimensions of Capacity vCPUs Memory Storage Number of deployed VMs (VMs in Library are not counted) Custom Quota (to support quota points from VMM 2008 R2)

Cloud Capabilities Cloud can VM “shape” limits
Host highly available VMs Allow VMs to use dynamic disks or differencing disks Enable network optimizations VM “shape” limits Processor Range (i.e ) Memory Range (i.e. 16MB – 32 GB) Number of NICs (0 – 7) Built-in set representing underlying limits for Hyper-V, Xen, VMware

VMM User Role Profiles VMM Admin Delegated Admin Tenant Administrator
Fabric Administrator Scope: Entire system Can take any action Delegated Admin Fabric Administrator Scope: Host groups and clouds Configure fabric (hosts, networking and storage) Create cloud on fabric Assign cloud Tenant Administrator Tenant Scope: Clouds only Author VM Networks Assign cloud All other SSU settings  Self-Service User Application Owner Scope: Clouds only Author templates Deploy/manage VMs and Services Share resources Revocable actions Quota as a shared and per-user limit Read-only Administrator Help Desk Scope: Host groups and clouds, No actions

Storage Classifications
Fabric Admin Tenant Admin App Admin UserRole VMM 2012 VM Networks creation VMM 2012 SP1 App Admin Templates Service Virtual Machine Virtual Machine Service Jobs Quota Cloud Logical Networks Network Sites Subnet/VLAN IP Pools Storage Classifications Pools Luns Arrays Library Paths Library Servers Shares Capacity Host groups Clusters Nodes Hosts

Controlling Usage By Self-Service Users
Permitted actions – fine-grained action control Author, VM Control, Read-only,… Quota – 2 Types of Quota Shared – total usage of all members of the user role Per-user – usage of each member of the user role Dimensions of Quota vCPUs Memory Storage Custom Quota (to support quota points from VMM 2008 R2) Virtual Machines

Sharing Among Application Owners
An application owner authors the service template and then shares that template with his team to deploy the application. Shareable Objects Resource group – group of on-disk library objects which user considers interchangeable Profiles (Hardware, Guest OS, Application, SQL) Templates (VM, Service) Virtual machine Service

Proxying Identity – OnBehalfOf
Powershell interface to multiplex TA and SSU operations on a single connection (requires Full Admin) Open connection in OnBehalfOf mode Object filtering operates against OnBehalfOf context Quota and Action restrictions are verified against the OnBehalfOf userrole and user. Pass OnBehalfOf userrole and OnBehalfOfUser to each subsequent commandlet Audit trail will keep job owner (OnBehalfOf user) and job session owner (Full Admin identity)

Syntax: -ForOnBehalfOf
get-scvmmserver localhost -UserRoleName Administrator –ForOnBehalfOf $demoUR = get-scuserrole -Name tenantSSU $demoVM = Get-SCVirtualMachine -Name tenantVM -OnBehalfOfUser -OnBehalfOfUserRole $demoUR Stop-scVirtualMachine –VM $demoVM -OnBehalfOfUser -OnBehalfOfUserRole $demoUR

Demo: Tenant Administration & OnBehalfOf

Service Provider Foundation

Enabling Self-Service IaaS (i.e. the goal)
Configure the fabric Create a cloud from the fabric Delegate the cloud to a self-service user Deploy VMs Combine hosts and networking, storage, and library resources together to create a service provider cloud. Create a cloud from the fabric by moving the underlying infrastructure resources of networking, storage, and compute into the cloud. Delegate access to self-service users and let them manage cloud resources and create services Deploy VMs to private clouds or hosts by using VM templates

Feedback From Service Providers
Let me use my existing customer-facing UI Web APIs to enable Hosted IaaS Portals Add Multi-tenancy to System Center We want: Manage across multiple instances of System Center Customize and extend offerings to differentiate Remove need for me to manage tenant networks Value-add services such as monitoring or backup

Service Provider Foundation (SPF)
REST-based OData API Enables Hosted IaaS Features VM management Service management Self-service VM networks Multi-tenancy / Multi-stamp Self-service tenant administration Enterprise identity for SPF Extensibility for hosted cloud API Usage Metering via SCOM Virtual Machines Virtual Machine Manager Service Templates Virtual Machine Manager VM networks Virtual Machine Manager Automation Orchestrator 2012

Why REST & OData for SPF? Leverage existing UI or Apps from any platform OData client libraries (.NET, PHP, Javascript, Ruby) Enables access from mobile devices such tablets or smartphones

SPF Concept Primer: “Stamp”
WinSrv 2012 Domain Controller Stamp (a scale unit) contains 1+ clouds Cloud (an offer/SLA bundle) has 1+ tenants Tenant (subscriber) operates 1+ VMs, services WinSrv 2012 IIS/SPF WinSrv 2012 SPF SQL DB SPF w/aggregation stamp1 stamp2 VMM Server 1 VMM Server 2 VMs VMs

SPF Architecture Management stamps SPF DB Hoster / Custom Portals
App Controller REST API - OData Stamps Management servers Tenants User roles SPF DB PowerShell web service Claims-based AuthN and AuthZ Aggregation PowerShell scripts Orchestrator Runbooks Management stamps

Powershell Web Service
SPF Implementation Hoster Web Browser http requests REST API - OData Powershell Web Service SPF Resources (MOF) PS Scripts VMM 2012 Client WCF Stamp VMM 2012

Demo: REST OData API TechReady 16 6/19/2018
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

System Center or Provider’s Other Systems
6/19/2018 SPF Scenarios Enabled Service Management Portal API Certificate Hoster/Custom Portal System Center or Provider’s Other Systems Tenant 1 Self-service Users Tenant Admins Tenant’s Apps, Scripts, Tools Tenant 2 https Service Provider Foundation Aggregation Automation REST OData API Claim Fabric Stamps © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Role-based Tenant Auth (w/o AD)
Provider Tenant Admin creates Self-service User Role SPF Validates Token matching Tenant and User Role in SPF DB Claim Token User, User Role and Tenant ID are passed in http header Self-service User accesses Portal User Role and Tenant ID mapped to VMM Self-service User Role Portal creates SAML Claim Token SPF accesses VMM on behalf of User and User Role

Multi-Tenancy & Aggregation
Tenant A Tenant B SPF Endpoint can access multiple stamps Tenant user roles tracked in the SPF DB and synced to stamps Tenant admin manages SSU users and hosted cloud resources Configure Tenants to access specific stamps and clouds Aggregate results across stamps Tenant Admin User Role Tenant Admin User Role Tenant A Tenant B Admin Admin Europe IT Ops IT Ops Dev Test Dev Test Tenant A Prod User Role Tenant A Dev User Role Tenant A Test User Role Tenant B Dev User Role Tenant B Test User Role Tenant B Prod User Role SPF API VMM Server 1 Synced User Roles Gold Silver1 VMM Server 2 Synced User Roles Bronze Silver2 VMM Server 3 Synced User Roles Silver3 Europe3

Automation-based Extensibility
Service Provider Foundation SPF Interface User Authentication Resource Model Action Mapping Task Execution Client Application User Action Defined extension points (runbooks) Upgrade safe Supported Areas For SPF Extensions Create new resource Provide new action mapping (PS script or runbook) Create new task execution logic

Azure Services on Windows Server

1 Consistent Platform Flexible development Unified dev-ops and mgmt
6/19/2018 Consistent Platform Flexible development Unified dev-ops and mgmt Common identity and security Integrated virtualization Complete data platform MICROSOFT Azure 1 Cloud OS ON-PREMISES SERVICE PROVIDER © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Consistent User Experiences
Web Sites High density and scalable Easy deployment and administration Fully self-service Virtual Machines Offer preconfigured workloads Windows and Linux Fully self-service Service Mgmt Portal & API High density and scalable Easy deployment and administration Fully self-service Third Party Services Zuora Parallels Apprenda and more…

“Azure” Running on Windows Server
Windows Server Management Marketing 6/19/2018 “Azure” Running on Windows Server Subscriber Self-Service Portal Service Plans Users Admin Apps Web Sites Databases VMs Subscriber Self-Service Portal Self Service Portal Moves On-Premises Web Sites VMs Self-Service Portal Apps Self-Service Portal Apps VMs Database VMs Common Mgt. Experience Service Management API Service Management API Web Sites VMs SQL Worker Role Web Sites VM Role SQL Service Bus Caching Other Services CDN. Media,, etc. Shared Cloud Services Messaging, Caching Hadoop, etc. Cloud-Enabled Services Move On-Premises SP1 w/ Service Provider Foundation Workload Portability Consistent Dev. Experience Private Service Provider Windows Azure © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Consistent But Not Identical
Service Management Portal Service Management API Web Sites Controller (Web farm framework) Service Provider Foundation API Virtual Machines Third Party Third Party Modules Web Farm Front-end/workers (Application Request Routing/Dynamic Windows Process Activation Service ) System Center (Virtual Machine Manager Component) Windows Server Windows Server Windows Server

Virtual Machine Clouds
Infrastructure as a Service solution Powered by Windows Server & System Center Leverages new Service Provider Foundation Service admin control Seamless set-up and configuration Design custom service offerings Standardized tenant parameters Simplified tenant experience Consistent with Windows Azure Virtual Machines Easily create VMs from a library of templates Configure and monitor Use the power of System Center and Windows Server to easily create an Infrastructure as a Service solution for your customers to provision and manage virtual machines.

Virtual Machine Clouds Process Flow
Tenant Admin SPF & VMM are installed/configured Admin adds SPF endpoint to Service Management API Admin registers VMM Server Admin creates plans with VM cloud offers Tenant subscribes to a plan Tenant creates and operates VMs Admin UX Tenant UX 3 6 5 Subscription Plans Subscriptions Accounts Service Mgmt API Plan 4 2 Offers Stamps User Roles SPF Offer 1 VMM VMM VMM

Demo: Service Management Portal

Top Support Issues So Far…
Basic Understanding Multiple layers of concepts old and new (2 APIs at work, new or overloaded terms) How to think about topology (situational options and variations on what goes where) Installation & Config Getting all the right bits: System Center 2012 SP1 + free download from Microsoft.com/hosting Can’t successfully register SPF with Service Management Portal and API Actual Usage Can register SPF with Service Management Portal and API but it won’t do anything Other auth problems related to app pool creds, certs

In Review: Objectives And Takeaways
Tech Ready 15 6/19/2018 In Review: Objectives And Takeaways Session Objective(s): Give you an overview of updates made in System Center 2012 SP1 Virtual Machine Manager to enable hosted multi-tenant environments Show you how System Center investments in the Service Provider Foundation API are beginning to expose existing and new capabilities Takeaways: We are adding new capabilities to benefit all segments We are enabling rapid startup for hosted clouds We are lowering barriers to adoption © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

We want to hear from you! Evaluation
Complete your session evaluations today and enter to win prizes daily. Provide your feedback at a CommNet kiosk or log on at Upon submission you will receive instant notification if you have won a prize. Prize pickup is at the Information Desk located in Attendee Services in the Mandalay Bay Foyer. Entry details can be found on the MMS website.

Access MMS Online to view session recordings after the event.
Resources Access MMS Online to view session recordings after the event.

6/19/2018 5:24 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. © 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6/19/2018 5:24 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or.

Similar presentations

Presentation on theme: "6/19/2018 5:24 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or."— Presentation transcript:

Similar presentations

About project

Feedback

Log in

Auth with social network:

6/19/2018 5:24 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or.

Similar presentations

Presentation on theme: "6/19/2018 5:24 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or."— Presentation transcript:

Similar presentations

About project

Feedback