
If you have an existing CMG deployed with the classic cloud service, convert the CMG to use a virtual machine scale set. Starting in version 2107, all customers can deploy a CMG with a virtual machine scale set.

This support is only if they don't currently have a CMG deployed using classic cloud services to another subscription. Starting in version 2010, customers with a Cloud Solution Provider (CSP) subscription can deploy the CMG with a virtual machine scale set in Azure. For more information, see Enable optional features from updates. You must enable this feature before using it.

Starting in version 2107, it's no longer a pre-release feature.Ĭonfiguration Manager doesn't enable this optional feature by default. This feature was first introduced in version 2010 as a pre-release feature. This storage account doesn't support customizations, such as virtual network restrictions. By default, the CMG is also content-enabled to provide deployment content to internet-based clients. The CMG creates an Azure storage account, which it uses for its standard operations. Configuration Manager site-issued tokensįor more information, see Plan for CMG client authentication.There are multiple options for client identity and authentication: Internet-based clients connect to the CMG to access on-premises Configuration Manager components. The CMG uses a certificate-based HTTPS web service to help secure network communication with clients.
#Cloudapp jobs update#
The management point and software update point site system roles service client requests per normal. Make sure your service connection point is in online mode. Additionally, it monitors and reports service health and logging information from Azure Active Directory (Azure AD). The service connection point site system role runs the cloud service manager component, which handles all CMG deployment tasks. For example, the management point and software update point. The CMG connection point forwards client requests from the CMG to on-premises roles according to URL mappings. It also publishes settings to the CMG including connection information and security settings. The CMG connection point site system role enables a consistent and high-performance connection from the on-premises network to the CMG service in Azure. The CMG cloud service in Azure authenticates and forwards Configuration Manager client requests over the internet to the on-premises CMG connection point. Performance and scale: Decide how many service components you'll need to best support your number of clients.Ĭost: Understand the cost of the Azure-based components.ĭeployment and operation of the CMG includes the following components: Supported configurations: Understand which Configuration Manager features you can support on internet-based clients that connect to the CMG.

Hierarchy design: Plan where to place the CMG in your environment. It also lists the system requirements.Ĭlient authentication: Determine which authentication method you'll use for clients from potentially untrusted networks. The overall CMG planning process is divided into the following parts:Ĭomponents and requirements: This article summarizes the components that make up the CMG system.
