Deployment

Deployment Instructions

1. Edit ARM parameter file azuredeploy.parameters.json

   • Deployment prefix that precedes all resource names.

   • Address prefixes (VNET Address prefix, subnets, static server IP addresses). Example address plan:

     Supernet	VNET Address Space	Subnet Name	Subnet Prefix
     172.25.98.0/23	172.25.98.0/24	Gateway	172.25.98.0/27
     		ADDS	172.25.98.32/27
     		ADFS	172.25.98.64/27
     		WAP	172.25.98.96/27
     		JUMP	172.25.98.128/27
     	Other existing VNETs

   • Tag values.

   • Azure AD Object Id (group or user) that gets full access to the Key Vault access policy.

   • VM SKU.

   • Name of Active Directory Forest to be created.

2. Run a local PowerShell session with the Az Stack modules installed. See this to find out how to install the modules for Stack.

3. Connect to the desired tenant Connect-AzAccount -Environment AzureStack

4. Run deploy.ps1

5. Follow-up manual steps:

   • RDP into the Jump Server with the domain admin credentials (from Key Vault)
   • Configure the Certification Authority
   • Configure ADFS and WAP

The diagram below depicts how the PowerShell script and ARM template deploy the resources.

Deployment Diagram