service provider foundation – Page 2 – UseIT

Hi, folks!

This is the first part of series of posts related with Windows Azure Pack (WAP) and VMM Clouds.

Article 1 : SPF installation (you are here)

Article 2 : WAP and its optional resources

Article 3: WAP+VM Cloud Service

I’ll try to show you how to install all required components and connect WAP to your VMM Cloud. But now let’s talk about SPF.

Service Provider Foundation (SPF) is provided with System Center 2012 – Orchestrator, a component of System Center 2012 R2 (and System Center 2012 SP1). Service Provider Foundation exposes an extensible OData web service that interacts with Virtual Machine Manager (VMM). This enables service providers and hosters to design and implement multi-tenant self-service portals that integrate IaaS capabilities available on System Center 2012 R2. The following picture shows how SC w/SPF interacts with WAP to provide VM Cloud Services (see TechNet article for more info):

As every installation, SPF requires additional software, features and server roles. Setup wizard checks prerequisites and reports about their status. Unfortunately, there is no “button” to install all of requirements automatically. I’ve wrote a sample script to automate this process (see below). SQL Server is virtual machine srv-sql-01, SPF is the virtual machine srv-spf-01. Don’t try to install SPF 2012 R2 on VMM Server. It’s not supported. However, SPF 2016 can run on the same server as the VMM (although I don’t recommend such co-existence).

Requirements:

OS – Server 2012 R2 ; SPF 2016 – 2012 R2 and later
SQL Server 2012 SP2 and up to SQL Server 2014 SP1
SPF 2016: SQL Server 2012 SP2 and up to SQL Server 2016
Feature – Management OData Internet Information Services (IIS) Extension
Feature – NET Framework 4.5 features, WCF Services, and HTTP Activation.
Web Server (IIS) server. Include the following services:

Basic Authentication

Windows Authentication

Application Deployment ASP.NET 4.5

Application Development ISAPI Extensions

Application Deployment ISAPI Filters

IIS Management Scripts and Tools Role Service

Web Services:

WCF Data Services 5.0 for OData V3

ASP.NET MVC 4

Virtual Machine Manager 2012 R2/2016 Console
Certificates: self-signed (wizard creates one automatically) or obtained SSL-certificate (recommended for production)

Here is the script for installation all requirements (don’t forget to install VMM console manually). Works for SPF 2016 as well.

#IIS + Process activation model
Install-WindowsFeature Web-Asp-Net45,Web-Scripting-Tools,Web-Basic-Auth,Web-Windows-Auth,NET-WCF-Services45,Web-ISAPI-Ext,Web-ISAPI-Filter,Web-Scripting-Tools,WAS-Process-Model,WAS-Config-APIs,ManagementOdata
#Download and install WcfDataServices and AspNetMVC4
New-Item C:\SPFRequirements -ItemType Directory
Invoke-WebRequest https://download.microsoft.com/download/8/F/9/8F93DBBD-896B-4760-AC81-646F61363A6D/WcfDataServices.exe -OutFile C:\SPFRequirements\wcfdatasvc.exe
Invoke-WebRequest https://download.microsoft.com/download/2/F/6/2F63CCD8-9288-4CC8-B58C-81D109F8F5A3/AspNetMVC4Setup.exe -OutFile C:\SPFRequirements\aspnetmvc.exe
Set-Location C:\SPFRequirements
.\aspnetmvc.exe /quiet
Wait-Process aspnetmvc
.\wcfdatasvc.exe /quiet
Wait-Process wcfdatasvc
Write-Host "All prerequisites are installed. Insert VMM DVD and install VMM Console manually. Then your environment will be ready for SPF installation"

Mount ISO with Orchestrator and run SetupOrchestrator.exe and click on “Service Provider Foundation”

Click Install

Accept license terms and click Next

We’ve already installed all prerequisites, so just click Next

Define SQL Server Name , Port Number and click Next. If you unable to reach SQL Server you have to open firewall ports (https://support.microsoft.com/kb/968872) or check SQL TCP properties

Choose certificate type (I’ll use self-signed in my DEMO) and click Next

Define application pool credentials and domain groups or users who will have an access to SPF services and click Next. It’s recommended to create new domain accounts for every SPF services instead of using Network Service account