Shulou(Shulou.com)06/03 Report--

How do I use Azure Migrate to prepare a local VMware VM to evaluate and migrate to Azure? I believe that many novice rookies have not yet learned this skill, through the summary of this article, I hope you can learn the use of Azure Migrate.

1. Prepare Azure

First of all, we need the following permissions to perform some tasks.

Task permissions to create an Azure Migrate project Azure account requires permission to create a project. Register Azure Migrate device Azure Migrate uses lightweight Azure Migrate devices to evaluate VMware VM through Azure Migrate server evaluation, and performs agentless migration of VMware VM through Azure Migrate server migration. This device discovers VM and sends VM metadata and performance data to Azure Migrate.

During the device registration process, the following resource providers register with the subscriptions selected in the device: Microsoft.OffAzure, Microsoft.Migrate, and Microsoft.KeyVault. Configure subscriptions by registering the resource provider for use by the resource provider. A subscribed participant or owner role is required to register the resource provider.

During the loading process, Azure Migrate creates two Azure Active Directory (Azure AD) applications:

-the first application is used to communicate (authentication and authorization) between agents (running on devices) and their respective services running on Azure. This application does not have the right to make ARM calls to any resources, nor does it have RBAC access.

-the second application is specifically used to access the KeyVault created in the user's subscription for agentless migration. When discovery is initiated from a device, it is given RBAC access to the Azure Key Vault (created in the customer's tenant). To create a Key Vault to migrate a VMware VM,Azure Migrate using the Azure Migrate server migration tool, you need to create a Key Vault to manage the access key of the replication storage account in the subscription. To create a vault, you need to have role assignment permissions on the resource group that the Azure Migrate project belongs to. 1) assign permission to create a project to open a subscription in the Azure portal, and then select access Control (IAM). Find the relevant account in check access, and then click it to view permissions. You should have "participant" or "owner" permissions. If you have just created a free Azure account, you are the owner of the subscription. If you are not the subscription owner, please ask the owner to assign the role. 2) assign permissions to register devices

To register a device, assign permissions to Azure Migrate to create an Azure AD application during the registration of the device. You can assign permissions using one of the following methods:

The tenant / global administrator can grant users in the tenant permission to create and register Azure AD applications. The tenant / global administrator can assign the Application developer role (with permissions) to the account.

In addition to the above permissions, the app does not have any other access to subscriptions, which you need only when registering a new device. These permissions can be removed after setting up the device.

The tenant / global administrator can grant permissions as follows

In Azure AD, the tenant / global administrator should navigate to "Azure Active Directory" > "user" > "user Settings".

The administrator should set Application Registration to Yes. This is the default setting that is not affected

The tenant / global administrator can assign the Application developer role to the account.

4) assign permissions to create Key Vault

To allow Azure Migrate to create a Key Vault, assign permissions as follows:

In the resource group on the Azure portal, select access Control (IAM).

Find the relevant account in check access, and then click it to view permissions.

To run the server evaluation, the participant permission is sufficient. To run an agentless server migration, you should have owner (or participant and user access Administrator) permissions.

If you do not have the required permissions, you can request the resource group owner to assign those permissions.

two。 Prepare for VMware VM assessment

1) to prepare the VMware VM assessment, you need to:

Verify the VMware settings. Ensure that the vCenter Server and VM to be migrated meet the requirements. Set up an evaluation account. Azure Migrate needs to access vCenter Server to discover the VM for evaluation. Verify the equipment requirements. Verify the deployment requirements of the Azure Migrate device used for evaluation. 2) verify the requirements for VMware settings to view VMware server evaluation. Make sure the required ports are open on the vCenter server. On vCenter Server, make sure that the account has permission to create a VM using the OVA file. Use the OVA file to deploy the Azure Migrate device as VMware VM. 3) set up an evaluation account

Azure Migrate needs to access vCenter Server to discover VM for evaluation and agentless migration.

If you plan to discover applications or visualize dependencies in an agentless manner, create a vCenter Server account with read-only access and enable privileges for Virtual machines > Guest Operations.

If you do not plan to perform application discovery and agentless dependency visualization, set up a read-only account for vCenter Server.

This is how Azure Migrate prepares to evaluate and migrate the local VMware to Azure. Have you learned anything after reading it? If you want to know more about it, you are welcome to follow the industry information!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.