Skip to main content
Version: 2604 (Preview)

Phase 05: Cluster Deployment

Runbook Azure

DOCUMENT CATEGORY: Runbook
SCOPE: Azure Local cluster deployment
PURPOSE: Deploy the cluster through Azure Portal or ARM templates
MASTER REFERENCE: Microsoft Learn - Deploy Azure Local

Status: Active Estimated Time: 1.5-3 hours Last Updated: 2026-03-08

Overview​

This stage deploys the Azure Local cluster using the configured infrastructure. Deployment can be performed through the Azure Portal (GUI-based) or ARM templates (infrastructure-as-code). Azure Local Cloud supports both Active Directory and Local Identity authentication methods.

Deployment Methods​

Storage Spaces Direct (S2D) — Hyperconverged​

MethodAuthenticationUse Case
Portal - Active DirectoryDomain-joinedStandard enterprise deployment
ARM Template - Active DirectoryDomain-joinedAutomated/repeatable deployment
Portal - Local IdentityLocal accountsEdge/disconnected scenarios
ARM Template - Local IdentityLocal accountsAutomated edge deployment

Storage Area Network (SAN) — Disaggregated​

MethodAuthenticationUse Case
Portal - Active Directory (SAN)Domain-joinedSAN with enterprise AD
ARM Template - Active Directory (SAN)Domain-joinedSAN with automated deployment
Portal - Local Identity (SAN)Local accountsSAN at edge without AD
ARM Template - Local Identity (SAN)Local accountsSAN with automated edge
Choosing Your Storage Type
  • S2D (Hyperconverged): Local NVMe/SSD/HDD in each node, up to 16 nodes. Compute and storage scale together.
  • SAN (Disaggregated): External SAN via Fiber Channel, up to 64 nodes. Compute and storage scale independently. See SAN Deployment for prerequisites and FC patterns.
Azure Local Cloud Standard

For Azure Local Cloud Azure Local deployments, Active Directory with ARM Template is the recommended approach for consistency and repeatability.

Prerequisites​

All Deployment Methods​

RequirementValidation
Arc registration complete (Phase 04)All nodes show "Connected" in Azure Portal
Network infrastructure configuredManagement, storage, and compute networks ready
Required Azure permissionsContributor + User Access Administrator on resource group
Storage infrastructure readyPhysical disks and enclosures configured

Active Directory Deployments Only​

RequirementValidation
AD pre-created with New-HciAdObjectsPreCreationOU exists, LCM user created in OU, GPO inheritance blocked at OU level
Nodes NOT pre-joined to domain(Get-WmiObject Win32_ComputerSystem).Domain returns WORKGROUP
DNS resolves the AD domain FQDN from all nodesResolve-DnsName <domain.fqdn> succeeds on each node

Local Identity Deployments Only​

RequirementValidation
Non-built-in local admin account with identical credentials on ALL nodesAccount is NOT the built-in Administrator; login succeeds on each node
Azure Key Vault availableExisting KV accessible, or will be created during portal deployment
DNS server with zone configured for cluster nodesResolve-DnsName <node-fqdn> succeeds for each node

Deployment Workflow​

graph TD
 A[Start Deployment] --> B{Authentication Type?}
 B -->|Active Directory| C[AD Pre-checks]
 B -->|Local Identity| D[Local Admin Setup]
 C --> E{Deployment Method?}
 D --> E
 E -->|Portal| F[Portal Wizard]
 E -->|ARM Template| G[ARM Deployment]
 F --> H[Validation]
 G --> H
 H --> I{Deployment Successful?}
 I -->|Yes| J[Phase 16: Post-Deployment]
 I -->|No| K[Troubleshooting]
 K --> E

Azure Portal Deployment Overview​

The Azure Portal deployment wizard guides you through:

  1. Basics - Subscription, resource group, cluster name, region
  2. Configuration - Node configuration, witness, and storage settings
  3. Networking - Management, compute, and storage network settings
  4. Management - Update settings, key vault integration
  5. Tags - Resource tagging for governance
  6. Validation - Pre-deployment checks
  7. Review + Create - Final review and deployment

ARM Template Deployment Overview​

ARM template deployments provide:

  • Repeatability - Consistent deployments across environments
  • Version Control - Track infrastructure changes in Git
  • Automation - Integrate with CI/CD pipelines
  • Compliance - Audit trail of infrastructure changes
Azure Local Cloud ARM Templates

Azure Local Cloud parameter templates are maintained in the Azure Local Toolkit:

Toolkit location: configs/azure/arm-templates/04-cluster-deployment/

  • azuredeploy.parameters.ad.json — Active Directory authentication
  • azuredeploy.parameters.local-identity.json — Local Identity authentication

Microsoft official template: Pull at deploy time from the Azure Quickstart Templates repository. Do not modify the main template — customize only via the parameters file.

Estimated Deployment Time​

PhaseDuration
Pre-deployment validation15-30 minutes
Cluster deployment45-90 minutes
Extension installation15-30 minutes
Post-deployment validation15-30 minutes
Total1.5-3 hours

Next Steps​

Select your deployment method:

S2D (Hyperconverged)​

AuthenticationMethodLink
Active DirectoryPortalPortal Instructions
Active DirectoryARM TemplateARM Template Instructions
Local IdentityPortalPortal Instructions
Local IdentityARM TemplateARM Template Instructions

SAN (Disaggregated)​

AuthenticationMethodLink
Active DirectoryPortalPortal Instructions (SAN)
Active DirectoryARM TemplateARM Template Instructions (SAN)
Local IdentityPortalPortal Instructions (SAN)
Local IdentityARM TemplateARM Template Instructions (SAN)

After completing cluster deployment, proceed to Phase 16: Post Deployment.

PreviousUpNext
Phase 14: Arc RegistrationCluster Deployment IndexPhase 16: Post-Deployment

References: