Self Service Password Reset supports deploying the .msi file on Azure on a Windows Server that connects to Active Directory Domain Services which contains your users’ accounts you want to manage. Currently, this is the only scenario that has been tested and is supported for Self Service Password Reset. Use the following information to deploy Self Service Password Reset on Azure.
You must meet the following prerequisites to deploy Self Service Password Reset on Azure:
You must have a basic understanding of Azure and the following concepts:
Source environments
Virtual networks (VNets)
Storage Accounts
Subnets
Networking security groups (NSG)
For more information, see Microsoft Azure Documentation.
You must have a basic understanding of AD DS on Azure.
For more information, see Creating an Active Directory Domain Services (AD DS) on Azure
.
You must have an Azure account
For more information, see Microsoft Azure Account.
You must deploy the Windows Server 2016 or 2019 in Azure that will run Self Service Password Reset.
For more information, see Windows Virtual Server Documentation
.
There are many different ways you can configure the Self Service Password Reset on Azure. The following is a tested and supported example.
The tested and supported scenario consists of two Azure Windows Server VM instances deployed in an Azure Virtual Network (VNet) connected with a common subnet. You dedicate one Windows Server VM instance to hosting Active Directory Domain Services (AD DS). You dedicate the other Windows Server VM instance to hosting Self Service Password Reset where you assign a Public IP address.
The installation of Active Directory Domain Services (AD DS) into a second Windows Server instance is beyond the scope of this section. For more information, see Creating an Active Directory Domain Services (AD DS) on Azure
.
After you have deployed the Windows Server, you must now install the .msi file to install Self Service Password Reset.
Download a copy of the Self Service Password Reset .msi file from the download site. For more information, see Obtaining Self Service Password Reset.
Copy the .msi file to the Windows Server VM using Remote Desktop. For more information, see Remote Desktop Service
.
Access the .msi file on the Windows Server VM, then launch the Self Service Password Reset installer.
Follow the prompts to complete the installation. For more information, see Installing Self Service Password Reset on Windows.
After the installation completes, you must configure Self Service Password Reset to communicate to the second Windows Server VM that has Active Directory Domain Services installed and where your user accounts reside.
After installing Self Service Password Reset, you must configure it using a compatible web browser. Since the Windows Server VM has a public address, this configuration can occur from any internet-connected machine by browsing to the Self Service Password Reset port. For this example it is:
https://netiq-sspr.westus.cloudapp.azure.com:8443/sspr
The steps for configuring Self Service Password Reset are the same whether it is deployed on-premise or in the Cloud. For more information, see Configuring Your Environment for Self Service Password Reset.