Deploy and configure Azure VMware Solution

Once you've planned your deployment, you'll deploy and configure your Azure VMware Solution private cloud.

The diagram shows the deployment workflow of Azure VMware Solution.

Diagram showing the Azure VMware Solution deployment workflow.

In this how-to, you'll:

  • Register the resource provider and create a private cloud
  • Connect to a new or existing ExpressRoute virtual network gateway
  • Validate the network connect

After you're finished, follow the recommended next steps at the end to continue with the steps of this getting started guide.

Register the Microsoft.AVS resource provider

To use Azure VMware Solution, you must first register the resource provider with your subscription. For more information about resource providers, see Azure resource providers and types.

  1. Sign in to the Azure portal.

  2. On the Azure portal menu, select All services.

  3. In the All services box, enter subscription, and then select Subscriptions.

  4. Select the subscription from the subscription list to view.

  5. Select Resource providers and enter Microsoft.AVS into the search.

  6. If the resource provider is not registered, select Register.

Create an Azure VMware Solution private cloud

You can create an Azure VMware Solution private cloud using the Azure portal or the Azure CLI.

  1. Sign in to the Azure portal.

  2. Select Create a resource.

  3. In the Search services and marketplace text box, type Azure VMware Solution and select it from the search results.

  4. On the Azure VMware Solution window, select Create.

  5. If you need more hosts, request a host quota increase.

  6. On the Basics tab, enter values for the fields and then select Review + Create.


    You gathered this information during the planning phase of this quick start.

    Field Value
    Subscription Select the subscription you plan to use for the deployment. All resources in an Azure subscription are billed together.
    Resource group Select the resource group for your private cloud. An Azure resource group is a logical container into which Azure resources are deployed and managed. Alternatively, you can create a new resource group for your private cloud.
    Resource name Provide the name of your Azure VMware Solution private cloud.
    Location Select a location, such as east us. It's the region you defined during the planning phase.
    Size of host Select the AV36, AV36P or AV52 SKU.
    Number of hosts Number of hosts allocated for the private cloud cluster. The default value is 3, which you can increase or decrease after deployment. If these nodes are not listed as available, please contact support to request a quota increase. You can also click the link labeled If you need more hosts, request a quota increase in the Azure portal.
    Address block for private cloud Provide an IP address block for the private cloud. The CIDR represents the private cloud management network and is used for the cluster management services, such as vCenter Server and NSX-T Manager. Use /22 address space, for example, The address should be unique and not overlap with other Azure Virtual Networks and with on-premises networks.

    Screenshot showing the Basics tab on the Create a private cloud window.

  7. Verify the information entered, and if correct, select Create.


    This step takes roughly 3-4 hours. Adding a single host in an existing or the same cluster takes between 30 - 45 minutes.

  8. Verify that the deployment was successful. Navigate to the resource group you created and select your private cloud. You'll see the status of Succeeded when the deployment has finished.

    Screenshot showing that the deployment was successful.

Connect to Azure Virtual Network with ExpressRoute

In the planning phase, you defined whether to use an existing or new ExpressRoute virtual network gateway.

Diagram showing the workflow for connecting Azure Virtual Network to ExpressRoute in Azure VMware Solution.


If you plan to scale your Azure VMware Solution hosts using Azure NetApp Files datastores, deploying the vNet close to your hosts with an ExpressRoute virtual network gateway is crucial. The closer the storage is to your hosts, the better the performance.

Use a new ExpressRoute virtual network gateway


You must have a virtual network with a GatewaySubnet that does not already have a virtual network gateway.

If Then
You don't already have a virtual network... Create the following:
  1. Virtual network
  2. GatewaySubnet
  3. Virtual network gateway
  4. Connect ExpressRoute to the gateway
You already have a virtual network without a GatewaySubnet... Create the following:
  1. GatewaySubnet
  2. Virtual network gateway
  3. Connect ExpressRoute to the gateway
You already have a virtual network with a GatewaySubnet... Create the following:
  1. Virtual network gateway
  2. Connect ExpressRoute to the gateway

Use an existing virtual network gateway

  1. Request an ExpressRoute authorization key:

    1. In the Azure portal, navigate to the Azure VMware Solution private cloud. Select Manage > Connectivity > ExpressRoute and then select + Request an authorization key.

      Screenshot showing how to request an ExpressRoute authorization key.

    2. Provide a name for it and select Create.

      It may take about 30 seconds to create the key. Once created, the new key appears in the list of authorization keys for the private cloud.

      Screenshot showing the ExpressRoute Global Reach authorization key.

    3. Copy the authorization key and ExpressRoute ID. You'll need them to complete the peering. The authorization key disappears after some time, so copy it as soon as it appears.

  2. Navigate to the virtual network gateway you plan to use and select Connections > + Add.

  3. On the Add connection page, provide values for the fields, and select OK.

    Field Value
    Name Enter a name for the connection.
    Connection type Select ExpressRoute.
    Redeem authorization Ensure this box is selected.
    Virtual network gateway The virtual network gateway you intend to use.
    Authorization key Paste the authorization key you copied earlier.
    Peer circuit URI Paste the ExpressRoute ID you copied earlier.

    Screenshot showing the Add connection page to connect ExpressRoute to the virtual network gateway.

The connection between your ExpressRoute circuit and your Virtual Network is created.

Screenshot showing a successful virtual network gateway connection.

Validate the connection

You should have connectivity between the Azure Virtual Network where the ExpressRoute terminates and the Azure VMware Solution private cloud.

  1. Use a virtual machine within the Azure Virtual Network where the Azure VMware Solution ExpressRoute terminates. For more information, see Connect to Azure Virtual Network with ExpressRoute.

    1. Log into the Azure portal.

    2. Navigate to a VM that is in the running state, and under Settings, select Networking and select the network interface resource.

      Screenshot showing virtual network interface settings.

    3. On the left, select Effective routes. You'll see a list of address prefixes that are contained within the /22 CIDR block you entered during the deployment phase.

  2. If you want to log into both vCenter Server and NSX-T Manager, open a web browser and log into the same virtual machine used for network route validation.

    You can identify the vCenter Server and NSX-T Manager console's IP addresses and credentials in the Azure portal. Select your private cloud and then Manage > Identity.

    Screenshot showing the private cloud vCenter and NSX Manager URLs and credentials.

Next steps

In the next tutorial, you'll connect Azure VMware Solution to your on-premises network through ExpressRoute.