Merge pull request #268203 from anraghun/quality-improvements

Supporting gMSA authentication in Azure Migrate .NET to AKS modernization

Author: v-ccolin

articles/migrate/media/tutorial-modernize-asp-net-aks/replicate-web-apps-gmsa.png

@@ -315,6 +315,7 @@ Stack |VMware, Hyper-V, and physical servers. | VMware, Hyper-V, and physical se
 Windows servers | Windows Server 2008 R2 and later are supported. | Not supported.
 Linux servers | Not supported. | Ubuntu Linux 16.04/18.04/20.04, Debian 7/8, CentOS 6/7, and Red Hat Enterprise Linux 5/6/7.
 Web server versions | IIS 7.5 and later. | Tomcat 8 or later.
+Protocol | WinRM port 5985 (HTTP) | SSH port 22 (TCP)
 Required privileges | Local admin. | Root or sudo user.
 
 > [!NOTE]

articles/migrate/migrate-support-matrix-vmware.md

@@ -103,6 +103,9 @@ If you just created a free Azure account, you're the owner of your subscription.
    .\AppContainerizationInstaller.ps1
    ```
 
+> [!NOTE]
+> For Windows Server 2022, edit line 135 and remove `PowerShell-ISE` from the feature list, as it's no longer supported.
+
 ## Open the App Containerization tool
 
 1. Open a browser on any machine that can connect to the Windows machine that's running the App Containerization tool. Go to the tool URL: **https://*machine name or IP address*: 44369**.

articles/migrate/tutorial-app-containerization-aspnet-app-service.md

@@ -110,6 +110,9 @@ If you just created a free Azure account, you're the owner of your subscription.
    .\AppContainerizationInstaller.ps1
    ```
 
+> [!NOTE]
+> For Windows Server 2022, edit line 135 and remove `PowerShell-ISE` from the feature list, as it's no longer supported.
+
 ## Launch the App Containerization tool
 
 1. Open a browser on any machine that can connect to the Windows machine running the App Containerization tool, and open the tool URL: **https://*machine name or IP address*: 44369**.

articles/migrate/tutorial-app-containerization-aspnet-kubernetes.md

@@ -107,6 +107,9 @@ If you just created a free Azure account, you're the owner of your subscription.
    .\AppContainerizationInstaller.ps1
    ```
 
+> [!NOTE]
+> For Windows Server 2022, edit line 135 and remove `PowerShell-ISE` from the feature list, as it's no longer supported.
+
 ## Launch the App Containerization tool
 
 1. Open a browser on any machine that can connect to the Windows machine running the App Containerization tool and open the tool URL: **https://*machine name or IP address*: 44369**.

articles/migrate/tutorial-app-containerization-java-app-service.md

@@ -114,6 +114,9 @@ If you just created a free Azure account, you're the owner of your subscription.
    .\AppContainerizationInstaller.ps1
    ```
 
+> [!NOTE]
+> For Windows Server 2022, edit line 135 and remove `PowerShell-ISE` from the feature list, as it's no longer supported.
+
 ## Launch the App Containerization tool
 
 1. Open a browser on any machine that can connect to the Windows machine running the App Containerization tool, and open the tool URL: **https://*machine name or IP address*: 44369**.

articles/migrate/tutorial-app-containerization-java-kubernetes.md

@@ -72,7 +72,23 @@ In **Replicate** > **Web apps**, you can see a list of ASP.NET apps discovered o
 
     :::image type="content" source="./media/tutorial-modernize-asp-net-aks/replicate-web-apps-app-dir.png" alt-text="Screenshot of the Application directories tab.":::
 
-5. Select **Next**.
+5. For the applications using Windows authentication, indicated by the **Authentication type**, you can configure gMSA V2 on the target AKS cluster. 
+
+    :::image type="content" source="./media/tutorial-modernize-asp-net-aks/replicate-web-apps-gmsa.png" alt-text="Screenshot of the gMSA configuration tab.":::
+
+    | Setting |  Comments |
+    | --- | --- |
+    | Account name | Name of the gMSA account to use. If the account doesn't exist, a new account with this name is created automatically. |
+    | Account username | Username of the standard domain user that's authorized to access the gMSA configured on your Domain Controller. If the given username doesn't exist, a new standard domain user is created automatically. |
+    | Account password | Password of the above user. |
+    | Domain DNS server | IP address of the DNS server which can resolve your Active Directory domain name. |
+    | Domain FQDN | Fully qualified domain name of your Active Directory domain. |
+    | Domain controller address | IP address of the Active Directory Domain Controller. Connection is established to remotely allow the specified domain user to retrieve credentials for the specified gMSA. |
+    | Domain admin username | Username of a user that has sufficient privileges to remotely validate the gMSA account and domain user. |
+    | Domain admin password | Password for the admin user above. |
+
+
+6. Select **Next**.
 
 > [!NOTE]
 > The source path and the attribute value of App configurations and App directories together must be under 3000 characters in length. This can roughly be translated to around 15 entries (inclusive of both configurations and directories) of character length of about 200 each.