Your Browser is Out of Date

Nytro.ai uses technology that works best in other browsers.
For a full experience use one of the browsers below
Tech Book—Dell Integrated System for Microsoft Azure Stack Hub
Executive summary Solution Overview Prerequisites
Prerequisites
Environmental requirements
Power distribution unit (PDU) power-drop requirements
Azure connection, identity store, and billing-model decisions
Choosing connection options and identity store
Features that are impaired or unavailable in disconnected mode
Required customer-provided security certificates
Mandatory certificates
Optional PaaS certificates
Certificate requirements and validation
License requirements
Azure Stack Hub endpoints and customer port requirements
Hardware Infrastructure Networking and Cabling Operations and Management Software Security Maintaining the Solution Backup and Recovery Conclusion License Retrieval Dell Technologies Support and Consulting Offerings

Certificate requirements and validation

Certificate requirements and validation


  • Generating Azure Stack Hub certificate signing requests

    The Microsoft Azure Stack Hub Readiness Checker tool is available from the PowerShell Gallery. The tool creates Certificate Signing Requests (CSRs) for an Azure Stack Hub deployment. Certificates should be requested, generated, and validated with enough time to test before deployment.

    The Azure Stack Readiness Checker tool (AzsReadinessChecker) performs the following certificate requests:


    Required Extension Host certificates

    The implementation of Microsoft Extension Host requires two wildcard SSL certificates, one for the admin portal and one for the tenant portal. Customers who have deployed Azure Stack Hub systems must provide these two additional certificates.

    For more information, see Azure Stack Hub public key infrastructure certificate requirements > Validate.


    Certificate validation

    You can use the Azure Stack Readiness Checker tool to validate that the generated PKI certificates are suitable for predeployment. When you validate certificates, schedule enough time to test and get certificates reissued if necessary.

    Important: Treat the PKI certificate PFX file and password as sensitive information.