Azure Stack Hub 操作员访问工作站Azure Stack Hub Operator Access Workstation

• 03/22/2021
• • W

操作员访问工作站 (OAW) 用于在 Azure Stack Hub 的硬件生命周期主机 (HLH) 上或运行 Microsoft Hyper-V 的任何其他计算机上部署虚拟机 (VM)。The Operator Access Workstation (OAW) is used to deploy a virtual machine (VM) on an Azure Stack Hub's--Hardware Lifecycle Host (HLH) or any other machine that runs Microsoft Hyper-V. 它确实需要与 Azure Stack Hub 终结点进行网络连接才能用于操作员场景或用户场景。It does require network connectivity to the Azure Stack Hub endpoints to be used for operator or user scenarios.

OAW VM 是一个可选虚拟机，不是运行 Azure Stack Hub 所必需的。The OAW VM is an optional virtual machine that isn't required by Azure Stack Hub to function. 它的用途是在操作员或用户与 Azure Stack Hub 进行交互时为其提供最新的工具。Its purpose is to provide the latest tools to operators or user as they interact with Azure Stack Hub.

OAW 方案OAW scenarios

下表列出了 OAW 的常见方案。The following tables list common scenarios for the OAW. 使用远程桌面连接到 OAW。Use Remote Desktop to connect to the OAW.

预安装的软件Pre-installed software

下表列出 OAW VM 上的预安装软件。The following table lists the pre-installed software on the OAW VM.

下载文件Download files

若要获取文件以创建 OAW VM，请在此处下载。To get the files to create the OAW VM, download here. 下载之前，请务必查看 Azure 隐私声明和法律条款。Be sure to review the Azure Privacy Statement and Legal Terms before you download.

由于解决方案的无状态性质，没有适用于 OAW VM 的更新。Because of the stateless nature of the solution, there are no updates for the OAW VM. 对于每个里程碑，都会发行 VM 映像文件的新版本。For each milestone, a new version of the VM image file is released. 使用最新版本创建新 OAW VM。Use the latest version to create a new OAW VM. 映像文件基于最新 Windows Server 2019 版本。The image file is based on the latest Windows Server 2019 version. 安装之后，可以使用 Windows 更新来应用更新（包括所有关键更新）。After installation, you can apply updates, including any critical updates, using Windows Update.

验证下载的 OAW.zip 文件的哈希，以确保在使用它创建 OAW VM 之前未对它进行修改。Validate the hash of the downloaded OAW.zip file to make sure it hasn't been modified before using it to create the OAW VM. 运行下面的 PowerShell 脚本。Run the following PowerShell script. 如果返回值为 True，则可以使用下载的 OAW.zip：If the return value is True, you can use the downloaded OAW.zip:

param( 
    [Parameter(Mandatory=$True)] 
    [ValidateNotNullOrEmpty()] 
    [ValidateScript({Test-Path $_ -PathType Leaf})] 
    [string] 
    $DownloadedOAWZipFilePath 
) 
$expectedHash = '2B268EFB113A3BEDA008FCF382A5EF2F2D4E5DCC7FD0D12DB061E37F9671D3A7' 
$actualHash = (Get-FileHash -Path $DownloadedOAWZipFilePath).Hash 
Write-Host "Expected hash: $expectedHash" 
if ($expectedHash -eq $actualHash) 
{ 
    Write-Host 'SUCCESS: OAW.zip file hash matches.' 
} 
else 
{ 
    Write-Error 'ERROR: OAW.zip file hash does not match! It isn't safe to use it, please download it again.' 
    Write-Error "Actual hash: $actualHash" 
} 

检查 HLH 版本Check HLH version

1. 使用你的凭据登录到 HLH。Sign in to the HLH with your credentials.

2. 打开 PowerShell ISE 并运行以下脚本：Open PowerShell ISE and run the following script:

   C:\Version\Get-Version.ps1
   

   例如：For example:

   

使用脚本创建 OAW VMCreate the OAW VM using a script

以下脚本将准备用作操作员访问工作站 (OAW) 的虚拟机，该工作站用来访问 Azure Stack Hub。The following script prepares the virtual machine as the Operator Access Workstation (OAW), which is used to access Azure Stack Hub.

1. 使用你的凭据登录到 HLH。Sign in to the HLH with your credentials.

2. 下载 OAW.zip 并提取文件。Download OAW.zip and extract the files.

3. 打开提升的 PowerShell 会话。Open an elevated PowerShell session.

4. 导航到 OAW.zip 文件的已提取内容。Navigate to the extracted contents of the OAW.zip file.

5. 运行 New-OAW.ps1 脚本。Run the New-OAW.ps1 script.

示例：在使用 Microsoft 映像的 HLH 上进行部署Example: Deploy on HLH using a Microsoft Image

$securePassword = Read-Host -Prompt "Enter password for Azure Stack OAW's local administrator" -AsSecureString 
New-OAW.ps1 -LocalAdministratorPassword $securePassword 

示例：在使用 OEM 映像的 HLH 上进行部署Example: Deploy on HLH using an OEM Image

$securePassword = Read-Host -Prompt "Enter password for Azure Stack OAW's local administrator" -AsSecureString 
New-OAW.ps1 -LocalAdministratorPassword $securePassword `
   -AzureStackCertificatePath 'F:\certroot.cer' `
   -DeploymentDataFilePath 'F:\DeploymentData.json' `
   -AzSStampInfoFilePath 'F:\AzureStackStampInformation.json'

如果 DeploymentData.json 文件包含 OAW VM 的命名前缀，则该值将用于 VirtualMachineName 参数。If the DeploymentData.json file includes the Naming Prefix for OAW VM, that value will be used for the VirtualMachineName parameter. 否则，默认名称是 AzSOAW 或用户指定的任何名称。Otherwise, the default name is AzSOAW or whatever name specified is by the user.

示例：在 Microsoft Hyper-V 上进行部署Example: Deploy on Microsoft Hyper-V

运行 Microsoft Hyper-V 的计算机需要四个核心和 4 GB 可用内存。The machine running Microsoft Hyper-V does requires four cores and four GB of available memory.

$securePassword = Read-Host -Prompt "Enter password for Azure Stack OAW's local administrator" -AsSecureString 
New-OAW.ps1 -LocalAdministratorPassword $securePassword ` 
-AzureStackCertificatePath 'F:\certroot.cer' ` 
-SkipNetworkConfiguration ` 
-VirtualSwitchName Example  

用户帐户策略User account policy

以下用户帐户策略会应用于 OAW VM：The following user account policy is applied to the OAW VM:

• 内置管理员用户名：AdminUserBuilt-in Administrator username: AdminUser
• MinimumPasswordLength = 14MinimumPasswordLength = 14
• PasswordComplexity 已启用PasswordComplexity is enabled
• MinimumPasswordAge = 1（天）MinimumPasswordAge = 1 (day)
• MaximumPasswordAge = 42（天）MaximumPasswordAge = 42 (days)
• NewGuestName = GUser（默认情况下禁用）NewGuestName = GUser (disabled by default)

New-OAW cmdlet 参数New-OAW cmdlet parameters

New-OAW 可以使用两个参数集。Two parameter sets are available for New-OAW. 可选参数显示在括号中。Optional parameters are shown in brackets.

New-OAW  
-LocalAdministratorPassword <Security.SecureString> ` 
[-AzureStackCertificatePath <String>] ` 
[-AzSStampInfoFilePath <String>] ` 
[-CertificatePassword <Security.SecureString>] ` 
[-ERCSVMIP <String[]>] ` 
[-DNS <String[]>] ` 
[-DeploymentDataFilePath <String>] ` 
[-SkipNetworkConfiguration] ` 
[-ImageFilePath <String>] ` 
[-VirtualMachineName <String>] ` 
[-VirtualMachineMemory <int64>] ` 
[-VirtualProcessorCount <int>] ` 
[-VirtualMachineDiffDiskPath <String>] ` 
[-PhysicalAdapterMACAddress <String>] ` 
[-VirtualSwitchName <String>] ` 
[-ReCreate] ` 
[-AsJob] ` 
[-Passthru] ` 
[-WhatIf] ` 
[-Confirm] ` 
[<CommonParameters>] 

New-OAW 
-LocalAdministratorPassword <Security.SecureString> ` 
-IPAddress <String> ` 
-SubnetMask <String> ` 
-DefaultGateway <String> ` 
-DNS <String[]> ` 
[-AzureStackCertificatePath <String>] ` 
[-AzSStampInfoFilePath <String>] ` 
[-CertificatePassword <Security.SecureString>] ` 
[-ERCSVMIP <String[]>] ` 
[-ImageFilePath <String>] ` 
[-VirtualMachineName <String>] ` 
[-VirtualMachineMemory <int64>] ` 
[-VirtualProcessorCount <int>] ` 
[-VirtualMachineDiffDiskPath <String>] ` 
[-PhysicalAdapterMACAddress <String>] ` 
[-VirtualSwitchName <String>] ` 
[-ReCreate] ` 
[-AsJob] ` 
[-Passthru] ` 
[-WhatIf] ` 
[-Confirm] ` 
[<CommonParameters>] 

下表列出了每个参数的定义。The following table lists the definition for each parameter.

检查 OAW VM 版本Check the OAW VM version

1. 使用你的凭据登录到 OAW VM。Sign into the OAW VM with your credentials.

2. 打开 PowerShell ISE 并运行以下脚本：Open PowerShell ISE and run the following script:

   C:\\Version\\Get-Version.ps1
   

   例如：For example:

   

在 HLH 与 OAW 之间传输文件Transfer files between the HLH and OAW

如果需要在 HLH 与 OAW 之间传输文件，请使用 New-SmbShare cmdlet 创建 SMB 共享。If you need to transfer files between the HLH and the OAW, create an SMB share by using the New-SmbShare cmdlet. New-SmbShare 会将文件系统文件夹作为服务器消息块 (SMB) 共享公开给远程客户端。New-SmbShare exposes a file system folder to remote clients as a Server Message Block (SMB) share. 例如：For example:

若要删除通过此 cmdlet 创建的共享，请使用 Remove-SmbShare cmdlet。To delete a share that was created by this cmdlet, use the Remove-SmbShare cmdlet.

删除 OAW VMRemove the OAW VM

以下脚本会删除用于访问 Azure Stack Hub 以进行管理和诊断的 OAW VM。The following script removes the OAW VM, which is used to access Azure Stack Hub for administration and diagnostics. 此脚本还会删除与 VM 关联的磁盘文件和保护者。This script also removes the disk files and the guardian associated with the VM.

1. 使用你的凭据登录到 HLH。Sign into the HLH with your credentials.

2. 打开提升的 PowerShell 会话。Open an elevated PowerShell session.

3. 导航到已安装 OAW.zip 文件的已提取内容。Navigate to the extracted contents of the installed OAW.zip file.

4. 通过运行 Remove-OAW.ps1 脚本来删除 VM：Remove the VM by running the Remove-OAW.ps1 script:

   Remove-OAW.ps1 -VirtualMachineName \<name\>
   

   其中 <name> 是要删除的虚拟机的名称。Where <name> is the name of the virtual machine to be removed. 默认情况下，名称是 AzSOAW。By default, the name is AzSOAW.

   例如：For example:

   Remove-OAW.ps1 -VirtualMachineName AzSOAW
   

后续步骤Next steps

Azure Stack 管理任务Azure Stack Management Tasks