1. Infrastructure Provisioning Kenon Owens Sr
Infrastructure Provisioning Kenon Owens Sr. Product Marketing Manager Microsoft Corporation
Microsoft Virtual Academy

2. Agenda
Day to Day Operations
Constructing the Private Cloud

3. Constructing the Private Cloud

4. Clouds

5. Networking and Isolation in the Private Cloud
System Center Marketing
8/1/2018
Networking and Isolation in the Private Cloud
Development
Production
Cloud abstraction
Datacenter one
Datacenter two
Logical and standardized
Build the cloud to be the pool of resources that you can delegate to your different tenants
Diverse infrastructure
Development
Production
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Logically Group your Resources into Clouds
System Center Marketing
8/1/2018
Logically Group your Resources into Clouds
Create clouds, tenants, and VM Networks
View deployed services and VMs
Overprovision across cloud resources
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. 6

7. Connect to Physical Infrastructure Components
System Center Marketing
8/1/2018
Connect to Physical Infrastructure Components
Aggregate capacity of underlying resources
Choose your logical network abstractions
Choose the types of storage available
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. 7

8. Control Amount of Cloud Resources
System Center Marketing
8/1/2018
Control Amount of Cloud Resources
Place limits around physical resources consumed by cloud
Dynamically adjust resource limits as needs change
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. 8

9. Control the Types of VMs for Self-Service Users
System Center Marketing
8/1/2018
Control the Types of VMs for Self-Service Users
Set constraints and limits around VMs with capability profiles
Attach to clouds to control usage
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. 9

10. Tenants

11. Role-Based Access – Multi-Tenant Administration
System Center Marketing
8/1/2018
Role-Based Access – Multi-Tenant Administration
VMM Administrator
Fabric Administrator
Scope: Entire system
Can take any action
Delegated administrator
Fabric Administrator
Scope: Host groups and clouds
Configure fabric (hosts, networking and storage)
Create cloud on fabric
Assign cloud
Tenant administrator
Tenant
Scope: Clouds only
Author VM Networks
Assign cloud
Create Tenant Roles
All other SSU settings
Self-service user
Application Owner
Scope: Clouds only
Author templates
Deploy/manage VMs and Services
Share resources
Revocable actions
Quota as a shared and per-user limit
With the private cloud, you want to ensure that the correct people have access to the resources that that you control. To accomplish this, we have created access control capabilities to give you fine-grained
The Administrator and Delegated Administrator has full control to the underlying Infrastructure and all of the fabric. While the Administrator has access to the entire VMM environment, the Delegated Administrator has the control over the delegated host groups assigned.
The Self-Service User will have access to just clouds, and there you can set revocable actions in a quota controlled environment. This gives you the ability to specify what actions these users can do and how much of the cloud resources they can consume.
Read only administrator
Help Desk
Scope: Host groups and clouds, No actions
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. 11

12. Assign Actions to User Roles
System Center Marketing
8/1/2018
Assign Actions to User Roles
Create custom roles per assigned cloud*
Choose actions and change actions dynamically as needed
Uses Active Directory users and groups
Talk track – Granular and revocable
This isn’t the whole list just some…
Integrate into slide
An application owner authors the service template and then shares that template with his team to deploy the application.
Shareable Objects
Profiles (Hardware, Guest OS, Application, SQL)
Templates (VM, Service)
Virtual machine
Service
* New in System Center 2012 R2 Virtual Machine Manager
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. 12

13. Assign Quota Capacity – Per Cloud
System Center Marketing
8/1/2018
Assign Quota Capacity – Per Cloud
Ability to set quota at the “all members combined” level
Ability to set quota at the “individual member” level
Example of Team vs. User 50 for the team 10 for each user
VMs in Library are not counted against Quota Dimension
50 VM limit for all members of user role
10 VM limit per individual member
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. 13

14. Reporting

15. Capacity Reporting and Management
Customer Needs:
I need to know the utilization of my private cloud infrastructure, now
I need to trend my private cloud infrastructure usage over time
I need to forecast future private cloud infrastructure resource needs
I need to do all this with tools I am familiar with

16. Private Cloud Usage Reporting
System Center Marketing
8/1/2018
Private Cloud Usage Reporting
Choose date range
Choose hosts
View results
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. Analysis and What-if Forecasting
Monitor the usage of the private cloud, and trend the data over time
Analyze the historical data to create “what-if” scenarios for future planning

18. Management Across Clouds

19. Hybrid Cloud – Consistent View
Windows Server Management Marketing
8/1/2018
Hybrid Cloud – Consistent View
Enterprise Customer
Microsoft System Center 2012 – App Controller
Service
Provider Cloud
Public Cloud
(Windows Azure)
Private Cloud
System Center 2012 R2 Preview App Controller enables enterprise customers running System Center to use the same pane of glass to move, manage, and monitor workloads across private, service provider, and public clouds. We call this the “hybrid cloud”
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

20. Hybrid Application Example Contoso Corp’s finance application
System Center Marketing
8/1/2018
Hybrid Application Example Contoso Corp’s finance application
Finance app
SQL
App
Web
Other services
DC admin
Contoso Production Cloud
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Hybrid Application Example Contoso Corp’s finance application
System Center Marketing
8/1/2018
Hybrid Application Example Contoso Corp’s finance application
Microsoft
Service provider
On-premises
Finance app
SQL
App
Web
SQL
Contoso Production Cloud
Expand SQL Capacity
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

22. Hybrid Application Example Contoso Corp’s finance application
System Center Marketing
8/1/2018
Hybrid Application Example Contoso Corp’s finance application
Microsoft
Service provider
On-premises
Finance app
App
Web
SQL
App
App
Contoso Production Cloud
Expand SQL Capacity
Move App Tier to Service Provider
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

23. Hybrid Application Example Contoso Corp’s finance application
System Center Marketing
8/1/2018
Hybrid Application Example Contoso Corp’s finance application
Microsoft
Service provider
On-premises
Finance app
Web
Web
SQL
App
Contoso Production Cloud
Expand SQL Capacity
Move App Tier to Service Provider
Deploy Web Tier in Windows Azure
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

24. Hybrid Application Example Contoso Corp’s finance application
System Center Marketing
8/1/2018
Hybrid Application Example Contoso Corp’s finance application
Microsoft
Service provider
On-premises
SQL
App
Web
Microsoft
Service provider
On-premises
SQL
App
Web
Expand SQL Capacity
Move App Tier to Service Provider
Deploy Web Tier in Windows Azure
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25. Treat your Infrastructure like a Service Provider Cloud
Configure the fabric
Create a cloud from the fabric
Delegate the cloud to a self-service user
Deploy VMs
Combine hosts, networking, storage, and library resources together to create a cloud.
Create a cloud from the fabric by moving the underlying infrastructure resources of networking, storage, and compute into the cloud.
Delegate access to self-service users and let them manage cloud resources and create services
Deploy VMs to private clouds or hosts by using VM templates
Objective of the slide
This slide demonstrates the step by step approach to deploy VMs.
Key talking points
It’s not described in this slide, but you need to make sure the first step is complete before continuing on to step 2.
Configure the fabric
Create a cloud from the fabric. Combine hosts and networking, storage, and library resources together to create a service provider cloud.
Delegate access to a self-service user. Delegate access to self-service users and let them manage cloud resources and create services.
Users can deploy VMs to clouds or hosts by using VM templates.

26. Service Provider Foundation (SPF)
REST-based Odata API
Enables Hosted IaaS
Features
VM management
Service management
Self-service VM networks
Multi-tenancy / Multi- stamp
Self-service tenant administration
Enterprise identity for SPF
Extensibility for hosted cloud API
Virtual Machines
Virtual Machine
Manager
Service Templates
Virtual Machine
Manager
VM networks
Virtual Machine Manager
Automation
Orchestrator
Service Provider Foundation is provided with Microsoft System Center 2012 Orchestrator, a component of Microsoft System Center 2012 R2 Preview. Service Provider Foundation exposes an extensible Open Data Protocol (OData) API over a Representational State Transfer (REST) web service that interacts with components of System Center. This enables service providers and large enterprise organizations to design and implement multi-tenant self-service portals that integrate IaaS capabilities available through Microsoft System Center 2012 SP1.
Feature Description:-
VM Management
Create, update, and operate VM’s
Service management
Deploy, update, and operate VMM services.
Scale-out within service tiers
Self-service VM networks
Create, update, and use self-service VM networks.
Multi-tenancy/Multi-stamp
Isolated, role-based access for tenants.
Manage tenants at large scale across multiple VMM stamps.
Self-service Tenant Administration
Tenant admin manages access to hosted IaaS cloud.
Tenant admin configures and manages self-service user roles.
Enterprise identity for SPF
Tenants can authenticate and authorize using corporate identity
Extensibility for hosted cloud API
Extensible REST OData API surface.
Use runbooks to customize processes driven through SPF API.
<click to next slide>
2012

27. Multi-Tenant Isolation
Tenant A
Tenant B
Tenant A Users
Tenant A Admin
Tenant B Users
Tenant B Admin
Tenant A Self-Service User Roles
VM Networks, Templates, VHDs, Allowed Actions
Tenant A
Tenant Admin User Role
Tenant B Self-Service User Roles
VM Networks, Templates, VHDs, Allowed Actions
Tenant B
Tenant Admin User Role
Tenant A Production (Quota)
Tenant A Dev (Quota)
Tenant A Test (Quota)
Tenant B Production (Quota)
Tenant B Dev (Quota)
Tenant B Test (Quota)
Service Provider
Service Provider Foundation
SPF Database
Rest Api
Authentication & Authorization
Aggregation, Tenant Management, Stamp Management
Resources, Actions
Orchestration & Process
Stamps
Tenants
User Roles
Production Cloud
Gold Cloud
Dev Cloud
Test Cloud
European Cloud
Synced User Roles
Synced User Roles
Synced User Roles
VMM 1
VMM 2
VMM3

28. Tenant Network Self Administration
Internet
Hoster physical data center 3
Gateway
Tenant 1 datacenter
Once the gateway is installed and configured, then an organization can use the Windows Azure Pack to provide the front-end, self-service capabilities for the tenants to create their own network connections. Significantly decreasing the amount of touch an IT organization will need to perform to implement multi- tenant solutions. 2
VMM 1 4
Compute
Storage
Network
Windows Azure Pack

29. Next Steps Download evaluation software Learn more Get certified
Download free Microsoft software trials today at the TechNet Evaluation Center.
Learn more
Boost your technical skills with free expert-led technical training from Microsoft Virtual Academy.
Get certified
Get hired, get recognized, and get ahead with certifications from Microsoft.
Evaluate online
Test Microsoft’s newest products and technologies in a virtual environment for free at the Microsoft Virtual Labs.

30. 8/1/2018 3:55 AM
© 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
© 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.