You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/azure-netapp-files/access-smb-volume-from-windows-client.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,7 +15,7 @@ You can use Microsoft Entra ID with the Hybrid Authentication Management module
15
15
>[!NOTE]
16
16
>Using Microsoft Entra ID for authenticating [hybrid user identities](../active-directory/hybrid/whatis-hybrid-identity.md) allows Microsoft Entra users to access Azure NetApp Files SMB shares. This means your end users can access Azure NetApp Files SMB shares without requiring a line-of-sight to domain controllers from Microsoft Entra hybrid joined and Microsoft Entra joined VMs. Cloud-only identities aren't currently supported. For more information, see [Understand guidelines for Active Directory Domain Services site design and planning](understand-guidelines-active-directory-domain-service-site.md).
17
17
18
-
:::image type="content" source="../media/azure-netapp-files/diagram-windows-joined-active-directory.png" alt-text="Diagram of SMB volume joined to Microsoft Entra ID." lightbox="../media/azure-netapp-files/diagram-windows-joined-active-directory.png":::
18
+
:::image type="content" source="./media/access-smb-volume-from-windows-client/diagram-windows-joined-active-directory.png" alt-text="Diagram of SMB volume joined to Microsoft Entra ID." lightbox="./media/access-smb-volume-from-windows-client/diagram-windows-joined-active-directory.png":::
19
19
20
20
## Requirements and considerations
21
21
@@ -48,7 +48,7 @@ The configuration process takes you through five process:
48
48
1. Under **Computers**, right-click on the computer account created as part of the Azure NetApp Files volume then select **Properties**.
49
49
1. Under **Attribute Editor,** locate `servicePrincipalName`. In the Multi-valued string editor, add the CIFS SPN value using the CIFS/FQDN format.
50
50
51
-
:::image type="content" source="../media/azure-netapp-files/multi-value-string-editor.png" alt-text="Screenshot of multi-value string editor window." lightbox="../media/azure-netapp-files/multi-value-string-editor.png":::
51
+
:::image type="content" source="./media/access-smb-volume-from-windows-client/multi-value-string-editor.png" alt-text="Screenshot of multi-value string editor window." lightbox="./media/access-smb-volume-from-windows-client/multi-value-string-editor.png":::
52
52
53
53
<aname='register-a-new-azure-ad-application'></a>
54
54
@@ -59,21 +59,21 @@ The configuration process takes you through five process:
59
59
1. Assign a **Name**. Under select the **Supported account type**, choose **Accounts in this organizational directory only (Single tenant)**.
60
60
1. Select **Register**.
61
61
62
-
:::image type="content" source="../media/azure-netapp-files/register-application-active-directory.png" alt-text="Screenshot to register application." lightbox="../media/azure-netapp-files/register-application-active-directory.png":::
62
+
:::image type="content" source="./media/access-smb-volume-from-windows-client/register-application-active-directory.png" alt-text="Screenshot to register application." lightbox="./media/access-smb-volume-from-windows-client/register-application-active-directory.png":::
63
63
64
64
1. Configure the permissions for the application. From your **App Registrations**, select **API Permissions** then **Add a permission**.
65
65
1. Select **Microsoft Graph** then **Delegated Permissions**. Under **Select Permissions**, select **openid** and **profile** under **OpenId permissions**.
66
66
67
-
:::image type="content" source="../media/azure-netapp-files/api-permissions.png" alt-text="Screenshot to register API permissions." lightbox="../media/azure-netapp-files/api-permissions.png":::
67
+
:::image type="content" source="./media/access-smb-volume-from-windows-client/api-permissions.png" alt-text="Screenshot to register API permissions." lightbox="./media/access-smb-volume-from-windows-client/api-permissions.png":::
68
68
69
69
1. Select **Add permission**.
70
70
1. From **API Permissions**, select **Grant admin consent for...**.
71
71
72
-
:::image type="content" source="../media/azure-netapp-files/grant-admin-consent.png" alt-text="Screenshot to grant API permissions." lightbox="../media/azure-netapp-files/grant-admin-consent.png ":::
72
+
:::image type="content" source="./media/access-smb-volume-from-windows-client/grant-admin-consent.png" alt-text="Screenshot to grant API permissions." lightbox="./media/access-smb-volume-from-windows-client/grant-admin-consent.png ":::
73
73
74
74
1. From **Authentication**, under **App instance property lock**, select **Configure** then deselect the checkbox labeled **Enable property lock**.
75
75
76
-
:::image type="content" source="../media/azure-netapp-files/authentication-registration.png" alt-text="Screenshot of app registrations." lightbox="../media/azure-netapp-files/authentication-registration.png":::
76
+
:::image type="content" source="./media/access-smb-volume-from-windows-client/authentication-registration.png" alt-text="Screenshot of app registrations." lightbox="./media/access-smb-volume-from-windows-client/authentication-registration.png":::
77
77
78
78
1. From **Overview**, make note of the **Application (client) ID**, which is required later.
79
79
@@ -121,15 +121,15 @@ The configuration process takes you through five process:
121
121
* Value name: KERBEROS.MICROSOFTONLINE.COM
122
122
* Value: .contoso.com
123
123
124
-
:::image type="content" source="../media/azure-netapp-files/define-host-name-to-kerberos.png" alt-text="Screenshot to define how-name-to-Kerberos real mappings." lightbox="../media/azure-netapp-files/define-host-name-to-kerberos.png":::
124
+
:::image type="content" source="./media/access-smb-volume-from-windows-client/define-host-name-to-kerberos.png" alt-text="Screenshot to define how-name-to-Kerberos real mappings." lightbox="./media/access-smb-volume-from-windows-client/define-host-name-to-kerberos.png":::
125
125
126
126
### Mount the Azure NetApp Files SMB volumes
127
127
128
128
1. Log into to the Microsoft Entra joined VM using a hybrid identity account synced from AD DS.
129
129
2. Mount the Azure NetApp Files SMB volume using the info provided in the Azure portal. For more information, see [Mount SMB volumes for Windows VMs](mount-volumes-vms-smb.md).
130
130
3. Confirm the mounted volume is using Kerberos authentication and not NTLM authentication. Open a command prompt, issue the `klist` command; observe the output in the cloud TGT (krbtgt) and CIFS server ticket information.
131
131
132
-
:::image type="content" source="../media/azure-netapp-files/klist-output.png" alt-text="Screenshot of CLI output." lightbox="../media/azure-netapp-files/klist-output.png":::
132
+
:::image type="content" source="./media/access-smb-volume-from-windows-client/klist-output.png" alt-text="Screenshot of CLI output." lightbox="./media/access-smb-volume-from-windows-client/klist-output.png":::
Copy file name to clipboardExpand all lines: articles/azure-netapp-files/application-volume-group-add-hosts.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -41,7 +41,7 @@ Building a multiple-host SAP HANA database always starts with creating a volume
41
41
42
42
Click **Next: Volume Group**.
43
43
44
-
[](../media/azure-netapp-files/application-multiple-hosts-sap-hana.png#lightbox)
44
+
[](./media/application-volume-group-add-hosts/application-multiple-hosts-sap-hana.png#lightbox)
45
45
46
46
3. In the **Volume group** tab, provide identical input as you did when you created the first HANA host.
47
47
@@ -56,17 +56,17 @@ Building a multiple-host SAP HANA database always starts with creating a volume
56
56
57
57
Click **Next: Review + Create**.
58
58
59
-
[](../media/azure-netapp-files/application-multiple-hosts-volumes.png#lightbox)
59
+
[](./media/application-volume-group-add-hosts/application-multiple-hosts-volumes.png#lightbox)
60
60
61
61
4. In the **Review + Create** tab, the `{HostId}` placeholder is replaced with the individual numbers for each of the volume groups that will be created.
62
62
63
63
You can click **Next Group** to navigate through all volume groups that are being created (one for each host). You can also click a particular volume to view its details.
64
64
65
-
[](../media/azure-netapp-files/application-multiple-review-create.png#lightbox)
65
+
[](./media/application-volume-group-add-hosts/application-multiple-review-create.png#lightbox)
66
66
67
67
5. After you navigate through the volume groups, click **Create All Groups** to create all the volumes for the HANA hosts you are adding.
68
68
69
-
[](../media/azure-netapp-files/application-multiple-create-groups.png#lightbox)
69
+
[](./media/application-volume-group-add-hosts/application-multiple-create-groups.png#lightbox)
70
70
71
71
The **Create Volume Group** page shows the added volume groups with the "Creating" status.
Copy file name to clipboardExpand all lines: articles/azure-netapp-files/application-volume-group-add-volume-secondary.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -23,7 +23,7 @@ The HANA System Replication (HSR) functionality enables SAP HANA databases to sy
23
23
24
24
The following diagram illustrates the concept of HSR:
25
25
26
-

26
+

27
27
28
28
29
29
To enable HSR, the configuration of the secondary SAP HANA system must be identical to the primary SAP HANA system. That is, if the primary system is a single-host HANA system, then the secondary SAP HANA system also needs to be a single-hosts system. The same applies for multiple host systems.
@@ -61,7 +61,7 @@ This section shows an example of creating a single-host, secondary SAP HANA syst
61
61
62
62
Click **Next: Volume Group** to continue.
63
63
64
-
[](../media/azure-netapp-files/application-secondary-sap-hana.png#lightbox)
64
+
[](./media/application-volume-group-add-volume-secondary/application-secondary-sap-hana.png#lightbox)
65
65
66
66
3. In the **Volume group** tab, provide information for creating the volume group:
67
67
@@ -92,19 +92,19 @@ This section shows an example of creating a single-host, secondary SAP HANA syst
92
92
93
93
Click **Next: Volumes**.
94
94
95
-
[](../media/azure-netapp-files/application-secondary-volume-group-tags.png#lightbox)
95
+
[](./media/application-volume-group-add-volume-secondary/application-secondary-volume-group-tags.png#lightbox)
96
96
97
97
6. The **Volumes** tab displays information about the volumes that are being created.
98
98
99
99
The volume naming convention includes an `"HA-"` prefix to indicate that the volume belongs to the secondary system of an HSR setup.
100
100
101
-
[](../media/azure-netapp-files/application-secondary-volumes-tags.png#lightbox)
101
+
[](./media/application-volume-group-add-volume-secondary/application-secondary-volumes-tags.png#lightbox)
102
102
103
103
7. In the **Volumes** tab, you can select each volume to view or change the volume details, including the protocol and tag for the volume.
104
104
105
105
In the **Tags** section of a volume, you can populate the `HSRPartnerStorageResourceId` tag with the resource ID of the corresponding primary volume. This action only marks the primary volume; it does not validate the provided resource ID.
106
106
107
-
[](../media/azure-netapp-files/application-secondary-volumes-tag-details.png#lightbox)
107
+
[](./media/application-volume-group-add-volume-secondary/application-secondary-volumes-tag-details.png#lightbox)
108
108
109
109
Click **Volumes** to return to the Volumes overview page.
Copy file name to clipboardExpand all lines: articles/azure-netapp-files/application-volume-group-delete.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -20,11 +20,11 @@ This article describes how to delete an application volume group.
20
20
21
21
1. Click **Application volume groups**. Select the volume group you want to delete.
22
22
23
-
[](../media/azure-netapp-files/application-volume-group-list.png#lightbox)
23
+
[](./media/application-volume-group-delete/application-volume-group-list.png#lightbox)
24
24
25
25
2. To delete the volume group, click **Delete**. If you are prompted, type the volume group name to confirm the deletion.
26
26
27
-
[](../media/azure-netapp-files/application-volume-group-delete.png#lightbox)
27
+
[](./media/application-volume-group-delete/application-volume-group-delete.png#lightbox)
0 commit comments