Installing Pivotal Platform on Azure

Page last updated:

This topic describes how to install Pivotal Platform on Microsoft Azure.

It includes resource requirements, prerequisites, instructions for installing PAS on Azure, and additional resources.


You can install PAS on Azure, Azure Government Cloud, or Azure Germany. For more information about Azure regions, see Azure regions in the Microsoft Azure documentation.

You can install PAS on Azure with the Pivotal Application Service (PAS) runtime. There are resource requirements specific to both PAS and Azure. Ensure you meet the requirements for PAS and the requirements specific to Azure before installing PAS on Azure. For more information, see Requirements.


This section lists the following resource requirements for installing PAS on Azure:

PAS Resource Requirements

The following are general resource requirements for deploying and managing a PAS deployment with Pivotal Operations Manager and PAS:

  • PAS requires sufficient IP allocation. The following lists the minimum required IP allocations:
    • One static IP address for either HAProxy or one of your Gorouters
    • One static IP address for each job in the Ops Manager tile. See the Ops Manager Resource Config pane for each tile for a full list.
    • One static IP address for each job listed below:
      • Consul
      • NATS
      • File Storage
      • MySQL Proxy
      • MySQL Server
      • Backup Restore Node
      • HAProxy
      • Router
      • MySQL Monitor
      • Diego Brain
      • TCP Router
    • One IP for each VM instance created by the service.
    • An additional IP address for each compilation worker. Use the following formula to determine the total IPs required: IPs needed = static IPs + VM instances + compilation workers.
    • Pivotal recommends that you allocate at least 36 dynamic IP addresses when deploying Ops Manager and PAS. BOSH requires additional dynamic IP addresses during installation to compile and deploy VMs, install PAS, and connect to services.
  • Pivotal recommends using a network without DHCP for deploying PAS VMs.

    Note: If you have DHCP, refer to the Troubleshooting Guide to avoid issues with your installation.

Azure Resource Requirements

The following are the minimum resource requirements for deploying a PAS deployment with Ops Manager and PAS on Azure:

  • An OS disk of 120 GB for the Ops Manager VM.

    Note: Ops Manager v1.11 requires a Director VM with at least 8 GB memory.

  • A minimum of the following VM instance limits in your Azure account. The number of VMs required depends on the number of tiles and availability zones you plan to deploy. The following VM guidelines apply to the PAS and Small Footprint PAS runtimes:

    • PAS: A new Azure deployment requires the following VMs for PAS and Ops Manager:
      VM Type VM Count
      F1s 22
      F2s 22
      DS1 v2 2
      DS11 v2 10
      DS12 v2 24

      Note: If you are deploying a test or sandbox PAS that does not require high availability, then you can scale down the number of VM instances in your deployment. For more information, see Scaling PAS.

    • Small Footprint PAS: A new Azure deployment requires the following VMs for Small Footprint PAS and Ops Manager:
      VM Type VM Count Notes
      Small Footprint PAS DS11 v2 1
      DS12 v2 2
      F2s 0 Add 1 to count if using HAProxy
      F1s 5
      Ops Manager DS2 v2 1
      F4s 4

      Note: Some VM instance types are only supported in certain Azure regions. For more information, see Products available by region in the Azure documentation. To deploy PAS on an Azure region that does not support the above VM instance types, you must override the default VM sizes. For more information, see Overriding defaults with custom disk types in the Ops Manager API documentation. Changing the default VM sizes may increase the cost of your deployment.


Before installing PAS on Azure, you must do the following:

  • Install the Azure CLI v2.0. For instructions on how to install the Azure CLI for your operating system, see Preparing to Deploy Ops Manager on Azure Manually.

  • Configure sufficient IP allocation for PAS. For more information about IP allocation requirements, see PAS Resource Requirements.

  • Create an SSL certificate for your PAS domain.

    Note: To deploy PAS to a production environment, you must obtain a certificate from a certificate authority. Pivotal recommends using a self-signed certificate generated by Ops Manager for development and testing purposes only.

  • Assign administrative rights to a domain for PAS. You must be able to add wildcard records to this domain.

  • Create a wildcard DNS record that points to your router or load balancer. Alternatively, you can use a service such as For example, Then, create at least one wildcard TLS certificate that matches the DNS record you configured.

    Note: With a wildcard DNS record, every hostname in your domain resolves to the IP address of your router or load balancer. For example, if you create a DNS record * pointing to your router, every app deployed to the domain resolves to the IP address of your router.

  • Create one or more NTP servers, if the NTP servers are not already provided by your Azure project.

  • Install the most recent version of the Cloud Foundry Command Line Interface (cf CLI). See Cloud Foundry Command Line Interface in GitHub.

  • (Optional) Configure external storage. Pivotal recommends using external storage if possible. For more information about how file storage location affects platform performance and stability during upgrades, see Configure File Storage in Configuring PAS for Upgrades.

  • (Optional) Configure external databases. Pivotal recommends using external databases in production deployments for BOSH Director and PAS. An external database must be configured to use the UTC timezone.

  • (Optional) Configure external user stores. When you deploy PAS, you can select a SAML user store for Ops Manager or a SAML or LDAP user store for PAS, to integrate existing user accounts.

Install PAS on Azure

You can install PAS on Azure either manually or using Terraform.

To install PAS on Azure, do one of the following:

Install PAS on Azure Government Cloud

To install PAS on Azure Government Cloud, see Configuring BOSH Director on Azure Government Cloud.

Install PAS on Azure Germany

To install PAS in Azure Germany, see Configuring BOSH Director on Azure Germany.

Additional Resources

The following are additional resources related to installing PAS on GCP: