Your Browser is Out of Date

Nytro.ai uses technology that works best in other browsers.
For a full experience use one of the browsers below
Azure Portal Deployment and Operations Guide with Switchless Networking
About using this guide Revision history Deployment Introduction Solution introduction Solution Deployment Deploy a cluster with Azure Stack HCI 23H2 operating system Update Azure Stack HCI clusters using SBE package GPU Integration Registering a Partner Admin Link (PAL) for Azure related solutions Dell OpenManage Integration with Windows Admin Center
Dell OpenManage Integration with Windows Admin Center
Overview
Prerequisites for managing AX nodes
Managing Microsoft HCI-based clusters
Overview Prerequisite checks Health status Inventory Locating physical disks and viewing their status
Enabling hardware alerts for HCI cluster
Secure cluster with Secured-core
Enabling operating system features
Protect your infrastructure with infrastructure lock
Enable or disable infrastructure lock
Manage CPU cores in Azure Stack HCI clusters
Validate and remediate Azure Stack HCI clusters
View HCP compliance summary
Onboard Dell policies to Azure Arc from Windows Admin Center
View recommendations for storage expansion
View node level storage configuration details
Updates and maintenance Secure connect gateway References

Enabling operating system features

Home > Integrated Products > Microsoft HCI Solutions from Dell Technologies > Guides 23H2 and later > Azure Portal Deployment and Operations Guide with Switchless Networking > Enabling operating system features

Enabling operating system features

    1. Intel chipset driver version 10.1.18793.8276 and above should be installed for AX-650, AX-750, and AX-750xd.
    2. AMD chipset driver version 2.18.30.202 and above should be installed for AX-7525.
    1. OS Settings can be enabled by manually modifying the registry settings or by leveraging the WAC Security Extension.
      • Using registry settings
      1. Run the following commands on each server in a cluster: 
        reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v "Enabled" /t REG_DWORD /d 1 /f
        reg add “HKLM\System\CurrentControlSet\Control\DeviceGuard\Scenarios\SystemGuard” /v “Enabled” /t REG_DWORD /d 1 /f
        Note: After you run these commands, restart the servers one at a time, see Restarting a cluster node or taking a cluster node offline.

      • Using Windows Admin Center Security extension:
      1. Log in to Windows Admin Center and connect to the cluster.
      2. In the Extensions, click Security.
      3. In the Security page, click Secured-Core.
      4. Select Hyper Hypervisor Enforced Code Integrity (HVCI) and System Guard, then click Enable.
        Figure 40. Secured core

        Secured core

        Note: After you run these commands, restart the servers one at a time, see Restarting a cluster node or taking a cluster node offline.

      5. After the settings are enabled and each server is restarted, the Secured-core section on each server must show all features with the On status.
        Figure 41. Secured core status

        Secured core status

    2. The BIOS and OS settings can be verified using OMIMSWAC.
    3. Select View > Security. From the drop-down menu, select Secured Core.
    Dell Technologies and Microsoft recommends enabling Secured Core for Azure Stack HCI 23H2, and Windows Server 2022 that includes both the Infrastructure and Microsoft Operating System features to protect the infrastructure from external threats.