Your Browser is Out of Date

Nytro.ai uses technology that works best in other browsers.
For a full experience use one of the browsers below
HCI Operations Guide—Managing and Monitoring the Solution Infrastructure Life Cycle
Notes, cautions, and warnings Copyright Introduction Day 1 operations Managing and monitoring clusters with Windows Admin Center Dell EMC OpenManage Integration with Windows Admin Center
Dell EMC OpenManage Integration with Windows Admin Center
Overview
Prerequisites for managing AX nodes
Installing the OMIMSWAC license
Managing Microsoft HCI-based clusters
Full Stack Cluster-Aware Offline Updating
Full Stack Cluster-Aware Updating for Azure Stack HCI clusters using the OpenManage Integration snap-in
Updating a stand-alone node before adding it to the cluster
Updating a single node cluster
Secure cluster with Secured-core
Enabling operating system features
Protect your infrastructure with infrastructure lock
Manage CPU cores in Azure Stack HCI clusters
Cluster expansion
Validate and remediate Azure Stack HCI clusters
Onboard Dell policies to Azure Arc from Windows Admin Center to manage Azure Stack HCI clusters
View recommendations for storage expansion
Known issues
Updates and maintenance

Enabling operating system features

Enabling operating system features

    1. Intel chipset driver version 10.1.18793.8276 and above should be installed for AX-650 and AX-750xd.
    2. AMD chipset driver version 2.18.30.202 and above should be installed for AX-7525.
    1. OS Settings can be enabled by manually modifying the registry settings or by leveraging the WAC Security Extension.
      • Using registry settings
      1. Run the following commands on each server in a cluster: 
                reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v "Enabled" /t REG_DWORD /d 1 /f
        reg add “HKLM\System\CurrentControlSet\Control\DeviceGuard\Scenarios\SystemGuard” /v “Enabled” /t REG_DWORD /d 1 /f
        Note: After you run these commands, restart the servers one at a time, see Restarting a cluster node or taking a cluster node offline

      • Using Windows Admin Center Security extension:
      1. Log in to Windows Admin Center, and connect to the cluster.
      2. In the Extensions, click Security.
      3. In the Security page, click Secured-Core.
      4. Select Hyper Hypervisor Enforced Code Integrity (HVCI) and System Guard, then click Enable.


        Note: After you run these commands, restart the servers one at a time, see Restarting a cluster node or taking a cluster node offline

      5. After the settings are enabled and each server is restarted, the Secured-Core section on each server must show all features with the On status.


    2. The BIOS and OS settings can be verified using OMIMSWAC.


    Dell Technologies and Microsoft recommends enabling Secured Core for Azure Stack HCI 21H2 and Windows Server 2022 that includes both the Dell EMC Infrastructure and Microsoft Operating System features to protect the infrastructure from external threats.