Prepare the Windows environment for monitoring
A supported version of Hyper-V/Windows Server is installed and configured. For more information, see the Interoperability section.
Windows Remote Management (WinRM) is configured.
The Windows hosts are configured for monitoring. For more information, see Configuring the Windows hosts for monitoring.
For access to the Windows host, note the following:
A WinRM user and login credentials for the OS host are available.
The user is a member of the Hyper-V Administrators or Administrators group.
An appropriate port is available. If using WinRM over HTTPS, use port 5986. If using WinRM over HTTP, use port 5985.
The supported transport method for host credentials is NTLM.
Before configuring the Microsoft Hyper-V integration, prepare the Windows environment for access by the integration. Complete the following tasks on each Windows host server. You can complete the tasks in any order, but all tasks must be complete before configuring the Hyper-V integration in IO (Infrastructure Observability) for discovery.
Create a domain user service account.
Add the domain user service account to the Performance Monitor Users group.
Configure Windows Management Instrumentation (WMI).
Configure Windows Remote Management (WinRM).
Configure the Windows Firewall.
Optional:
Create the HTTPS (WinRM) certificate.
Download (export) the HTTPS certificate.
You must create a domain user that IO can use to access Windows and gather monitoring data.
Prerequisites
You are running a supported version of 64-bit Windows Server: 2012, 2012 R2, 2016, 2019 or 2022. If you are running an earlier version, contact Virtana Support.
You are logged in as a domain administrator.
You have the IP address and subnet for IO.
Note
The instructions in this section describe one way to configure a Windows Server for connectivity with IO. If these instructions do not work for your Windows Server configuration, contact Microsoft Support for assistance.
Create a Domain User Service Account in Active Directory
Enter a password and configure the following password options:
Clear the User must change password at next logon checkbox.
Select the User cannot change password checkbox.
Select the Password never expires checkbox.
Click Next and then click Finish.
Complete these steps on each server that IO monitors.
Log in as a domain administrator.
Navigate to Administrative Tools and open Computer Management.
Navigate to Local Users and Groups and select Groups.
Double-click Performance Monitor Users and add the domain user service account you created in the previous task.
Click Apply and then click OK to close the properties page.
Windows Management Instrumentation (WMI) Configuration
Configure the domain user service account in WMI so it can access the Windows host and gather monitoring data. You must be logged in as a domain administrator to complete this task.
Open Windows PowerShell and run the following command:
Alternatively, navigate to Control Panel > Administrative Tools > Computer Management > More Actions > WMI Control.
In the right pane under Actions / WMI Control, click More Actions to open the WMI Control Properties wizard.
Click the Security tab and select Root.
Click Security. In the Group or user names field, select the domain user service account you created. If the account is not listed, click Add, enter the username, and click OK.
Select the domain user service account and select the following permissions:
Execute Methods
Provider Write
Remote Enable
Click Advanced, select the domain user service account, and then click Edit.
Set Applies to to This namespace and subnamespaces.
Applies to = This namespace and subnamespaces
Confirm that the following permissions are selected: Execute Methods, Provider Write, and Remote Enable.
Click Apply and then click OK to close all open dialog boxes.
WMI configuration is complete.
Windows Remote Management (WinRM) Configuration
Configure the same domain user service account in WinRM that you configured in WMI.
Open Windows PowerShell and run the following command:
Enable-PSRemoting
Open PowerShell and run the following command:
Alternatively, navigate to Control Panel > Administrative Tools > Computer Management > More Actions > WMI Control.
The Permissions for Default window opens.
Select the domain user service account and select the following permissions:
Read (Get, Enumerate, and Subscribe)
Execute (Invoke)
If the domain user is not listed, click Add, enter the username, and click OK.
Click Apply and then click OK to close the window.
WinRM configuration is complete.
Configure the Windows Firewall
If a firewall is enabled, configure a firewall exception to allow communication between the IO Appliance and the Windows server.
Open PowerShell and run the following command:
In the left pane, click Inbound Rules. In the right pane, click New Rule.
The New Inbound Rules wizard opens to the Rule Type tab.
Configure the wizard tabs as follows. Click Next to move between tabs.
Note
Virtana recommends defining firewall connection rules by remote IP address rather than limiting local and remote ports or local IP addresses. Set the remote IP address to the IP address of the IO Appliance.
Clicking Next moves you through the wizard tabs, identified in the left pane.
On the Rule Type tab: Select Custom and click Next.
On the Program tab: Confirm that All programs is selected and click Next.
On the Protocol and Ports tab: Leave the defaults and click Next.
On the Scope tab:
In the Which remote IP addresses does this rule apply to field, select These IP addresses and click Add.
In the This IP address or subnet field, enter the IP address of the IO Appliance and click Next.
On the Action tab: Confirm that Allow the connection is selected and click Next.
On the Profile tab: Confirm that Domain is selected. Clear Private and Public if required, and then click Next.
On the Name tab: Enter a name and description for the firewall rule and click Finish.
Restart the required services:
Open Services by running the following PowerShell command: services.msc
Select the Windows Management Instrumentation service and restart it.
Restarting Windows Management Instrumentation also restarts the User Access Logging and IP Helper services.
Click Yes in the confirmation dialog to restart the three services.
Windows Firewall configuration is complete.