Chat now with support
Chat with Support

Cloud Access Manager 8.1.2 - How To Deploy Cloud Access Manager in a Virtual Private Cloud

Creating the virtual machines

This example uses two virtual machines and follows a typical production installation of Dell™ One Identity Cloud Access Manager. For example, one machine for the proxy host and another machine for the Security Token Service (STS) host. Additional hosts can be added later if you need to increase capacity.

To create a typical production installation of Cloud Access Manager
1
Create a new virtual machine for the proxy host using the FROM GALLERY wizard. Select the Windows Server 2008 R2 SP1 Windows Azure™ image.
2
On the Configuration tab for the first virtual machine, set the size of the virtual machine to medium or higher.
3
On the Configuration tab for the second virtual machine, set the Region/Affinity group/Virtual network field to the name of the virtual network you created earlier.
NOTE: This cannot be easily changed after the virtual machine has been created.
4
On the Endpoints tab, add HTTP and HTTPS endpoints to allow users to access the proxy from the Internet.

5
Repeat the process to create a new virtual machine for the STS host; no Endpoints are required for the STS host.
6
Power up both virtual machines ensuring they can be accessed using the Remote Desktop client. To test connectivity over the virtual private network (VPN), connect using the private IP address rather than the public IP address for the virtual machine.

Preparing Cloud Access Manager hosts

To prepare the Cloud Access Manager hosts
1
Join the Security Token Service (STS) host to your Active Directory® domain using the normal procedure.
2
Log in to the STS host as a domain admin and install Microsoft® SQL Server® 2012.
3
You do not need to join the proxy host to the domain.

Cloud Access Manager configuration

To configure Cloud Access Manager
1
Perform a standard production installation as described in the Dell™ One Identity Cloud Access Manager Installation Guide.
2
When you configure the wildcard DNS subdomain to use with Dell™ One Identity Cloud Access Manager, the wildcard subdomain should resolve to the public Virtual IP (VIP) address of the proxy host. The VIP can be obtained from the Windows Azure™ UI by navigating to the Virtual Machine for the proxy host.
3
Add the external wildcard DNS subdomain to your internal DNS. Ensure that it resolves to the internal/private IP address of the proxy host. This will allow users on the on-premise network to access Cloud Access Manager over the virtual private network (VPN) connection instead of through the Internet.

Legal notices

Copyright 2016 Dell Inc. All rights reserved.

This product is protected by U.S. and international copyright and intellectual property laws.

This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser’s personal use without the written permission of Dell Inc.

The information in this document is provided in connection with Dell products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Dell products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, DELL ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL DELL BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF DELL HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Dell makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Dell does not make any commitment to update the information contained in this document.

If you have any questions regarding your potential use of this material, contact:

Dell Inc.
Attn: LEGAL Dept
5 Polaris Way
Aliso Viejo, CA 92656

Refer to our web site (quest.com) for regional and international office information.

Trademarks

Dell and the Dell logo, Dell™ One Identity Cloud Access Manager and Dell™ SonicWALL are trademarks of Dell Inc.and/or its affiliates. Microsoft, Windows Server, Active Directory, Windows Azure and SQL Server are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. Dell disclaims any proprietary interest in the marks and names of others.

Legend

 

CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed.

WARNING: A WARNING icon indicates a potential for property damage, personal injury, or death.

IMPORTANT NOTE, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating