This article lists the various features and improvements that are available in Azure Stack HCI, version 22H2. This article also describes the Azure Stack HCI, Supplemental Package that can be deployed in conjunction with Azure Stack HCI, version 22H2 OS.
Azure Stack HCI, version 22H2 (currently in PREVIEW) is the latest version of the operating system available for the Azure Stack HCI solution and focuses on Network ATC v2 improvements, storage replication compression, Hyper-V live migration, and more. Additionally, a preview version of Azure Stack HCI, Supplemental Package, is now available that can be deployed on servers running version 22H2 OS.
You can also join the Azure Stack HCI preview channel to test out features for future versions of the Azure Stack HCI operating system. For more information, see Join the Azure Stack HCI preview channel.
The following sections briefly describe the various features and enhancements in Azure Stack HCI, Supplemental Package and in Azure Stack HCI, version 22H2.
Azure Stack HCI, Supplemental Package (preview)
Azure Stack HCI, Supplemental Package is now available to be deployed on servers running Azure Stack HCI, version 22H2 OS. This package contains a brand-new deployment tool that allows for an interactive deployment, new security capabilities, an Azure Stack HCI Environment Checker tool that will validate connectivity, hardware, identity and networking prior to deployment, and a unified log collection experience.
New deployment tool (preview)
For servers running Azure Stack HCI, version 22H2 OS, you can perform new deployments using the Azure Stack HCI, Supplemental Package (preview). You can deploy an Azure Stack HCI cluster via a brand-new deployment tool in one of the three ways – interactively, using an existing configuration file, or via PowerShell.
When you try out this new deployment tool, make sure that you do not run production workloads on systems deployed with the Supplemental Package while it’s in preview even with the core operating system Azure Stack HCI 22H2 being generally available. Microsoft Customer Support will supply support services while in preview, but service level agreements available at GA do not apply.
You can download the Azure Stack HCI Supplemental Package here:
https://go.microsoft.com/fwlink/?linkid=2210545
https://go.microsoft.com/fwlink/?linkid=2210546
https://go.microsoft.com/fwlink/?linkid=2210608
To learn more about the new deployment methods, see Deployment overview.
New security capabilities (preview)
The new installations with Azure Stack HCI, Supplemental Package release start with a secure-by-default strategy. The new version has a tailored security baseline coupled with a security drift control mechanism and a set of well-known security features enabled by default.
To summarize, this release provides:
- A tailored security baseline with over 200 security settings configured and enforced with a security drift control mechanism that ensures the cluster always starts and remains in a known good security state.
The security baseline enables you to closely meet the Center for Internet Security (CIS) Benchmark, Defense Information Systems Agency Security Technical Implementation Guides (DISA STIG), Common Criteria, and Federal Information Processing Standards (FIPS) requirements for the OS and Azure Compute Security baselines.
For more information, see Security baseline settings for Azure Stack HCI.
- Improved security posture achieved through a stronger set of protocols and cipher suites enabled by default.
- Secured-Core Server that achieves higher protection by advancing a combination of hardware, firmware, and driver capabilities. For more information, see What is Secured-core server?
- Out-of-box protection for data and network with SMB signing and BitLocker encryption for OS and Cluster Shared Volumes. For more information, see BitLocker encryption for Azure Stack HCI.
- Reduced attack surface as Windows Defender Application Control is enabled by default and limits the applications and the code that you can run on the core platform. For more information, see Windows Defender Application Control for Azure Stack HCI.
New Azure Stack HCI Environment Checker tool (preview)
Azure Stack HCI Environment Checker is a standalone, PowerShell tool that you can use prior to even ordering hardware to validate connectivity readiness.
For new deployments using the supplemental package, the environment checker automatically validates internet connectivity, hardware, identity and networking on all the nodes of your Azure Stack HCI cluster. The tool also returns a Pass/Fail status for each test, and saves a log file and a detailed report file.
To get started, you can download this free tool. For more information, see Assess your environment for deployment readiness.
Azure Stack HCI, version 22H2
The following sections briefly describe the various features and enhancements in Azure Stack HCI, version 22H2.
Network ATC v2 improvements
In this release, the Network ATC has several new features and improvements:
- Network symmetry. Network ATC automatically checks for and validates network symmetry across all adapters (on each node) in the same intent – specifically the make, model, speed, and configuration of your selected adapters.
- Storage automatic IP assignment. Network ATC automatically identifies available IPs in our default subnets and assigns those addresses to your storage adapters.
- Scope detection. Network ATC automatically detects if you’re configuring a cluster node, so no need to add the -ClusterNameor -ComputerName parameter in your commands.
- Contextual cluster network naming. Network ATC understands how you’ll use cluster networks and names them more appropriately.
- Live Migration optimization. Network ATC intelligently manages:
- Maximum simultaneous live migrations– Network ATC ensures that the maximum recommended value is configured and maintained across all cluster nodes.
- Best live migration network– Network ATC determines the best network for live migration and automatically configures your system.
- Best live migration transport– Network ATC selects the best algorithm for SMB, compression, and TCP given your network configuration.
- Maximum SMB (RDMA) bandwidth– If SMB (RDMA) is used, Network ATC determines the maximum bandwidth reserved for live migration to ensure that there’s enough bandwidth for Storage Spaces Direct.
- Proxy configuration. Network ATC can configure all server nodes with the same proxy information as needed for your environment. This action provides one-time configuration for all current and future server nodes.
- Stretched cluster support. Network ATC configures all storage adapters used by Storage Replica in stretched cluster environments. However, since such adapters need to route across subnets, Network ATC can’t assign any IP addresses to them, so you’ll still need to assign these addresses yourselves.
- Post-deployment VLAN modification. You can use the new Set-NetIntentcmdlet in Network ATC to modify VLAN settings just as you would if you were using the Add-NetIntent No need to remove and then add the intents again when changing VLANs.
For more information, see the blog on Network ATC v2 improvements.
Storage Replica compression
This release includes the Storage Replica compression feature for data transferred between the source and destination servers. This new functionality compresses the replication data from the source system, which is transferred over the network, decompressed, and then saved on the destination. The compression results in fewer network packets to transfer the same amount of data, allowing for higher throughput and lower network utilization, which in turn results in lower costs for metered networks.
There are no changes to the way you create replica groups and partnerships. The only change is a new parameter that can be used with the existing Storage Replica cmdlets.
You specify compression when the group and the partnership are created. Use the following cmdlets to specify compression:
New-SRGroup -EnableCompression New-SRPartnership -EnableCompression
If the parameter isn’t specified, the default is set to Disabled.
To modify this setting later, use the following cmdlets:
Set-SRGroup -Compression <Boolean> Set-SRPartnership -Compression <Boolean>
at this time and will be added in a subsequent release.
For more information, see Storage Replica overview.
Partition and share GPU with virtual machines on Azure Stack HCI
With this release, GPU partitioning is now supported on NVIDIA A2, A10, A16, and A40 GPUs in Azure Stack HCI, enabled with NVIDIA RTX Virtual Workstation (vWS) and NVIDIA Virtual PC (vPC) software. GPU partitioning is implemented using single root I/O virtualization (SR-IOV), which provides a strong, hardware-backed security boundary with predictable performance for each virtual machine.
For more information, see Partition and share GPU with virtual machines on Azure Stack HCI.
Hyper-V live migration improvements
In Azure Stack HCI, version 22H2, the Hyper-V live migration is faster and more reliable for switchless 2-node and 3-node clusters. Switchless interconnects can cause live migration delays and this release addresses these issues.
Cluster-Aware Updating (CAU) improvements
With this release, Cluster-Aware Updating is more reliable due to the smarter retry and mitigation logic that reduces errors when pausing and draining cluster nodes. Cluster-Aware Updating also supports single server deployments.
For more information, see What is Cluster-Aware Updating?
Thin provisioning conversion
With this release, you can now convert existing fixed provisioned volumes to thin using PowerShell. Thin provisioning improves storage efficiency and simplifies management.
For more information, see Convert fixed to thin provisioned volumes on your Azure Stack HCI.
Single server scale-out
This release supports inline fault domain and resiliency changes to scale out a single server. Azure Stack HCI, version 22H2 provides easy scaling options to go from a single server to a two-node cluster, and from a two-node cluster to a three-node cluster.
For more information, see Scale out single server on your Azure Stack HCI.
Tag-based segmentation
In this release, you can secure your application workload virtual machines (VMs) from external and lateral threats with custom tags of your choice. Assign custom tags to classify your VMs, and then apply Network Security Groups (NSGs) based on those tags to restrict communication to and from external and internal sources. For example, to prevent your SQL Server VMs from communicating with your web server VMs, simply tag the corresponding VMs with SQL and Web tags. You can then create an NSG to prevent Web tag from communicating with SQL tag.
For more information, see Configure network security groups with Windows Admin Center.
Azure Hybrid Benefit for Azure Stack HCI
Azure Hybrid Benefit program enables customers to significantly reduce the costs of running workloads in the cloud. With Windows Server Software Assurance (SA), we are further expanding Azure Hybrid Benefit to reduce the costs of running workloads on-premises and at edge locations.
If you have Windows Server Datacenter licenses with active Software Assurance, use Azure Hybrid Benefit to waive host service fees for Azure Stack HCI and unlimited virtualization with Windows Server subscription at no additional cost. You can then modernize your existing datacenter and edge infrastructure to run VM and container-based applications.
For more information, see Azure Hybrid Benefit for Azure Stack HCI.
Azure Arc VM changes and Azure Marketplace
Another feature also available with this release is Azure Marketplace integration for Azure Arc-enabled Azure Stack HCI. With this integration, you’ll be able to access the latest fully updated images from Microsoft, including Windows Server 2022 Datacenter: Azure Edition and Windows 10/11 Enterprise multi-session for Azure Virtual Desktop.
You can now use the Azure portal or the Azure CLI to easily add and manage VM images and then use those images to create Azure Arc VMs. This feature works with your existing cluster running Azure Stack HCI, version 21H2 or later.
For more information, see:
- Create VM image using an Azure Marketplace image.
- Create VM image using an image in an Azure Storage account.
- Create VM image using an image in a local share.
Windows Server 2022 Datacenter: Azure Edition VMs on Azure Stack HCI
Beginning this release, you can run Windows Server 2022 Datacenter: Azure Edition on Azure Stack HCI. The preview of Marketplace VM images lets customers deploy Windows Server 2022 Datacenter: Azure Edition (already generally available in Azure IaaS) on Azure Stack HCI. This enables unique features like Hotpatch and SMB over QUIC on Windows Server 2022 Datacenter: Azure Edition VMs on Azure Stack HCI. Through future guest management extensions, the full Azure Automanage experience will also become available in upcoming releases.
This article originally appeared on Microsoft.com.