Introduction to Microsoft Azure Case Study

 This case study is provided to help participants of Microsoft Azure program practice

scenarios in the virtual environment

 All participants will have access to the virtual lab and Azure environment

 The credentials to access the lab will be provided by the batch admin to all the

participants

 Note: Virtual lab access will be provided for participants from week two of the course

 Participants are expected to start the course on time and have a basic awareness of

Azure environment by week two

 Each participant will get 8 hours of lab access and are expected to complete this lab

activity in eight hours

 Participants are expected to refer to the case study while taking the course and

complete the case study by the end of the course

 SMEs will be available to respond to your queries in case you need assistance on the

case study

We hope you make the most of this opportunity of ‘learning by doing’!!!

Happy Learning!!
Week 1

1. Learn Basic Concepts

Week 2- Week 3

Creating a Microsoft Azure Virtual Machines

Login into the Portal

1. Launch a browser and navigate to https://manage.windowsazure.com. Once

prompted lo-gin with your Microsoft Azure credentials.

1.a. Note: You may need to launch an "in-private" session in your browser if you have multiple
Microsoft Accounts.

2. After you enter your email, select whether this is a Microsoft or Organization
account.
3. From there you will be directed to the correct provider to lo-gin with your
password.

Create a storage account to contain VHDs for the virtual machines.

1. Select DATA SERVICES -> STORAGE -> QUICK CREATE

2. Specify the storage account properties.
a. Provide a unique name - vm1 for the storage account URL
b. Select Microsoft Azure Location to create the storage account in.
c. Select Locally Redundant for Replication field.
3. Press the checkmark next to CREATE STORAGE ACCOUNT to provision the storage
account.
4. Wait for the storage account creation to complete.

QUICK CREATE virtual machine creation option.

1. Click COMPUTE, VIRTUAL MACHINE and then QUICK CREATE to create a vm1
2. DNS NAME: Unique host name. This value is also the name of the cloud service
container for the virtual machine. The vm1 created here will also be named the
same as the cloud service.
3. USER NAME: Provide a local administrator account name “demouser”.
4. REGION/AFFINITY GROUP: Select the data center location to create the virtual
machine in that region.
Create a virtual machine with the GALLERY virtual machine creation option.

1. Click the NEW button at the bottom left of the management portal.
2. Click COMPUTE, VIRTUAL MACHINE and then FROM GALLERY.
3. Select the server from the virtual machine gallery.
4. Enter the configuration for the virtual machine.
1. VIRTUAL MACHINE NAME: This is the computer name: vm1. This value
must be unique within the same cloud service.
2. SIZE: Small
3. NEW USER NAME: demouser
4. PASSWORD: demo@pass1

5. On the next screen, specify a unique name for your cloud service. Select the
same Microsoft Azure region that you created the storage account in in task two.
For now, keep availability set as none.

6. On the final page place a checkmark by Microsoft Antimalware and press the
Checkmark to Complete.

Connecting two virtual machines

a. Follow the steps in the previous document to create two virtual machines named
vm1 and vm2.
b. Test network connectivity with Ping
c. Enable ICMP on vm2 to validate connectivity.
d. Log into the first virtual machine vm1 by highlighting the virtual machine and
clicking the CONNECT button.
e. Once prompted login with the credentials specified in the creation wizard.
f. Open a command prompt in vm1, by pressing <Windows Key + R> and typing in
CMD then <enter>.
g. Type in ping vm2. You should resolve an IP address, but there will be no
response from the server.
h. Log into the second virtual machine vm2, by highlighting the virtual machine and
clicking the CONNECT button.
i. Once prompted, login with the credentials that you specified in this lab.
j. Once logged in, using Server Manager, click on Tools, Windows Firewall with
Advanced Security.
k. Click Inbound Rules
l. Find the File and Printer Sharing (Echo Request ICMPv4-In) rule, right click on it
and select Enable Rule.
 Switch back to vm1 and in the same command prompt execute ping vm2 again.
This time you should see a response from vm2.

Managing Storage
Add Additional Storage to vm1
Add a new empty data disk to vm1

1. In the Microsoft Azure Manage portal under the Virtual Machine view vm1.
2. Click on ATTACH button in the bottom of the screen.
3. Select Attach Empty Disk from the menu.
4. When the disk property window opens specify 1023 for the SIZE GB field and click the
checkmark to complete.
5. Wait for the update to complete before continuing.
6. Connect to vm1 using remote desktop by selecting vm1 and clicking the CONNECT
button at the bottom of the screen. Login with the credentials used to create the virtual
machine.
7. Once logged in, using Server Manager, click on Tools, Computer Management.
8. In Computer Management Window, select Disk Management in the left pane tree view
under the Storage section. A new window will pop up, with the "Disk 2" displayed. Make
sure Disk 2 is selected and Now click ok button to initialize the disk.
9. Format the disk by right clicking on Disk 2 and selecting New Simple Volume.
10. Assign Letter "E:" for the drive and click next.
11. Specify the volume label as Data, and click Next, followed by the Finish button.
12. You will now the E: drive under devices and drives.
13. Open the drive and create a new text file and write some data on to it.

Copying the Data Disk to vm2

Task 1 – Configure Storage Account Access with CloudXplorer

1. Open CloudXplorer and click on File, Accounts on the menu.

2. Click New, Microsoft Azure Account.
3. Switch back to the Microsoft Azure Management Portal and select Storage on the left
navigation.
4. Select the storage account that your disks are hosted in and then click MANAGE ACCESS
KEYS.
5. Use the copy button by STORAGE ACCOUNT NAME and PRIMARY ACCESS KEY to copy
the values from your storage account to the CloudXplorer account.
6. Close out the dialog in CloudXplorer using the OK button.
Task 3 - Create a container in Microsoft Azure using CloudXplorer

1. In CloudXplorer, select the Storage Account Name that is shown in the tree Navigation
pane in the left.
2. Right mouse click on the right pane and select option New, Container.
3. Specify the container name: Backup
4. Click on "Ok" button and you will see the container created.

Task 4 - Make a copy of the data disk in to the new container

1. Using CloudXplorer, select the container vhds. Right click on the 1GB VHD file that was
created earlier and select Copy.
2. Click on the new container backup and on the right pane click paste to copy the VHD
file.

Task 5 - Create a New Disk Mapped to the copied VHD

1. Switch back to the Microsoft Azure Management Portal and select VIRTUAL MACHINES
on the left navigation and then click the DISKS tab at the top.
2. Click on the CREATE button in the bottom of the page to create the disk.
3. Specify copieddiskdemo for the NAME and click on the browse button to select the VHD
that you copied.
4. In the BROWE CLOUD STORAGE window, select the backup container that you created
using CloudXplorer.
5. Select the VHD that you copied and click open.
6. In the Create a disk from a VHD dialog, click the check mark to continue and create the
disk.

Task 6 - Attach the New Disk to vm2.

1. Go to Virtual Machines tab in the Microsoft Azure Manage Portal and select vm2.
2. Click on the ATTACH button and click Attach Disk
3. Select copieddiskdemo in the AVAILABLE DISKS dropdown and press the check mark to
complete.
4. Select the vm2 virtual machine again and click CONNECT on the bottom menu.
5. Once logged in, browse to the newly attached data disk.

View the data file that was on the disk from the other virtual machine.

Step 1: Verify Subnet

1. Drop down to Create an availability set

2. Enter name for the availability set.
3. Click Next
 4. Click Next
5. Once the VM is provisioned go to the next step

Step 2: Add the Server to the Domain

Since the AD FS server needs to authenticate against Active Directory, they need to be added to the
local domain. Add the server to the local domain

Step 3: Install the Azure Active Directory Module for Windows PowerShell

Step 4: Install the AD FS Role

1. Open Server Manager

2. Click Add roles and features
3. Click Next
4. Select Role-based or feature-based installation
5. Click Next
6. Make sure that the AD FS Server is listed as the server to install to
7. Click Next
8. Select Active Directory Federation Services
9. Click Next
10. Leave defaults
11. Click Next
12. Click Next
13. Click Install
14. Wait for the install to complete

Step 5: Import the SSL Certificate

6. Open the Start Screen

7. Type MMC
8. Click the MMC app
9. MMC opens
10. Click File
11. Click Add/Remove Snap-in
12. Select Certificates
13. Click Add>
14. Select Computer Account
15. Click Next
16. Select Local Computer
17. Click Finish
18. Click OK
19. Expand Certificates
20. Expand Personal
21. Right Click Certificates
22. Select Import
23. Select Local Machine
24. Click Next
25. Browse to the Exported Certificate
26. Click Next
27. Enter Password
28. Mark the key as exportable
29. Click Next
30. Place in the Personal certificate store
31. Click Next
32. Click Finish
33. Click OK

Step 6: Setup and Configure AD FS 3.0

1. Open Server Manger

2. Select AD FS
3. Click More… where it says Configuration required for Active Directory Federation Servers at…
4. Click Configure the federation service… action on the Post-Deployment Configuration
5. Select Create the first federation server in a federation server farm
6. Click Next
7. Enter credentials for a user that has domain administrator permissions. This is used to complete
the install, it’s not used as the AD FS service account
8. Click Next
9. Select the SSL certificate that you imported
10. Select the Federation Service Name
11. Enter the Federation Service Display Name
12. Click Next
13. Enter the AD FS Service Account Name and Password
14. Click Next
15. Select Windows Internal Database or the location of a SQL Server Database. The choice is yours,
but for most companies the Windows Internal Database works just fine
16. Click Next
17. Click Next.
18. Wait for the Pre-requisite checks to be completed
19. Click Configure
20. Click Close

_______________________End______________________________