- Notes, cautions, and warnings
- Executive summary
- Solution Overview
- Prerequisites
- Environmental requirements
- Power distribution unit (PDU) power-drop requirements
- Azure connection, identity store, and billing-model decisions
- Choosing connection options and identity store
- Features that are impaired or unavailable in disconnected mode
- Required customer-provided security certificates
- Mandatory certificates
- Optional PaaS certificates
- Certificate requirements and validation
- License requirements
- Azure Stack Hub endpoints and customer port requirements
- Hardware Infrastructure
- Hardware components
- Overview
- PowerEdge R840 server for dense and GPU scale units
- PowerEdge R740xd server for hybrid scale units
- PowerEdge R640 server for HLH and all-flash scale units (GPU support)
- PowerSwitch N3248TE-ON management switch
- PowerSwitch S5248F-ON ToR switch
- Cisco Nexus 93180YC-FX switch
- Cisco Nexus 9348GC-FXP switch
- Switch dimensions
- Dell Integrated System factory-rack dimensions
- Rail kit information
- Dense scale unit configuration
- Hybrid scale-unit configuration
- All-flash scale-unit configuration
- All-flash tactical configuration
- Hardware components
- Networking and Cabling
- Operations and Management Software
- Security
- Maintaining the Solution
- Backup and Recovery
- Conclusion
- License Retrieval
- Dell Technologies Support and Consulting Offerings
Dell Integrated System for Microsoft Azure Stack Hub Tech Book
Security overview
Security that is incorporated into the design is a key tenet of Microsoft Azure Stack Hub. Security features enabled for the solution include:
-
Firmware
- TPM 2.0 and SecureBoot are enabled.
- All firmware and driver update packages are signed.
- The firmware update is secured and uses Windows Cryptograms implementations.
-
Software
- BitLocker is enabled on all hard drives.
- Defense Information System Agency (DISA) Security Technical Implementation Guide (STIG) class security policies are applied and enabled.
- Device guard and credential guard are enabled.
- Allowlisting is enabled to ensure that unknown software cannot be run on host systems.
- Defender is enabled on the HLH host for anti-malware.
- Federal Information Processing Standards (FIPS) 140-2 compliant crypto algorithms are used for internal stack communication.
-
Network traffic
- The network is encrypted.
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please select whether the article was helpful or not.
Comments cannot contain these special characters: <>()\