Register in a disconnected environment

Registering Azure Stack Hub with Azure enables hybrid cloud scenarios and allows you to download marketplace items and set up services such as Azure Site Recovery and Azure Monitor. However, some environments may be air-gapped or have stringent regulations that don’t allow for a direct internet connection. Despite these challenges, it is still possible to register Azure Stack Hub in these disconnected or partially connected environments. Here’s how it’s done.

Scenario: Disconnected Environment

In a completely disconnected environment, Azure Stack Hub cannot directly interact with Azure or any external network. Therefore, registration and the addition of marketplace items must be performed manually.

Manual Azure Stack Hub Registration

1. Generate Registration Token

   You must first create a registration token on a device that has internet access. This is done by using the Azure Stack Hub administrator portal to create a token, which will include information necessary to register your Azure Stack Hub.

2. Transfer Registration Token

   You will need to securely transfer this registration token to the disconnected environment—typically through physical means, such as a USB drive.

3. Apply Registration Token

   Once the registration token is on the Azure Stack Hub, use PowerShell to apply the token and complete the registration process. This will include identifying the Azure Stack Hub, providing the Azure subscription ID, and other relevant information.

Scenario: Partially Connected Environment

For environments that have an intermittent connection or have some level of connectivity to Azure services, a slightly different process is used.

1. Prepare PowerShell Environment

   Configure PowerShell with the necessary modules and set up an Azure Active Directory (Azure AD) service principal. This service principal will help automate the registration process and other operations while connected.

2. Automatic Registration Within Connectivity Window

   Leveraging the connectivity window, use PowerShell scripts to automatically register Azure Stack Hub with Azure. The script will include commands for setting up the registration and handling authentication.

Marketplace Syndication Toolkit

For both disconnected and partially connected environments, the Azure Stack Marketplace Syndication Toolkit is an invaluable asset. This toolkit allows you to download items from Azure Marketplace to your local computer and then transfer them to your Azure Stack Hub.

1. Download Marketplace Items

   Using a computer with internet access, run the toolkit to browse and download Azure Stack marketplace items such as VM images and solution templates.

2. Transfer to Azure Stack Hub

   After downloading, move the items to the Azure Stack Hub using a USB drive (for disconnected environments) or during a connectivity window (for partially connected environments).

3. Add Marketplace Items

   Once the files are on the Azure Stack Hub, import the items manually through PowerShell or the administrator portal. Ensure all dependencies are resolved for the marketplace items to work correctly.

Example

Here’s a simplified example of using the Marketplace Syndication Toolkit to download an item and transfer it to the Azure Stack Hub:

1. On an Internet-Connected Device:

   <powershell>
   # Clone the Marketplace Syndication Toolkit repository
   git clone https://github.com/Azure/AzureStack-Tools.git -b master

   # Navigate to the Syndication directory
   cd AzureStack-Tools/Syndication

   # Authenticate with Azure
   Login-AzAccount

   # Download a specific Marketplace item
   Save-AzSOfflineMarketplaceItem -Product “UbuntuServer” -DownloadPath “C:\MarketplaceItems”
   </powershell>

2. Transfer the Downloaded Item:

   After downloading, you copy the contents from the `C:\MarketplaceItems` directory onto a USB drive and physically move it to the Azure Stack Hub.

3. On the Azure Stack Hub Environment:

   <powershell>
   # Import the PowerShell module
   Import-Module .\AzureStack.MarketplaceSyndication.psm1

   # Add the Marketplace item to the Azure Stack Hub
   Add-AzsVMImage -ImageZipPath “D:\MarketplaceItems\UbuntuServer.zip”
   </powershell>

Table: Comparison Between Disconnected and Partially Connected Environments

In conclusion, registering Azure Stack Hub and managing marketplace items in a disconnected or partially connected environment is more complex but achievable. It involves manual steps or timing operations with connectivity windows, and typically requires transporting data physically. However, with the help of tools like the Syndication Toolkit and PowerShell, organizations can successfully run and maintain Azure Stack Hub even without a direct internet connection.