System Center Virtual Machine Manager 2016 (SCVMM 2016)


System Center Virtual Machine Manager 2016 (SCVMM 2016)

1.1.1       System Center Virtual Machine Manager High Level Design

VMM

 

1.1.2       Hardware Prerequisites

Server Processor (minimum) RAM (minimum) Hard drive (minimum) Operating system SQL Database Server Virtualization High Availability
VMM Mgt Server 8 core Pentium 4, 2GHx (x64) 4 GB 4 GB Server 2016 Supported Failover Cluster
Vmm Console 4 core Pentium 4, 1 GHx (x64) 4 GB 10 GB Win10 Ent

Server 2016

Supported
SQl Server 8 core Pentium 4, 2.8GHx 8 GB 50 GB Server 12 R2

Server 2016

2012 R2

2014

2016

Supported SQL Always ON
Library Server 4 core Pentium 4, 2.8GHz 2 GB Based on size/amount of stored files Server 2016 Supported File Server Cluster

 

1.1.3       Software Prerequisites

Server .Net PowerShell Other Software
VMM Mgt Server 4.6 PowerShell 5.0 ·        Windows ADK for Win 10. (Deployment Tools & Windows Preinstallation Environment)

·        SQL Server Feature “command-line utilities” 14

 

Vmm Console 4,5, 4.5.1, 4.5.2, 4.6 PowerShell 4.0,5.0

 

1.1.4       Accounts and Permissions

Create the following accounts in Active Directory

Account Name Description
scvmmsvc VMM Service Account
scvmmadmin VMM RunAs account for managing hosts
sqlsvc SQL service account
SCVMMAdmins VMM Administrators security group

 

    • Add the “scvmmsvc” and “scvmmadmin” account to the “SCVMMAdmins” global group.
    •  Add the “DOMAIN\SCVMMAdmins” domain global group and the “DOMAIN\scvmmsvc” domain account explicitly to the Local Administrators group on each SCVMM role server.
    • register the SPN (VMM Service Account) as a domain administrator before you install VMM
    • db_owner permissions for the database (VirtualManagerDB) to the VMM service account.
  • VMM installation Account needs Full Control permissions to the VMMDKM container in AD DS with permissions to “this object, and to all descendant objects.”

1.1.5       Additional prerequisites

  • Active Directory:
    • Creating distributed key management container in AD with Name: VMMDKM, with full permission to VMM installation Account
  • SQL Server
    • must allow for case-insensitive database objects.
    • Limit SQL Memory
  • VMware Supported versions
    • vCenter 5.1, 5.5, 5.8, 6.0
    • ESX 5.5, ESX 6.0

1.1.6       Network and Firewall Ports and Protocols

1.1.6.1            Port and protocol exceptions

Connect Port/protocol Details Configure
VMM server to VMM agent on Windows Server-based hosts/remote library server 443:HTTPS BITS data channel for file transfers

Inbound rule on hosts

Modify in VMM setup
VMM server to VMM agent on Windows Server-based hosts/remote library server 5985:WinRM Control channel

Inbound rule on hosts

Modify in VMM setup
VMM server to VMM agent on Windows Server-based hosts/remote library server 5986:WinRM Control channel (SSL)

Inbound rule on hosts

Can’t modify
VMM server to VMM guest agent (VM data channel) 443:HTTPS BITS data channel for file transfers

Inbound rule on machines running the agent

The VMM guest agent is a special version of the VMM agent. It’s is installed on VMs that are part of a service template, and on Linux VMs (with or without a service template).

Can’t modify
VMM server to VMM guest agent (VM control channel) 5985:WinRM Control channel

Inbound rule on machines running the agent

Can’t modify
VMM host to host 443:HTTPS BITS data channel for file transfers

Inbound rule on hosts

Modify in VMM setup
VMM server to VWware ESXi servers/Web Services 22:SFTP

Inbound rule on hosts

Can’t modify
VMM server to load balancer 80:HTTP; 443:HTTPS Channel used for load balancer management Modify in load balancer provider
VMM server to remote SQL Server database 1433:TDS SQL Server listener

Inbound rule on SQL Server

Modify in VMM setup
VMM server to WSUS update servers 80/8530:HTTP; 443/8531:HTTPS Data and control channels

Inbound rule on WSUS server

Can’t modify from VMM
VMM library server to Hyper-V hosts 443:HTTPS BITS data channel for file transfers

Inbound rule on hosts – 443

Modify in VMM setup
VMM console to VMM WCF:8100 (HTTP); WCF:8101 (HTTPS); Net.TCP: 8102 Inbound rule on VMM console machine Modify in VMM setup
VMM server to storage management service WMI Local call
Storage management service to SMI-S provider CIM-XML Provider-specific
VMM server to Baseboard Management Controller (BMC) 443: HTTP (SMASH over WS-Management) Inbound rule on BMC device Modify on BMC device
VMM server to Baseboard Management Controller (BMC) 623: IPMI Inbound rule on BMC device Modify on BMC device
VMM server to Windows PE agent 8101:WCF; 8103:WCF 8101 is used for control channel, 8103 is used for time sync Modify in VMM setup
VMM server to WDS PXE provider 8102: WCF Inbound rule on PXE server
VMM server to Hyper-V host in untrusted/perimeter domain 443:HTTPS (BITS) BITS data channel for file transfers

Inbound rule on VMM server

Library server to Hyper-V host in untrusted/perimeter domain 443:HTTPS BITS data channel for file transfers

Inbound rule on VMM library

VMM server to Windows file server 80: WinRM; 135: RPC; 139: NetBIOS; 445: SMB (over TCP) Used by the VMM agent

Inbound rule on file server

VMM server to Windows file server 443:HTTPS BITS used for file transfer

Inbound rule on file server

VMM server to Windows file server 5985/5986:WinRM Control channel

Inbound rule on file server

 

Advertisements