Apply for the Workspace service. After you apply for Workspace, a secure and exclusive Workspace infrastructure will be deployed and a dedicated elastic IP address used for accessing Workspace will be allocated to you. The AD is a necessary component used for managing users and desktops. You can create an ECS for deploying the AD on the cloud or use an existing AD. After you apply for the Workspace service, you can create Workspace desktops.
When applying for Workspace, if the existing enterprise AD domain is used, refer to How Do I Interconnect Workspace with Microsoft AD? to enable related ports on the AD server and prepare the following data:
The Apply for Workspace page is displayed.
An availability zone (AZ) is a physical region where resources use independent power supplies and networks. AZs are physically isolated but interconnected through an internal network, improving HA of applications.
For details about how to create a VPC, see the Virtual Private Cloud User Guide.
You are advised to use 16-bit subnet gateways during VPC creation. After you apply for the Workspace service, do not modify the VPC configuration.
Workspace reserves the 198.19.0.0/16 network segment for the NIC on the management plane. Use other network segments when creating subnets in VPCs.
Select the VPC and Service Subnet created in Step 4 and enter Management Subnet.
Check whether your enterprise has an AD domain.
Set the Domain Name, Domain Administrator Account, Domain Administrator Password, and Confirm Password parameters of the new AD domain.
After an AD domain is created, go to Step 10.
To ensure system security, you need to change the password periodically. You are advised to change the password every three months.
Set the Domain Name, Domain Administrator Account, Domain Administrator Password, Primary Domain Controller IP Address, Standby Domain Controller IP Address, Active DNS IP Address, and Standby DNS IP Address parameters of the existing domain.
Workspace supports only AD servers running Windows Server 2008 or later. When you use an existing AD domain, ensure that the related ports of the firewall are enabled. For details, see How Do I Interconnect Workspace with Microsoft AD?.
For details about the network quality requirements, see What Are the Network Requirements for Accessing the Desktop?.
The DirectConnect access mode provides the load balancing capability. Therefore, enterprises do not need to deploy third-party load balancers before access addresses.