Quickly Purchasing a Desktop

Scenarios

You can quickly purchase a desktop based on your service requirements. This section describes how to quickly purchase a desktop on the management console.

Prerequisites

1. Sign up for a HUAWEI ID and complete real-name authentication.

   Before purchasing a desktop, sign up for a HUAWEI ID, enable Huawei Cloud services, and complete real-name authentication.

   If you have already enabled Huawei Cloud services and completed real-name authentication, skip this step.

2. Top up your account.

   Ensure that your account has sufficient balance. For details, see Topping Up an Account.

3. Plan networking resources, such as VPCs and subnets.

   When you are purchasing a desktop, the system creates a default VPC and subnet.

   If you do not want to use the default VPC and subnet, you can create a VPC and subnet in the desired region in advance. For more information, see VPC Network Planning Suggestions.

4. Create a security group and add rules to it.

   When you are purchasing a desktop, the system creates a default security group. For details about default security groups, see Default Security Groups and Rules.

   If the default security group and rules cannot meet your service requirements, you can modify the rules. For details, see Configuring Security Group Rules.

Procedure

1. Log in to the console.
2. On the Dashboard page, click Purchase Desktop. The Purchase Desktop page is displayed.
3. Click the Quick Purchase tab. The Quick Purchase page is displayed.
   Figure 1 Quick purchase
   

4. Determine whether to interconnect with an enterprise Windows AD domain.
   

   After you purchase a desktop for the first time, the choice you make (whether to interconnect with a Windows AD domain or not) cannot be changed. Exercise caution when performing this operation.

   • If you select No Interconnection with AD, go to step 5.

     After subscribing to the service, you can use the account authentication system of Huawei to authenticate users and manage user accounts on the Workspace console.

   • If you select Interconnection with AD, configure a Windows AD domain. For details, see Configuring an AD Domain. After the configuration information is saved, the Workspace service will be deployed.

     After the service is subscribed, the existing unified AD of the enterprise is used to authenticate users and manage user accounts.

5. Configure basic settings.
   • Select a billing mode.

     The billing mode is related to the payment method, billing cycle, and resource status changes of your desktop. Select a billing mode based on your service requirements.

     Table 1 Billing mode

     Option	Description	Scenarios and Constraints	Reference
     Yearly/Monthly	Yearly/Monthly is a prepaid billing mode in which you pay for desktops before using them. Yearly/monthly desktops are billed by the purchased duration specified in the order.	This cost-effective billing is ideal when the duration of desktop usage is predictable. It is recommended for long-term users. A yearly/monthly desktop cannot be deleted. If such a desktop is not required anymore, unsubscribe from it.	Yearly/Monthly
     Pay-per-use	Pay-per-use is a postpaid billing mode. You pay as you go and just pay for what you use. Pay-per-use desktops are billed by the second and settled by the hour.	This billing is ideal for scenarios with fluctuating compute resources. You can enable or delete resources at any time.	Pay-per-Use

   • Select a region.

     A region is the location of the physical data center of a desktop. Different regions indicate different physical distances between the physical data center and users, as well as different network latency. To reduce latency and improve access speed, select the region closest to your workloads.

     

     • Desktops in different regions cannot communicate with each other over the intranet and need to be managed by region. Create your desktops in the same region.
     • Once a desktop is purchased, its region cannot be changed. Exercise caution when selecting a region.
   • Select an AZ.

     An AZ is a physical region where resources use independent power supplies and networks. AZs are physically isolated but connected through an intranet. If an AZ becomes faulty, other AZs in the same region will not be affected.

6. Select desktop specifications.

   The quick purchase function allows you to purchase Flexus, enterprise, premium, and Kunpeng editions of desktops. You can quickly select specifications based on service requirements.

7. (Optional) Set disk encryption.

   You are advised to enable this function for enhanced data protection.

   1. Select the Select existing key option.
      1. Select the required key from the Key Name drop-down list.
      2. Click OK.
   2. Select the Enter key ID option.
      1. Enter a key ID in the text box.

         You can view the key ID in the key list.

      2. Click OK.

   A KMS key can be custom, default, or shared.

   • Default key: The key that is automatically created by EVS through KMS and named evs/default. The default key cannot be disabled or scheduled for deletion. For details about how to generate a default key, see Default Key.
   • Shared keys: You can use DEW to create grants that allow other accounts to share your keys. For details, see Creating a Grant for a Custom Key.
   • Custom keys: You can select an existing key or create a key. For details about how to create a custom key, see Creating a Custom Key.
   • Key sharing via resources: You can use Resource Access Manager (RAM) to share your keys with other accounts via resource sharing. For details, see Sharing Your Resources.
     

     • When you use KMS to encrypt disks, the system automatically grants the key to the Workspace service account for creating and using encrypted disks for Workspace.
     • You are advised not to remove the related authorization (grant_to_workspace_xxx). Otherwise, the desktop functions encrypted by the key will be affected. For example, if the authorization is removed, the desktop cannot be started properly.

8. Set the OS.
   • Image Type: Select an image type as required.
     

     • A public image is a widely used standard image provided by Workspace. It contains an OS and pre-installed public applications and is visible to all users. Public images are very stable and their OS and any included software have been officially authorized for use. You can also create an application environment and then deploy required software. Currently, Windows public images are marketplace images.
     • A private image is created based on an existing cloud desktop or external image file and is visible only to the user who created it. It contains an OS, preinstalled public applications, and a user's personal applications, and is available only to the user who created it. Using a private image to create a desktop saves more time. When you use a private image to create a desktop, the system automatically shares the private image with the Workspace service account for creating desktops. Therefore, you need the image sharing permission.
     • Workspace supports public images running Windows, private images converted from desktops generated using Windows images, and private images converted from ECSs created using Windows image files. If you need to use a private image to purchase a desktop, see Converting a Desktop to an Image and Creating a Windows Private Image to create a private image.
   • OS: Select an OS type from Supported OSs.

9. Configure public network access.
   EIP provides static public IP addresses and scalable bandwidths that enable your cloud resources to communicate with the Internet. After an EIP is bound to an ECS, the ECS can access the Internet.

   1. Select Public Network Access to purchase and bind an EIP to the desktop. If this option is not selected, no EIP is purchased.
      

      If the default EIP route is sold out, Public Network Access cannot be selected.

   2. (Optional) Set Billed By.

      This parameter is displayed only when Public Network Access is selected. Bandwidth can only be used by one EIP.

      • Bandwidth: dedicated bandwidth. This billing is applicable when the traffic is heavy or stable. You are charged based on the purchased bandwidth.
      • Traffic: dedicated bandwidth. This billing is applicable when the traffic is light or fluctuating greatly. You are charged based on the used traffic.
   3. (Optional) Set Bandwidth.

      This parameter is displayed only when Public Network Access is selected. Select the bandwidth size (in Mbit/s) based on service requirements.

10. Set parameters under Assign Desktop.

    Table 2 Desktop assignment

    User Authorization	Parameter Description	Operation
    Assignment Method	Manually	Select the Select User or Create option for User Authorization.
    	Not assigned NOTE: If you purchase a single desktop, the name you specify here will be used as that desktop's name. When you purchase multiple desktops, the desktop name you specify here will be used as a prefix to generate desktop names in ascending order. For example, if the specified desktop name is desktop and you create three desktops, the resulting names will be desktop01, desktop02, and desktop03. To assign a desktop to a user, locate the desired desktop in the desktop list and choose More > Assign Desktop.	1. Select Not assigned. 2. Enter the name of the desktop that is not assigned to a user based on site requirements.
    Desktop Type	If Assignment Method is set to Manually, you can only select Single-user desktop. If Assignment Method is set to Not assigned, you can select Single-user desktop or Multi-user desktop. Single-user desktop: A desktop can be assigned to only one user. Multi-user desktop: A desktop can be assigned to multiple users, but only one user can be online at a time. After purchasing a desktop, you can locate the desktop in the desktop list and click Assign Desktop in the Operation column to add multiple users.	-
    Desktop Naming Rule	Select a naming rule from Desktop Naming Rule, or select No rules used to use the default naming rule. Do not use any naming rule. Select a naming rule. NOTE: For details about how to create a naming rule, see Desktop Naming Rules.	-
    Desktop Name	Do not use the name of a requested desktop. If you do not customize the desktop name, the system automatically generates one. When you purchase multiple desktops, the desktop name you specify here will be used as a prefix to generate desktop names in ascending order. For example, if the specified desktop name is desktop and you create three desktops, the resulting names will be desktop01, desktop02, and desktop03. Rules for naming a desktop: Only letters, digits, and hyphens (-) are allowed. Must start with a letter or digit and cannot end with a hyphen (-). 1 to 15 characters are allowed.	desktop01
    Desktop User	Select User: When selecting users, you can search for activated users by filter criteria.	You can search for a user based on user type, specified user or user group, description, or enterprise project. Select the target username and click OK.
    	Click Create. On the Create User page, select By users for User Activation and Manually for User Import. The username is used for user authentication during desktop login. Naming rules: A name can contain 1 to 32 characters. A digit-only name is allowed. Only letters, digits, and three types of special characters (-_.) are allowed. The value must start with a letter or digit and cannot end with a period (.) or underscore (_). This field cannot be left blank. The email address is used to receive desktop provisioning emails and related notifications. Rules for verifying an email address: Enter a valid email address through system verification. The value can contain a maximum of 64 characters. This field cannot be left blank. The mobile number is used to receive SMS messages about desktop provisioning and related notifications. Rules for verifying a mobile number: [+][Country/Region code][Mobile number] For a mobile number in the Chinese mainland, you can omit [+][Country/Region code] and directly enter the mobile number. A mobile number can contain spaces, slashes (/), and hyphens (-).	Configure the user information, description, and account expiration settings as prompted. Select the required enterprise project. Click Add User. NOTE: Enter an email address or a mobile number, or both. Batch set permission groups. Specify the desktop name. If you leave it blank, the system automatically generates a desktop name. Click Add to add a desktop. Add desktops one by one. The number of added desktops cannot exceed the quota.
    	Click Create. On the Create User page, select By administrators for User Activation and Manually for User Import. For user activation by administrators, enter the username and password. Keep the password secure. The username is used for user authentication during desktop login. Naming rules: A name can contain 1 to 32 characters. A digit-only name is allowed. Only letters, digits, and three types of special characters (-_.) are allowed. The value must start with a letter or digit and cannot end with a period (.) or underscore (_). This field cannot be left blank. The initial password is used to authenticate the first login to a desktop. Keep the initial password secure. The password contains 8 to 32 characters. The value can contain uppercase letters, lowercase letters, digits, and special characters !@$%^-_=+[{}]:,./? The password cannot be the username or the reverse username.
    	Click Create. On the Create User page, select By administrators for User Activation and Batch for User Import. Upload the users recorded in the table to create users in batches.	Click Download Template on the right of Import User Info to download a user list template. Enter the No., username, password (only for By administrators), domain (AD domain where the user is located. If this parameter is not set, the primary domain is used by default), email, mobile number and area code, expiration time, enterprise ID, and description in the table. Click Upload to upload the template. Click OK. NOTE: The size of the file to be uploaded cannot exceed 1 MB. A maximum of 200 records can be uploaded at a time. Only .xlsx and .xls files are supported.
    	Click Create. On the Create User page, select By users for User Activation and Batch for User Import. Upload the users recorded in the table to create users in batches.
    	Permission Group is used to distinguish users' permissions on computers. Windows desktop permissions: Administrator group: Users in this group have system administrator permissions, that is, full permissions on a computer. They can perform all management tasks, including managing all users, on the computer. Common user group: Users in this group have basic operation permissions on a computer, for example, running applications. They are not allowed to modify the OS settings or data of other users, or shut down a server computer. NOTE: You can select users in batches and click Change Permission Group to set user permissions in batches.	-

11. Set More Configurations.

    Other configurations use the system defaults. If you need to customize the configurations, see Purchasing a Custom Desktop.

    Table 3 More configurations

    Configuration Item	Example Value	Default Setting	Reference
    VPC	vpc-default	By default, the VPC and subnet of the latest created desktop are used. If no desktops were created in your account, the latest created VPC and the latest available subnet in the VPC are used by default. If no VPCs are available in your account, the system creates a VPC and subnet by default. If a VPC is available but no subnets are available, go to the description about custom desktop purchase. The primary NIC is automatically assigned IPv4 and IPv6 addresses by default. NOTE: If IPv6 is not enabled for the selected subnet, no IPv6 address is assigned.	VPC Network Planning Suggestions
    Subnet	subnet-default
    Security Group	WorkspaceUserSecurity	A security group consists of inbound and outbound rules to control the traffic that is allowed to flow into or out of desktops in the security group. NOTE: Check whether the security group in use includes the inbound and outbound rules required by desktop access. If not, desktop access and use will be affected. For details, see How Do I Configure Security Group Rules When Using a Custom Security Group?	Security Group
    Enterprise Project	default	This parameter is only available for enterprise users. By default, the enterprise project that the latest created desktop belongs to is used. If no desktops were created in your account or the enterprise project that the latest created desktop belongs to is unavailable, the latest created enterprise project is used by default. If no enterprise projects are available in your account, the system creates an enterprise project by default.	Accessing the Enterprise Center
    Tag	tag1=1	You are advised to use predefined tags from Tag Management Service (TMS) to add the same tag to different cloud resources.	Creating Predefined Tags

12. Set Purchase.
    1. (Optional) Select the required duration for desktops.

       This parameter is displayed only when Billing Mode is set to Yearly/Monthly. Set the required duration of your desktop in the range of 1 month to 3 years.

    2. (Optional) Set Auto-renewal.

       This parameter is displayed only when Billing Mode is set to Yearly/Monthly.

       You can select Auto-renewal to automatically renew a yearly/monthly subscription upon expiry.

       • Monthly: You can renew the subscription for one month each time. The number of renewal times is not limited.
       • Yearly: You can renew the subscription for one year each time. The number of renewal times is not limited.

       For more information about auto-renewal, see Auto-Renewal Rules.

    3. Set Quantity.
       • If the desktop assignment method is set to Manually, the number of purchased desktops must be the same as the number of selected users.
       • If the desktop assignment method is set to Not assigned, you can set the number of purchased desktops as required.

       You can set how many desktops to purchase in a batch. Desktops created in the same batch have the same configurations.

       The system displays the remaining number of desktops you are allowed to purchase. To ensure effective resource usage, an upper limit is set on the number of desktops allowed. If the number of desktops you need exceeds the upper limit, increase the quota.

13. Confirm the configuration and purchase the desktop.
    1. In the Configuration Summary panel on the right, review the desktop configuration details.
    2. Select I have read and agree to Image Disclaimer., and click Buy Now.
    3. Select a payment method and pay for your order. The purchase is complete.
    4. Click Back to Desktops. You can view the purchased desktops in the desktop list on the Desktops page.
       

       After the desktop is created, it will be started by default.

Follow-up Operations

• The login details for the newly created desktop will be emailed to the end user. The end user can activate the account, download the client, and configure and use the desktop as instructed. Administrators can restrict desktop network interaction as required. For details, see Configuring Workspace to Access the Public Network and Configuring Workspace to Access the Intranet.
• If a Windows AD domain has been connected and an OU has been created on the Windows AD server, create the OU on the console by referring to OU Management.