Install-Network Controller Cluster

Syntax

Install-NetworkControllerCluster
       -Node <NetworkControllerNode[]>
       -ClusterAuthentication <ClusterAuthentication>
       [-ManagementSecurityGroup <String>]
       [-DiagnosticLogLocation <String>]
       [-LogLocationCredential <PSCredential>]
       [-CredentialEncryptionCertificate <X509Certificate2>]
       [-GmsaAccountName <String>]
       [-LogTimeLimitInDays <UInt32>]
       [-LogSizeLimitInMBs <UInt32>]
       [-EnableUpdates <Boolean>]
       [-Force]
       [-UseSsl]
       [-Credential <PSCredential>]
       [-CertificateThumbprint <String>]
       [-WhatIf]
       [-Confirm]
       [<CommonParameters>]

Description

The Install-NetworkControllerCluster cmdlet creates a Network Controller cluster. Configuration of the Network Controller involves creating a Network Controller cluster and then creating a Network Controller application on top of the cluster. You can create a Network Controller application by calling the Install-NetworkController cmdlet.

You can configure a Network Controller using the following steps:

• Install the Network Controller role on all the computers that will be Network Controllers in your deployment.
• Run the New-NetworkControllerNodeObject cmdlet to enter the details of the node. Repeat this step for all the computers that belong to the deployment. The next step uses these node objects.
• Run the Install-NetworkControllerCluster cmdlet to create a Network Controller cluster.
• Run the Install-NetworkController cmdlet to create the Network Controller application for the cluster.

Examples

Example 1: Install a Network Controller cluster in a test deployment

PS C:\> $NodeObject = New-NetworkControllerNodeObject -Name "Node1" -Server "NCNode1" -FaultDomain "fd:/rack1/host1" -RestInterface "Ethernet"
PS C:\> Install-NetworkControllerCluster -Node $NodeObject -ClusterAuthentication 
NoneVersion                     : 10.0.0
Node                            : {Node1}
ClusterAuthentication           : None
ManagementSecurityGroup         : 
CredentialEncryptionCertificate :

This command installs a Network Controller cluster in a test deployment. High availability support is not present because a single node is used in the deployment. No authentication is used between the cluster nodes. Additionally, debug logs are stored locally.

Example 2: Install a Network Controller cluster in a domain-joined environment

PS C:\> $NodeObject1 = New-NetworkControllerNodeObject -Name "Node1" -Server "NCNode1.Contoso.com" -FaultDomain "fd:/rack1/host1" -RestInterface "Ethernet"
PS C:\> $NodeObject2 = New-NetworkControllerNodeObject -Name "Node2" -Server "NCNode2.Contoso.com" -FaultDomain "fd:/rack1/host2" -RestInterface "Ethernet"
PS C:\> $NodeObject3 = New-NetworkControllerNodeObject -Name "Node3" -Server "NCNode3.Contoso.com" -FaultDomain "fd:/rack2/host3" -RestInterface "Ethernet"
PS C:\> $Certificate = Get-Item Cert:\LocalMachine\My | Get-ChildItem | where {$_.Subject -imatch "NCEncryption"}
PS C:\> Install-NetworkControllerCluster -Node @($ NodeObject1,$ NodeObject2,$ NodeObject3) -ClusterAuthentication Kerberos -ManagementSecurityGroup Contoso\NCManagementAdmins -LogLocation "\\share\diagnostics" -CredentialEncryptionCertificate $Certificate 
CertificateVersion             : 10.0.0
Node                           : {Node1, Node2, Node3}
ClusterAuthentication          : Kerberos
ManagementSecurityGroup        : Contoso\NCManagementAdmins
CredentialEncryptionCertificate: [Subject] 
                                   CN=NCEncryption
                                 [Issuer] 
                                   CN=Contoso
                                 [Serial Number] 
                                   1C00000003786A607D6EFB733F000000000003
                                 [Not Before] 
                                   2/11/2015 6:18:21 AM
                                 [Not After] 
                                   2/10/2017 6:18:21 AM
                                 [Thumbprint] 
                                   D4FDE4F607849083C590466334D66037C0E38001

This command installs a Network Controller cluster in a domain-joined environment. The authentication that is used between the cluster nodes is Kerberos. Debug logs are stored in a central location. To encrypt the credentials used to store Network Controller binaries on disk, the user provides a certificate with subject name as NCEncryption.

Example 3: Install a Network Controller cluster in a non domain-joined environment

PS C:\> $Node1Certificate = Get-Item Cert:\LocalMachine\My | Get-ChildItem | where {$_.Subject -imatch "NCNode1"
PS C:\> $Node2Certificate = Get-Item Cert:\LocalMachine\My | Get-ChildItem | where {$_.Subject -imatch "NCNode2"
PS C:\> $Node3Certificate = Get-Item Cert:\LocalMachine\My | Get-ChildItem | where {$_.Subject -imatch "NCNode3"
PS C:\> $NodeObject1 = New-NetworkControllerNodeObject -Name "Node1" -Server "NCNode1" -FaultDomain "fd:/rack1/host1" -RestInterface "Ethernet" -Certificate $Node1Certificate
PS C:\> $NodeObject2 = New-NetworkControllerNodeObject -Name "Node2" -Server "NCNode2" -FaultDomain "fd:/rack1/host2" -RestInterface "Ethernet" -Certificate $Node2Certificate
PS C:\> $NodeObject3 = New-NetworkControllerNodeObject -Name "Node3" -Server "NCNode3" -FaultDomain "fd:/rack2/host3" -RestInterface "Ethernet" -Certificate $Node3Certificate
PS C:\> $Cert = Get-Item Cert:\LocalMachine\My |  Get-ChildItem | where {$_.Subject -imatch "NCEncryption
PS C:\> Install-NetworkControllerCluster -Node @($ NodeObject1,$ NodeObject2,$ NodeObject3) -ClusterAuthentication x509-LogLocation "\\share\diagnostics" -StoreAccessCredential $Cred -CredentialEncryptionCertificate $Cert
Version                        : 10.0.0
Node                           : {Node1, Node2, Node3}
ClusterAuthentication          : x509
ManagementSecurityGroup        : 
CredentialEncryptionCertificate: [Subject] 
                                   CN=NCEncryption
                                 [Issuer] 
                                   CN=Contoso
                                 [Serial Number] 
                                   1C00000003786A607D6EFB733F000000000003
                                 [Not Before] 
                                   2/11/2015 6:18:21 AM
                                 [Not After] 
                                   2/10/2017 6:18:21 AM
                                 [Thumbprint] 
                                   D4FDE4F607849083C590466334D66037C0E38001

This command installs a Network Controller cluster in a non-domain-joined environment. The authentication used between the cluster nodes is a X.509 certificate. Debug logs are stored in a central location. To encrypt the credentials used to store Network Controller binaries on disk, you have to provide a certificate with a subject name as NCEncryption.

Required Parameters

Optional Parameters

Outputs

This cmdlet returns an object that contains the following fields:

• Cluster version
• Name of the Network Controller nodes
• Authentication to be used between cluster nodes
• Management security group
• Credential Encryption Certificate

Related Links

• Get-NetworkControllerCluster
• Install-NetworkController
• New-NetworkControllerNodeObject
• Repair-NetworkControllerCluster
• Set-NetworkControllerCluster
• Uninstall-NetworkControllerCluster