Manage enterprise credentials and properties

To work with public cloud regions or obtain billing data, an enterprise can have one public cloud account or subscription per cloud provider. All the users in the tenant will work with this same account. No other enterprises can share the same account or subscription.

Before you begin:

1. Obtain credentials to access the cloud provider's API. For Abiquo's basic guides, see Obtain public cloud credentials.  Always check your provider documentation too.

To add public cloud credentials:

1. Go to Users view and edit an enterprise

2. Go to Credentials → Public

3. Select the Provider. There may be a separate provider for regions requiring different credentials

To add credentials for compute with optional billing and pricing:

1. Enter the Access key ID:

   1. For AWS, enter the Access key ID

   2. For Azure standard accounts and CSP customers, the format is subscription-id#app-id#tenant-id

   3. For GCP the format is project_id#client_id#client_email#private_key_id

   4. For OCI the format is tenancy#user#fingerprint

2. For the Secret access key:

   1. For AWS, enter the Secret access key

   2. For Azure, enter the password for the application.

   3. For GCP, enter the private key in the correct format

   4. For OCI enter the private key in PEM format.

3. Optionally, for Amazon, GCP, or OCI billing, select Also use for pricing. 
   For Azure, to add billing credentials, go to Pricing.
   See Add public cloud pricing credentials for a tenant

To add credentials for billing only:

• For a standard AWS customer account, do the steps at Add a customer AWS account for billing only

• For a customer of an Azure CSP or an Amazon organization do these steps.

  1. Enter the Access key ID as follows:

     • For Azure, the format is subscription-id##tenant-id

     • For Amazon, the format is account-id
       

       

  2. For the Secret access key, enter a random string

  3. Click Add account. Abiquo will validate your credentials with the cloud provider and save them

  4. Finish editing the enterprise and click Save

The platform will add the cloud provider account for the enterprise, which will also require access to a public cloud region.

To create a VPN in Abiquo between a private cloud virtual datacenter and Azure, you will need the following Azure ARM configuration for the enterprise:

• A Gateway Subnet in the Virtual Network that represents the VPC

• A Virtual Network Gateway (VNG) using this Gateway Subnet - if this does not exist, Abiquo will try to create it in the virtual network with the supplied netmask

• A Local Network Gateway (LNG) that will represent the remote VPN site, which is not managed by Azure ARM

• A Virtual Network Gateway Connection that relates the VNG to the LNG

  • All address spaces from the Virtual Network will be exposed through the Virtual Network Gateway.

To create the Azure VPN configuration, edit each enterprise that will use Azure VPNs and set the following Properties.