Your Browser is Out of Date

Nytro.ai uses technology that works best in other browsers.
For a full experience use one of the browsers below
E2E Deployment and Operations Guide with Switchless Networking (Windows)
About using this guide Deployment Introduction Solution Overview Solution Deployment Network integration overview Switchless Architecture Additional guidance for all configurations Deploying and Configuring a Host Cluster Persistent Memory for Windows Server HCI Day 1 operations Managing and monitoring clusters with Windows Admin Center Dell OpenManage Integration with Windows Admin Center
Dell OpenManage Integration with Windows Admin Center
Overview
Prerequisites for managing AX nodes
Installing the OMIMSWAC license
Managing Microsoft HCI-based clusters
Overview Prerequisite checks Health status Inventory Locating physical disks and viewing their status Viewing update compliance and updating the cluster
Full Stack Cluster-Aware Offline Updating
Full Stack Cluster-Aware Updating for Azure Stack HCI clusters
Updating a standalone node before adding it to the cluster
Enabling hardware alerts for HCI cluster
Secure cluster with Secured-core
Enabling operating system features
Protect your infrastructure with infrastructure lock
Enable or disable infrastructure lock
Manage CPU cores in Azure Stack HCI clusters
Validate and remediate Azure Stack HCI clusters
View HCP compliance summary
View recommendations for storage expansion
View node level storage configuration details
Known issues
Updates and maintenance Secure connect gateway

Enabling operating system features

Home > Integrated Products > Microsoft HCI Solutions from Dell Technologies > Guides 22H2 and earlier > E2E Deployment and Operations Guide with Switchless Networking (Windows) > Enabling operating system features

Enabling operating system features

    1. Intel chipset driver version 10.1.19879.8585 and above should be installed for 15 generation AX-Node.
    2. Intel chipset driver version 10.1.19913.8607 and above should be installed for 16 generation AX-Node.
    3. AMD chipset driver version 2.18.30.202 and above should be installed for AX-7525.
    1. OS Settings can be enabled by manually modifying the registry settings or by leveraging the WAC Security Extension.
      • Using registry settings
      1. Run the following commands on each server in a cluster: 
        reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v "Enabled" /t REG_DWORD /d 1 /f
        reg add "HKLM\System\CurrentControlSet\Control\DeviceGuard\Scenarios\SystemGuard" /v "Enabled" /t REG_DWORD /d 1 /f
        Note: After you run these commands, restart the servers one at a time, see Restarting a cluster node or taking a cluster node offline.

      • Using Windows Admin Center Security extension:
      1. Log in to Windows Admin Center and connect to the cluster.
      2. In the Extensions, click Security.
      3. In the Security page, click Secured-Core.
      4. Select Hyper Hypervisor Enforced Code Integrity (HVCI) and System Guard, then click Enable.

        Screen shot of Security

        Note: After you run these commands, restart the servers one at a time, see Restarting a cluster node or taking a cluster node offline.

      5. After the settings are enabled and each server is restarted, the Secured-Core section on each server must show all features with the On status.

        Screen shot of Security

    2. The BIOS and OS settings can be verified using OMIMSWAC.
    3. Select View > Security. From the drop-down menu, select Secured Core.

    Dell Technologies and Microsoft recommends enabling Secured Core for Windows Server 2022 that includes both the Infrastructure and Microsoft Operating System features to protect the infrastructure from external threats.