6. Security and Delegation of Control
by Leandro Carvalho, Charbel Nemnom, Patrick Lownds
Windows Server 2016 Hyper-V Cookbook - Second Edition
- Windows Server 2016 Hyper-V Cookbook - Second Edition
- Table of Contents
- Windows Server 2016 Hyper-V Cookbook - Second Edition
- Credits
- About the Authors
- Acknowledgments
- www.PacktPub.com
- Customer Feedback
- Preface
- 1. Installing and Managing Hyper-V in Full, Server Core, and Nano Server
- Introduction
- Verifying Hyper-V requirements
- Enabling the Hyper-V role
- Installing Windows Server 2016, Microsoft Hyper-V Server 2016, and Nano Server
- Managing a Server Core installation using sconfig
- Remotely managing a Nano Server installation
- Managing Nano Server using PowerShell
- Managing Nano Server using Server Management Tools – SMT
- Configuring Hyper-V post-installation settings
- 2. Migrating and Upgrading Physical and Virtual Servers
- Introduction
- Performing an in-place upgrade from Windows Server 2012 R2 to Windows Server 2016
- Exporting and importing virtual machines
- Migrating virtual machines and updating their Integration Services
- Migrating virtual machine using Cross Version Shared Nothing Live Migration
- Migrating virtual machine storage using Storage Migration
- Converting VHD files to VHDX
- Upgrading the VM configuration version
- Converting physical computers to virtual machines
- 3. Managing Disk and Network Settings
- Introduction
- Creating and adding virtual hard disks
- Configuring IDE and SCSI controllers
- Configuring the Storage Quality of Service
- Configuring and adding Virtual Fibre Channel storage
- Creating resource pools
- Enabling and adding NIC teaming
- Creating and managing virtual switches
- Using advanced virtual machine network settings
- Adding and removing vmNICs
- 4. Saving Time and Cost with Hyper-V Automation
- Introduction
- Creating virtual machine templates
- Learning and utilizing basic commands in PowerShell
- Using PowerShell commands for daily tasks
- Enabling and working with remote connection and administration through PowerShell
- Managing virtual machines with PowerShell Direct
- Hyper-V management and PowerShell improvements
- 5. Hyper-V Best Practices, Tips, and Tricks
- 6. Security and Delegation of Control
- 7. Configuring High Availability in Hyper-V
- Introduction
- Installing and configuring block and file storage in Windows Server 2016
- Installing and configuring the Windows Failover Clustering feature
- Enabling cluster shared volumes
- Rolling cluster upgrades
- Configuring Cluster-Aware Updating for cluster nodes
- Using Live Migration in a cluster environment
- Configuring VM Priority for clustered virtual machines
- VM Load Balancing
- VM Compute Resiliency
- 8. Disaster Recovery for Hyper-V
- Introduction
- Backing up Hyper-V and VMs using Windows Server Backup
- Restoring Hyper-V and VMs using Windows Server Backup
- Configuring Hyper-V Replica between three Hyper-V hosts using HTTP authentication
- Configuring Hyper-V Replica Broker for a Failover Cluster
- Configuring Hyper-V Replica to use certificate-based authentication using an Enterprise CA
- Using checkpoints in VMs
- 9. Azure Site Recovery and Azure Backup for Hyper-V
- Introduction
- Enabling Hyper-V virtual machines protection to Azure with Azure Site Recovery and Microsoft Azure Backup Server
- Getting ready
- How to do it...
- Step 1: Create an Azure Site Recovery vault
- Step 2: Prepare Infrastructure - Protection Goal
- Step 2: Prepare Infrastructure – Prepare Source
- Step 2: Prepare infrastructure – Prepare Target
- Step 2: Prepare infrastructure – replication settings
- Step 2: Prepare infrastructure – capacity planning
- Step 3: Replicate the application
- Step 4: Manage Recovery Plans - Create Recovery Plan
- Step 4: Manage Recovery Plans - Customize Recovery Settings
- Step 5: Run a test failover
- Step 6: Monitoring Azure Site Recovery - Jobs, Alerts and Events
- Step 6: Monitoring Azure Site Recovery - General Monitoring
- How it works...
- There's more...
- See also
- 10. Monitoring, Tuning, and Troubleshooting Hyper-V
- A. Hyper-V Architecture and Components
- Index
In this chapter, we will cover the following topics:
- Configuring Windows Update for Hyper-V
- Delegating control in Hyper-V
- Configuring Port ACLs
- Installing and configuring BitLocker for data protection
- Configuring Hyper-V auditing
- Virtual Machine Secure Boot
- VM Protection (vTPM)
- Shielded VM
- Host Resource Protection
In general, security is very important in infrastructure, and this applies to virtualization and hybrid cloud computing as well. In a highly virtual environment, and also in a hybrid cloud, you must ensure that security is met on all layers. The new Hyper-V version comes with lots of configuration options to allow you to protect your host and virtual machines. The core security areas for virtual environments involve settings and options such as software and hardware updates, backup, high availability, access control, network protection, and auditing. In this chapter you will see some of them, such as how to configure Windows Update for the Windows Server 2016 Server Core, Windows Server 2016 Server with Desktop Experience and Nano Server installations, access control using Authorization Manager and Simple Authorization, network protection with Port ACLs, improved virtual machine security with Secure Boot of Generation-2 virtual machines, disk encryption with BitLocker, shielded VMs, and Hyper-V auditing.
By using these configuration options, you can enforce a safer environment for virtual machines and host computers.
-
No Comment