private image management guide...image contact o&m personnel to confirm the image name, which...

Workspace

Private Image Management Guide

Issue 07

Date 2018-08-10

Contents

1 Creating Private Images............................................................................................................... 11.1 Introduction.................................................................................................................................................................... 11.1.1 Solution Overview.......................................................................................................................................................11.1.2 Procedure..................................................................................................................................................................... 11.2 Creating Private Images..................................................................................................................................................21.2.1 Creating ECSs..............................................................................................................................................................21.2.2 Configuring ECS OSs..................................................................................................................................................31.2.3 Creating Private Images...............................................................................................................................................9

2 Updating Private Images............................................................................................................102.1 Image Update Overview...............................................................................................................................................102.1.1 Image Update Solution.............................................................................................................................................. 102.1.2 Image Update Process............................................................................................................................................... 102.2 Updating Private Images...............................................................................................................................................11

3 Creating Desktops Using Private Images............................................................................... 153.1 Introduction.................................................................................................................................................................. 153.2 Creating Desktops.........................................................................................................................................................15

A Change History........................................................................................................................... 18

WorkspacePrivate Image Management Guide Contents

Issue 07 (2018-08-10) ii

1 Creating Private Images

1.1 Introduction

1.1.1 Solution OverviewUsers can pair desired application software with a Windows ECS instance, convert theinstance into a private image, and create a desktop using the private image.

Workspace allows users to create and update private images based on Windows Server 2008R2 and Windows Server 2016. This document uses Windows Server 2008 R2 as an example.The operation differences when other OSs are used are described in the procedures.

1.1.2 ProcedureFigure 1-1 shows the process for creating a private image.

Figure 1-1 Process for creating a private image

WorkspacePrivate Image Management Guide 1 Creating Private Images

Issue 07 (2018-08-10) 1

1.2 Creating Private Images

1.2.1 Creating ECSs

Scenario

This section describes how to create ECSs to prepare for subsequent ECS configuration andimage creation.

Prerequisites

You have obtained the username and password for logging in to Console Home.

Procedure

Step 1 In the browser address box, type the IP address of Console Home and press Enter.

Step 2 Enter the username and password and click Log In.

Step 3 Select Elastic Cloud Server.

Step 4 On the Cloud Server Console page, click Create ECS.

Step 5 Set the following parameters, and click Create Now:

Table 1-1 Parameter settings

Tab Parameter Configuration Description

Basicinformation

ECS Name Enter the name based on site requirements.

ECS Type General-purpose

vCPU 4 vCPUs

Memory 8 GB. Memory varies with ECS types. Therefore,select your desired memory based on siterequirements.

Image Type Select the public image.

Image Contact O&M personnel to confirm the imagename, which must meet the followingrequirements:l The image must be selected based on the OS

type of the ECS to be created.l The cloudInit function must be included.

Disk System disk 80 GB


Issue 07 (2018-08-10) 2


Network NIC Retain the default settings.NOTE

l If there are no available NICs, choose BasicInformation > AZ to select another AZ.

l Enable port 3389 for the security group.

EIP Select Automatically Assign.

Login andFileInjection

Key pair If this is your first login, create a key pair.NOTE

Upon your first login, create a certificate as follows:

1. Choose Cloud Server Console > Key Pair, andclick Create SSH Key Pair on the right.

2. In the Information dialog box that is displayed,click OK.

NOTE

Retain the default values for other parameters involved in the page.

Step 6 On the Resource Details page, confirm the specifications of the selected ECS.

Step 7 Click Submit.

After the application is complete, choose Cloud Server Console > Elastic Cloud Server.The created ECS is displayed. Take note of the ECS' Elastic IP Address (EIP).

Step 8 Choose More > Get Password.

Step 9 In the window that is displayed, click Select File, and select the created SSH Key.

Step 10 Click Get Password to obtain the password and keep it secure.

----End

1.2.2 Configuring ECS OSs

Scenario

This section describes how to install application software, configure patch updates, and installsystem patches in ECSs based on site requirements.

Prerequisites

Preparing data

l You have obtained the EIP of the ECS.l You have obtained the username and password for logging in to the ECS.

Preparing files

Table 1-2 lists the files to be prepared.


Issue 07 (2018-08-10) 3

Table 1-2 Preparing files

File Name Description How to Obtain

FusionAccess_Windows_Installer_V100R006C10.iso

Image creation tool forWindows

Click here

KB2958122 A patch for Windows Server2008 R2 SP1 OSNOTE

The KB2958122 patch must beinstalled only when you create aWindows Server 2008 user VMimage.

Click here

System patches OS patches Prepared by the user

Applications Software (office and real-timecommunication software) isprepared by users based onpersonal requirements.

Prepared by the user

Peripheral drivers Peripheral drivers are preparedby users based on personalrequirements.

Prepared by the user

ProcedureNOTE

The following uses Windows Server 2008 R2 as an example. The procedure varies with the OSs.

(Optional) Enabling remote access permission

NOTE

Skip this section if remote access permission for ECSs has been enabled.

Step 1 On the row that contains the newly created ECS, click Remote Login.

Step 2 On the ECS login page, enter the obtained username and password and press Enter.

Step 3 Click . On the page that is displayed, enter sysdm.cpl and press Enter.

Step 4 Click Remote.

Step 5 Select Allow connections from computers running any version of Remote Desktop (lesssecure), as shown in Figure 1-2.


Issue 07 (2018-08-10) 4

https://obs-workspace-share.obs.telefonicaopencloud.com/FusionAccess_Windows_Installer_V100R006C10.iso

https://support.microsoft.com/en-us/kb/2958122

Figure 1-2 System Properties

Step 6 Click OK.

----End

Copying files

Step 1 Run mstsc.

Step 2 Enter the ECS EIP and click Connect.

Step 3 Enter the username and password for logging in to the ECS and click OK.

Step 4 Copy non-ISO files, such as tools, OS patches, peripheral drivers, and application installationprograms to the C:\ directory on the desktop.

NOTE

By default, the ECS cannot decompress ISO files. Therefore, copy the decompressed ISO files to theECS.

----End

Configuring Time Zone and Daylight Saving Time (DST)

Step 1 Log in to the ECS using Remote Login.

Step 2 Click the date and time zone on the right of the taskbar. In the dialog box that is displayed,click Change date and time settings.


Issue 07 (2018-08-10) 5

Step 3 Click Change date and time.

The Date and Time Settings dialog box is displayed.

Step 4 Set the date and time and click OK.

Step 5 Click Change time zone.

The Time Zone Settings dialog box is displayed.

Step 6 Select the time zone and click OK twice.

NOTE

Select Automatically adjust clock for Daylight Saving Time on the Time Zone Settings page.

----End

Installing OS patches

NOTE

The KB2958122 patch must be installed only when you create a Windows Server 2008 user VM image.

Step 1 Install patche KB2958122.

Step 2 Install patches for other OSs based on site requirements.

----End

Installing application software

Step 1 Install application software based on site requirements.

NOTICESome security software (such as the antivirus software, safeguard, and firewall) may conflictwith the Microsoft encapsulation tool, causing blue screen of death (BSOD) or blank screenerrors on created desktops or resulting in a desktop creation failure. Therefore, install securitysoftware only after the desktops are provisioned successfully.

----End

(Optional) Installing peripheral drivers

Step 1 Install peripheral drivers based on site requirements.

----End

Disabling DNS registration on the NIC

Step 1 Choose Start > Run.

The Run dialog box is displayed.

Step 2 In Open, type ncpa.cpl and press Enter.

The Network Connections window is displayed.


Issue 07 (2018-08-10) 6

Step 3 Right-click the NIC and choose Properties.

Step 4 In the Local Area Connection Properties window that is displayed, double-click InternetProtocol Version 4 and choose Advanced.

Step 5 In the Advanced TCP/IP Settings dialog box that is displayed, click DNS.

Step 6 Deselect Register this connection's addresses in DNS, as shown in Figure 1-3.

Figure 1-3 Advanced TCP/IP settings

Step 7 Click OK.

----End

Enabling "Do not display Manage Your Server page at logon"


Issue 07 (2018-08-10) 7

Step 1 Choose Start > Run.

The Run dialog box is displayed.

Step 2 In Open, type gpedit.msc and press Enter.

The Local Group Policy Editor window is displayed.

Step 3 In the navigation tree, choose Computer Configuration > Administrative Templates >System, as shown in Figure 1-4.

Figure 1-4 Do not display Manage Your Server page at logon

Step 4 In the right pane, double-click Do not display Manage Your Server page at logon.

The Do not display Manage Your Server page at logon dialog box is displayed.

Step 5 Select Enabled.

Step 6 Click OK.

Close the Do not display Manage Your Server page at logon dialog box.

Step 7 Close the Local Group Policy Editor window.

----End

Enabling the "Allow log on locally" group policy that allows standard user groups tolocally log in to the Windows system

Step 1 In the right pane of the Local Group Policy Editor window, double-click Allow log onlocally.

The Allow log on locally Properties dialog box is displayed.

Step 2 Click Add User or Group.

The Select Users or Groups dialog box is displayed.

Step 3 Click Object Types, select Groups, and click OK.


Issue 07 (2018-08-10) 8

Step 4 In the Enter the object names to select area, enter Users to query and add the Users group tothe policy.

Step 5 Click OK.

Step 6 Close the Local Group Policy Editor window.

----End

Encapsulating an image

Step 1 Set automatic login to Windows using the Administrator account. For details about how toset automatic login, see How to turn on automatic logon in Windows.

Step 2 In the C:\ directory of the ECS, locate FusionAccess_Windows_Installer_XXX, thedecompressed template tool folder.

Step 3 In the blank area of the opened window, hold down Shift, right-click, and select Opencommand windows here.

Step 4 In Command Prompt, run the following command to encapsulate the image:

run_silent.bat --passive

Step 5 After image encapsulation is complete, the ECS is automatically shut down.

----End

1.2.3 Creating Private Images

Scenario

This section describes how to create private images.

Prerequisitesl You have obtained the username and password for logging in to Console Home.

l You have obtained the password of Administrator.

Procedure

Step 1 Log in to Cloud Server Console.

Step 2 In the list on the left, click Elastic Cloud Server.

Step 3 On the row that contains the ECS to be converted to an image, choose More > Make Imagefrom the drop-down list.

The Create Private Image page is displayed.

Step 4 Enter the planned image name, for example, Workspace_Image_01 and click Create Now.

Image creation takes about 10 to 15 minutes. Choose Cloud Server Console > Image MgmtService > Private Image. You can view the created images in the list.

----End


Issue 07 (2018-08-10) 9

https://support.microsoft.com/en-us/help/324737/how-to-turn-on-automatic-logon-in-windows

2 Updating Private Images

2.1 Image Update Overview

2.1.1 Image Update SolutionIf you want to install new application software, drivers, and system patches, update privateimages.

2.1.2 Image Update ProcessFigure 2-1 shows the process for updating a private image.

WorkspacePrivate Image Management Guide 2 Updating Private Images

Issue 07 (2018-08-10) 10

Figure 2-1 Process for updating a private image

2.2 Updating Private Images

ScenarioIf you want to install new application software, drivers, and system patches, update privateimages.

Prerequisitesl You have obtained the username and password for logging in to Console Home.l You have obtained Windows image tool

FusionAccess_Windows_Installer_V100R006C10.iso.

ProcedureCreating an ECS

Step 1 Use a user account to log in to Console Home.

Step 2 In Image Mgmt Service, click Private Image and find the private image used by the currentservice version, for example, Workspace_Image_01.


Issue 07 (2018-08-10) 11

Step 3 In Operation, click Create ECS and configure required parameters. For details, see Table2-1.

Table 2-1 Parameter settings


Basicinformation

ECS Name Enter the name based on site requirements.

ECS Type General-purpose

vCPU 4 vCPUs

Memory 8 GB. Memory varies with ECS types. Therefore,select your desired memory based on siterequirements.

Image Type Private image

Image Private image, for example,Workspace_Image_01.

Disk System disk 80 GB

Network NIC Retain the default settings.NOTE

l If there are no available NICs, choose BasicInformation > AZ to select another AZ.

l Enable port 3389 for the security group.

EIP Select Automatically Assign.

Login andFileInjection

Key pair If this is your first login, create a key pair.NOTE

Upon your first login, create a certificate as follows:

1. Choose Cloud Server Console > Key Pair, andclick Create SSH Key Pair on the right.

2. In the Information dialog box that is displayed,click OK.

NOTE

Retain the default values for other parameters involved in the page.

Step 4 Click Create Now.

Step 5 On the Resource Details page, confirm the specifications of the ECS to be created.


After the application is complete, choose Cloud Server Console > Elastic Cloud Server.The created ECS is displayed. Take note of the ECS' Elastic IP Address (EIP).

Step 7 Choose More > Get Password.

Step 8 In the window that is displayed, click Select File, and select the created SSH Key.


Issue 07 (2018-08-10) 12

Step 9 Click Get Password to obtain the password and keep it secure.

----End

Copying files

Step 1 Run mstsc.

Step 2 Enter the EIP and click Connect.

Step 3 Enter the username and password for logging in to the ECS and click OK.

Step 4 Copy non-ISO files to be updated, such as OS patches, peripheral drivers, and applicationinstallation programs to the C:\ directory of the ECS.

NOTE

If decompression software is not installed on the ECS, decompress ISO files and copy the files to theECS.

----End

Installing OS patches

Step 1 Install OS patches based on site requirements.

----End

Installing application software

Step 1 Install application software based on site requirements.

NOTICEl Some security software (such as the antivirus software, safeguard, and firewall) may

conflict with the Microsoft encapsulation tool, causing BSOD or blank screen errors oncreated desktops or resulting in a desktop creation failure. Therefore, install securitysoftware only after the desktops are provisioned successfully.

l If the antivirus software contains firewalls, disable the firewalls or enable the portsrequired by HDP in the firewalls before you install the application software. Otherwise,ECS connections will be affected. For details about the ports required by HDP, see theCommunication Matrix.

----End

(Optional) Installing peripheral drivers

Step 1 Install peripheral drivers based on site requirements.

----End

Encapsulating an image

Step 1 In the C:\ directory of the ECS, locate FusionAccess_Windows_Installer_XXX, thedecompressed template tool folder.

Step 2 In the blank area of the opened window, hold down Shift, right-click, and select Opencommand windows here.


Issue 07 (2018-08-10) 13

Step 3 In Command Prompt, run the following command to encapsulate the image:

run_silent.bat --passive

Step 4 After image encapsulation is complete, the ECS is automatically shut down.

----End

Converting the ECS into an image


Step 2 In the list on the left, click Elastic Cloud Server.

Step 3 On the row that contains the ECS to be converted to an image, choose More > Make Imagefrom the drop-down list.

The Create Private Image page is displayed.

Step 4 Set Source to ECS.

Step 5 Select the ECS.

Step 6 Enter the image name, for example, Workspace_Image_01_New.

Step 7 Click Create Now to create the image.

----End

Updating the image


Step 2 In the list on the left, click Image > Private Image.

Step 3 Find the old private image, for example, Workspace_Image_01 and click Modify.

Step 4 In the dialog box that is displayed, change the name of the old image, for example,Workspace_Image_01_Old.

Step 5 Find the new private image and click Modify.

Step 6 In the dialog box that is displayed, change the name of the new image to the old image name,for example, Workspace_Image_01.

----End


Issue 07 (2018-08-10) 14

3 Creating Desktops Using Private Images

3.1 IntroductionWorkspace enables you to use private images to create desktops on the management console.

3.2 Creating Desktops

Procedure

Step 1 Log in to the Workspace management console.

Step 2 On the Dashboard or Desktop page, click Create Desktop.

The Create Desktop page is displayed.

Step 3 Select an AZ based on actual conditions.

An availability zone (AZ) is a physical region where resources use independent powersupplies and networks. AZs are physically isolated but interconnected through an internalnetwork.

l If you create a desktop for the first time, you are advised to use the default value, that is,the optimal AZ recommended by the system.

l If you do not create a desktop for the first time, you are advised to create desktops indifferent AZs to improve application availability.

Step 4 Select the proper Specifications based on site requirements.

l Type

l Specifications.

Step 5 Select the proper Image Type and OS based on site requirements.

Step 6 Configure disks based on the actual requirements. Table 3-1 provides disk configurationdetails.

WorkspacePrivate Image Management Guide 3 Creating Desktops Using Private Images

Issue 07 (2018-08-10) 15

Table 3-1 Disk configuration

Category Description Disk Type ConfigurationRange (GB)

System Disk Mandatory. Only onesystem disk can beconfigured based on theactual requirements.

l Common I/O: type ofdisks that use SATAstorage.

l Ultra-high I/O: type ofdisks that use SSDstorage.

80 to 32,768

Data Disk Optional. A maximum of10 data disks can beconfigured based on theactual requirements.

l Common I/O: type ofdisks that use SATAstorage.

l Ultra-high I/O: type ofdisks that use SSDstorage.

100 to 32,768

Step 7 Select a Service Subnet based on actual conditions.

Step 8 Check whether the user's existing AD domain is used in Workspace.l If yes, go to Step 9.l If no, go to Step 10.

Step 9 Set the OUs on the existing AD server.

Enter a maximum of 5 levels and separate levels from each other using a slash (/). Onlyletters, digits, spaces (not before or after a slash), and special characters including -_/$!@&*?. are allowed, for example, ab/cd/ef.

Step 10 Assign desktops.

You can manually add or batch import users. In a scenario where the existing AD domain isused, you need to create users on the AD server before assigning desktops.l Manual input

Set Username used for logging in to Workspace and Email used for receiving thenotification email. Select a user group from the drop-down list of User Group.You can grant different levels of access permission to users based on site requirements.The following describes the user group permission:– Administrators: Administrator group. Administrators have complete access to the

desktop and can make any desired changes except for forbidden operations.– Users: Standard user group. Users in this group can use most software and change

system settings that do not affect other users.

NOTE

You can click Add Desktop to add other desktops as required. A maximum of 10 desktops can beadded each time. Each desktop belongs to one user only.

l Batch import. A maximum of 50 desktops can be added each time.– Click Download Template.– In the Excel template, enter values for columns A (Username), B (Email), and C

(User Group) respectively.


Issue 07 (2018-08-10) 16

– Save the settings and close the Excel template.– Upload the file.

Step 11 Send notification emails.

By default, the system automatically sends notification emails to users after desktops arecreated. In a scenario where the existing AD domain is used, you can select or deselect SendNotification Email based on site requirements.

Step 12 Click Create Now.

The Confirm Specifications page is displayed.

Step 13 Check whether the value of Resource Details is correct.


Desktops are created successfully.

----End


Issue 07 (2018-08-10) 17

A Change History

Release Date What's New

2018-08-10 This issue is the sixth official release.Modified the following contents:Added the procedure for enabling the group policy that allowsstandard user groups to locally log in to the Windows system inConfiguring ECS OSs.

2018-05-10 This issue is the sixth official release.Modified the following contents:l Added the procedure for installing patche KB2958122 and

enabling Do not display Manage Your Server page at logonin Configuring ECS OSs.

l Optimized the procedure for configuring ECS OSs, and addedthe procedure for encapsulating images in Configuring ECSOSs.

l Deleted the procedure for encapsulating an image in CreatingPrivate Images.

l Optimized the description of parameters for creating ECSs inUpdating Private Images.

l Optimized the procedure for selecting the AZ in CreatingDesktops.

2018-01-15 This issue is the fifth official release.Modified the following contents:l Added the support for Windows Server 2016 in Solution

Overview.l Updated the image type description in Creating ECSs.

WorkspacePrivate Image Management Guide A Change History

Issue 07 (2018-08-10) 18

Release Date What's New

2017-06-30 This issue is the fourth official release.Modified the following contents:l Optimized the procedure for creating private images in

Creating Private Images.l Optimized the procedure for updating private images in

Updating Private Images.l Optimized the procedure for creating desktops using private

images in Creating Desktops.

2017-05-27 This issue is the third official release.Modified the following contents:Optimized the procedure for updating private images in UpdatingPrivate Images.

2017-04-28 This issue is the second official release.Modified the following contents:Added the procedure for disabling DNS registration on the NIC inConfiguring ECS OSs.

2017-03-30 This issue is the first official release.

WorkspacePrivate Image Management Guide A Change History

Issue 07 (2018-08-10) 19

private image management guide...image contact o&m personnel to confirm the image name, which...

Documents