DH2i DxEnterprise 21.0 Software: Azure Blob Storage Witness Quick Start Guide

Download the PDF

Creating a witness using Azure Blob Storage

This quick start guide describes how to create and deploy a witness using Azure Storage for either DxEnterprise or DxOdyssey. Using this guide, the user will create an Azure Storage Account, then use an Access Key or SAS URL in DxAdmin or DxCLI to connect to the witness.

Prerequisites

Create an Azure Storage Account

  1. Once an Azure account has been set up, select Azure Storage to create a new storage account.
  2. Create a Resource group. For this example, the resource group name is azurewitness1.
  3. Under Security, select Minimum TLS version and set it to Version 1.0.

Create an Access Key or SAS URL for the Witness

Using an Access Key

  1. In the storage account, select Azure Keys on the left menu.
  2. Select Show Keys.
  3. Select Copy to copy the Connection String.

Using an Access Key

  1. Select Shared Access Signature on the left side menu.
  2. Select Service, Container and Object under Allowed resource types.
  3. Select a Start and End time for the SAS.
  4. Select Generate SAS and connection string.
  5. Select Copy to copy the Blob service SAS URL.

Add the Witness using DxAdmin or DxCLI

Using DxAdmin

  1. In DxAdmin, navigate to Advanced Configuration->Cluster Settings->Witness->WitnessProperties, then select the ellipses to the right of WitnessProperties.
  2. In the Witness Manager window, select Add Witness.
  3. For Witness Type, use the drop down to select Azure Blob Storage.
  4. Paste the Connection String or Blob service SAS URL into the Witness Path and select Test. Once it passes the test, select OK.
  5. Select the Apply button to save the configuration.

Using DxCLI

  1. (Windows users only) Change directory to “C:\Program Files\DH2i\bin”.
  2. Run the command dxcli set-witness to set the cluster witness.
    • Syntax:
    dxcli set-witness <param1> <...>
                    <param1> : <witness_path|user|password>
    • Parameters:
    Name Description Required
    param1 A set of parameters for the witness. TRUE
    ... A set of parameters for each additional witness for the cluster. FALSE
    witness_path The UNC path of the network share or Azure Blob Storage connection string or SAS URL. Prefix with "az:" if using Azure Blob Storage connection string or SAS URL. Empty to remove current cluster witness settings. TRUE
    user The name of the user. Not specified for Azure Blob Storage connection string or SAS URL. FALSE
    password The password of the user (encrypted using "dxcli encrypt-text" recommended). Not specified for Azure Blob Storage connection string or SAS URL. FALSE

    • Example1:
    dxcli set-witness "az:DefaultEndpointsProtocol=https;AccountName=mystorage;AccountKey=/nbFVz1fOKH7b0RaY/5Ms8uytbY99PZsspZkcHvNtVRj//pUk4jUPV7owaUSuDd6eExv96sBvkCXsleATEsT33==;EndpointSuffix=core.windows.net"
    • Example2:
    dxcli set-witness "az:https://mystorage.blob.core.windows.net/?sv=2020-02-10&ss=b&srt=o&sp=rwdlactfx&se=2021-06-09T13:15:48Z&st=2021-06-09T05:15:48Z&spr=https&sig=cRDqOc25lpHfbP8X1hlkDnV4H1wJycCyuuqlgu8U1xg%3D"

References

Download the PDF