Removem ongo from vm software#

This decision, as well as the roles you assign the admins in your organization, determine the trust boundary for HGS. When setting up HGS, you are given the option of creating an isolated Active Directory forest just for HGS or to join HGS to an existing, trusted domain.

Limiting admin access to HGSĭue to the security sensitive nature of HGS, it is important to ensure that its administrators are highly trusted members of your organization and, ideally, separate from the administrators of your fabric resources.Īdditionally, it is recommended that you only manage HGS from secure workstations using secure communication protocols, such as WinRM over HTTPS. The guidance in the following sections addresses the most common operational issues facing administrators of HGS. Therefore, it is very important to follow best practices when managing the Host Guardian Service to ensure the security, availability and reliability of your guarded fabric. When a tenant decides to trust you to host their shielded VMs, they are placing their trust in your configuration and management of the Host Guardian Service.

Removem ongo from vm software#

It is responsible for ensuring that Hyper-V hosts in the fabric are known to the hoster or enterprise and running trusted software and for managing the keys used to start up shielded VMs. The Host Guardian Service (HGS) is the centerpiece of the guarded fabric solution. Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016