Merge pull request #248860 from Farha-Bano/Aug21-vmware-pup2

Added 1 new article and updated 2 articles

Author: ttorble

articles/azure-arc/vmware-vsphere/enable-guest-management-at-scale.md

@@ -0,0 +1,49 @@
+---
+title: Install Arc agent at scale for your VMware VMs
+description: Learn how to enable guest management at scale for Arc enabled VMware vSphere VMs. 
+ms.topic: how-to
+ms.date: 08/21/2023
+
+#Customer intent: As an IT infra admin, I want to install arc agents to use Azure management services for VMware VMs.
+---
+
+# Install Arc agents at scale for your VMware VMs
+
+In this article, you will learn how to install Arc agents at scale for VMware VMs and use Azure management capabilities.
+
+## Prerequisites
+
+Ensure the following before you install Arc agents at scale for VMware VMs:
+
+- The resource bridge must be in running state.
+- The vCenter must be in connected state.
+- The user account must have permissions listed in Azure Arc VMware Administrator role.
+- All the target machines are:
+    - Powered on and the resource bridge has network connectivity to the host running the VM.
+    - Running a [supported operating system](../servers/prerequisites.md#supported-operating-systems).
+    - Able to connect through the firewall to communicate over the internet, and [these URLs](../servers/network-requirements.md#urls) aren't blocked.
+
+      > [!NOTE]
+      > If you're using a Linux VM, the account must not prompt for login on sudo commands. To override the prompt, from a terminal, run `sudo visudo`, and add `<username> ALL=(ALL) NOPASSWD:ALL` at the end of the file. Ensure you replace `<username>`. <br> <br>If your VM template has these changes incorporated, you won't need to do this for the VM created from that template.
+
+## Install Arc agents at scale from portal
+
+An admin can install agents for multiple machines from the Azure portal if the machines share the same administrator credentials.
+
+1. Navigate to **Azure Arc center** and select **vCenter resource**.
+
+2. Select all the machines and choose **Enable in Azure** option. 
+
+3. Select **Enable guest management** checkbox to install Arc agents on the selected machine.
+
+4. If you want to connect the Arc agent via proxy, provide the proxy server details.
+
+5. Provide the administrator username and password for the machine. 
+
+> [!NOTE]
+> For Windows VMs, the account must be part of local administrator group; and for Linux VM, it must be a root account.
+
+
+## Next steps
+
+[Set up and manage self-service access to VMware resources through Azure RBAC](setup-and-manage-self-service-access.md).

articles/azure-arc/vmware-vsphere/index.yml

@@ -33,6 +33,8 @@ landingContent:
         links:  
         - text: Enable VMware vCenter resources in Azure
           url: browse-and-enable-vcenter-resources-in-azure.md
+        - text: Install Arc agent at scale for your VMware VMs
+          url: enable-guest-management-at-scale.md
         - text: Manage access to VMware resources through Azure RBAC
           url: setup-and-manage-self-service-access.md
         - text: Create a virtual machine on VMware vCenter

articles/azure-arc/vmware-vsphere/overview.md

@@ -2,68 +2,94 @@
 title: What is Azure Arc-enabled VMware vSphere (preview)?
 description: Azure Arc-enabled VMware vSphere (preview) extends Azure governance and management capabilities to VMware vSphere infrastructure and delivers a consistent management experience across both platforms. 
 ms.topic: overview
-ms.date: 09/15/2022
+ms.date: 08/21/2023
 ms.custom: references_regions
 ---
 
 # What is Azure Arc-enabled VMware vSphere (preview)?
 
-Azure Arc-enabled VMware vSphere (preview) extends Azure governance and management capabilities to VMware vSphere infrastructure. With Azure Arc-enabled VMware vSphere, you get a consistent management experience across Azure and VMware vSphere infrastructure.
+Azure Arc-enabled VMware vSphere (preview) is an [Azure Arc](../overview.md) service that helps you simplify management of hybrid IT estate distributed across VMware vSphere and Azure. It does so by extending the Azure control plane to VMware vSphere infrastructure and enabling the use of Azure security, governance, and management capabilities consistently across VMware vSphere and Azure. 
 
 Arc-enabled VMware vSphere (preview) allows you to:
 
-- Perform various VMware virtual machine (VM) lifecycle operations directly from Azure, such as create, start/stop, resize, and delete.
+- Discover your VMware vSphere estate (VMs, templates, networks, datastores, clusters/hosts/resource pools) and register resources with Arc at scale. 
+
+- Perform various virtual machine (VM) operations directly from Azure, such as create, resize, delete, and power cycle operations such as start/stop/restart on VMware VMs consistently with Azure. 
 
 - Empower developers and application teams to self-serve VM operations on-demand using [Azure role-based access control](../../role-based-access-control/overview.md) (RBAC).
 
-- Browse your VMware vSphere resources (VMs, templates, networks, and storage) in Azure, providing you a single pane view for your infrastructure across both environments. You can also discover and onboard existing VMware VMs to Azure.
+- Install the Arc-connected machine agent at scale on VMware VMs to [govern, protect, configure, and monitor](../servers/overview.md#supported-cloud-operations) them.
+
+- Browse your VMware vSphere resources (VMs, templates, networks, and storage) in Azure, providing you with a single pane view for your infrastructure across both environments.
+
+## Onboard resources to Azure management at scale
+
+Azure services such as Microsoft Defender for Cloud, Azure Monitor, Azure Update Management Center, and Azure Policy provide a rich set of capabilities to secure, monitor, patch, and govern off-Azure resources via Arc. 
+
+By using Arc-enabled VMware vSphere's capabilities to discover your VMware estate and install the Arc agent at scale, you can simplify onboarding your entire VMware vSphere estate to these services. 
+
+## Set up self-service access for your teams to use vSphere resources using Azure Arc
+
+Arc-enabled VMware vSphere extends Azure's control plane (Azure Resource Manager) to VMware vSphere infrastructure. This enables you to use Azure AD-based identity management, granular Azure RBAC, and ARM templates to help your app teams and developers get self-service access to provision and manage VMs on VMware vSphere environment, providing greater agility. 
+
+1. Virtualized Infrastructure Administrators/Cloud Administrators can connect a vCenter instance to Azure. 
+
+2. Administrators can then use the Azure portal to browse VMware vSphere inventory and register virtual machines resource pools, networks, and templates into Azure. 
 
-- Conduct governance and monitoring operations across Azure and VMware VMs by enabling guest management (installing the [Azure Arc-enabled servers Connected Machine agent](../servers/agent-overview.md)).
+3. Administrators can provide app teams/developers fine-grained permissions on those VMware resources through Azure RBAC.
+
+4. App teams can use Azure interfaces (portal, CLI, or REST API) to manage the lifecycle of on-premises VMs they use for deploying their applications (CRUD, Start/Stop/Restart).
+
+5. App teams can use ARM templates/Bicep (Infrastructure as Code) to deploy VMs as part of CI/CD pipelines. 
 
 ## How does it work?
 
-To deliver this experience, you need to deploy the [Azure Arc resource bridge](../resource-bridge/overview.md) (preview), which is a virtual appliance, in your vSphere environment. It connects your vCenter Server to Azure. Azure Arc resource bridge (preview) enables you to represent the VMware resources in Azure and do various operations on them.
+Arc-enabled VMware vSphere provides these capabilities by integrating with your VMware vCenter Server. To connect your VMware vCenter Server to Azure Arc, you need to deploy the [Azure Arc resource bridge](../resource-bridge/overview.md) (preview) in your vSphere environment. Azure Arc resource bridge is a virtual appliance that hosts the components that communicate with your vCenter Server and Azure. 
 
-## Supported VMware vSphere versions
+When a VMware vCenter Server is connected to Azure, an automatic discovery of the inventory of vSphere resources is performed. This inventory data is continuously kept in sync with the vCenter Server. 
 
-Azure Arc-enabled VMware vSphere (preview) works with vCenter Server versions 6.7, 7 and 8.
+All guest OS-based capabilities are provided by enabling guest management (installing the Arc agent) on the VMs. Once guest management is enabled, VM extensions can be installed to use the Azure management capabilities. You can perform virtual hardware operations such as resizing, deleting, adding disks, and power cycling without guest management enabled. 
 
-> [!NOTE]
-> Azure Arc-enabled VMware vSphere  (preview)  supports vCenters with a maximum of 9500 VMs. If your vCenter has more than 9500 VMs, it is not recommended to use Arc-enabled VMware vSphere with it at this point.
+## How is Arc-enabled VMware vSphere different from Arc-enabled Servers
 
-## Supported scenarios
+The easiest way to think of this is as follows:
 
-The following scenarios are supported in Azure Arc-enabled VMware vSphere (preview):
+- Azure Arc-enabled servers interact on the guest operating system level, with no awareness of the underlying infrastructure fabric and the virtualization platform that they're running on. Since Arc-enabled servers also support bare-metal machines, there may, in fact, not even be a host hypervisor in some cases.
 
-- Virtualized Infrastructure Administrators/Cloud Administrators can connect a vCenter instance to Azure and browse the VMware virtual machine inventory in Azure.
+- Azure Arc-enabled VMware vSphere is a superset of Arc-enabled servers that extends management capabilities beyond the guest operating system to the VM itself. This provides lifecycle management and CRUD (Create, Read, Update, and Delete) operations on a VMware vSphere VM. These lifecycle management capabilities are exposed in the Azure portal and look and feel just like a regular Azure VM. Azure Arc-enabled VMware vSphere also provides guest operating system management—in fact, it uses the same components as Azure Arc-enabled servers. 
 
-- Administrators can use the Azure portal to browse VMware vSphere inventory and register virtual machines resource pools, networks, and templates into Azure. They can also enable guest management on many registered virtual machines at once.
+You have the flexibility to start with either option, and incorporate the other one later without any disruption. With both the options, you will enjoy the same consistent experience.
 
-- Administrators can provide app teams/developers fine-grained permissions on those VMware resources through Azure RBAC.
 
-- App teams can use Azure interfaces (portal, CLI, or REST API) to manage the lifecycle of on-premises VMs they use for deploying their applications (CRUD, Start/Stop/Restart).
+## Supported VMware vSphere versions
 
-- App teams and administrators can install extensions such as the Log Analytics agent, Custom Script Extension, Dependency Agent, and Azure Automation Hybrid Runbook Worker extension on the virtual machines and do operations supported by the extensions.
+Azure Arc-enabled VMware vSphere (preview) currently works with vCenter Server versions 6.7, 7, and 8. 
+> [!NOTE]
+> Azure Arc-enabled VMware vSphere  (preview) supports vCenters with a maximum of 9500 VMs. If your vCenter has more than 9500 VMs, we don't recommend you to use Arc-enabled VMware vSphere with it at this point.
 
 ## Supported regions
 
 You can use Azure Arc-enabled VMware vSphere (preview) in these supported regions:
-
 - Australia East
 - Canada Central
 - East US
+- East US 2
+- North Europe
 - Southeast Asia
 - UK South
 - West Europe
+- West US 2
+- West US 3
+
+For the most up-to-date information about region availability of Azure Arc-enabled VMware vSphere, see [Azure Products by Region](https://azure.microsoft.com/explore/global-infrastructure/products-by-region/?products=azure-arc&regions=all) page.
 
-For the most up-to-date information about region availability of Azure Arc-enabled VMware vSphere, see [Azure Products by Region](https://azure.microsoft.com/explore/global-infrastructure/products-by-region/?products=azure-arc&regions=all) page
 
 ## Data Residency
 
-Azure Arc-enabled VMware vSphere doesn't store/process customer data outside the region the customer deploys the service instance in.
+Azure Arc-enabled VMware vSphere doesn't store/process customer data outside the region the customer deploys the service instance in.  
 
 ## Next steps
 
-- [Connect VMware vCenter to Azure Arc using the helper script](quick-start-connect-vcenter-to-arc-using-script.md).
-- View the [support matrix for Arc-enabled VMware vSphere](support-matrix-for-arc-enabled-vmware-vsphere.md).
+- Plan your resource bridge deployment by reviewing the [support matrix for Arc-enabled VMware vSphere](support-matrix-for-arc-enabled-vmware-vsphere.md).
+- Once ready, [connect VMware vCenter to Azure Arc using the helper script](quick-start-connect-vcenter-to-arc-using-script.md).
 - Try out Arc-enabled VMware vSphere by using the [Azure Arc Jumpstart](https://azurearcjumpstart.io/azure_arc_jumpstart/azure_arc_vsphere/).