Get started with user-based subscriptions in License Manager
The following steps detail how you can get started with using user-based subscriptions. These steps assume you have already implemented the required prerequisites. For more information, see the Prerequisites to create user-based subscriptions in License Manager.
If you have already configured your AWS Managed Microsoft AD directory for user-based subscriptions and would also like to use Microsoft Office, see Modify VPC settings for user-based subscriptions in License Manager.
Steps
- Step 1: Configure your AWS Directory Service for Microsoft Active Directory and virtual private cloud (VPC)
- Step 2: Subscribe to a product
- Step 3: Launch an instance to provide user-based subscriptions
- Step 4: Associate users to a user-based subscription instance
- Step 5: Connect to a user-based subscription instance
Step 1: Configure your AWS Directory Service for Microsoft Active Directory and virtual private cloud (VPC)
License Manager requires AWS Managed Microsoft AD in order to associate the users with user-based
subscriptions. You must select all products you require for the user-based subscriptions
while configuring your directory, as users can only subscribe to configured products.
When you register your AWS Managed Microsoft AD directory, License Manager will create two Elastic Network
Interfaces (ENIs) in order for the service to communicate with your directory with a
description similar to AWS created network interface for
LicenseManager <directory_id>
.
Important
You must allow License Manager to create the required service-linked role before you can proceed. For more information, see the Prerequisites to create user-based subscriptions in License Manager.
To use Microsoft Office with user-based subscriptions, you must grant License Manager permission to update your VPC configuration. When you configure your VPC, License Manager creates VPC endpoints on your behalf. These endpoints are required for your resources to connect to activation servers and remain in compliance.
You must configure DNS forwarding for any additional VPCs to the AWS Managed Microsoft AD you register for user-based subscriptions. If you have user-based subscriptions in multiple AWS Regions, each Region must have its own AWS Managed Microsoft AD with DNS forwarding configured as follows.
You can use one of the following methods to configure your environment for user-based subscriptions.
Step 2: Subscribe to a product
To subscribe to configured products in the AWS Marketplace
After you configure your directory with the required products, you may also need to subscribe to the required products. Products with a Marketplace Subscription Status of Inactive require you to subscribe before you can associate users to an instance and use them.
Your account must have a subscription to Windows Server Remote Desktop Services Subscriber Access License (RDS SAL). Microsoft Remote Desktop Services (RDS), known as Terminal Services in Windows Server 2008 and earlier, is one of the components of Microsoft Windows that allow a user to take control of a remote computer or virtual machine over a network connection. RDS allow users to remotely access graphical desktops and Windows applications.
All users associated with instances providing user-based subscription products must have a single active subscription to this license in addition to any other products they would like to use. Your user will be subscribed to RDS SAL on their behalf when they subscribe to a user-based subscription product.
Note
RDS SAL licensing cannot be used separately from supported user-based subscription products. For more information, see Considerations for using user-based subscriptions in License Manager.
You can subscribe to your products directly on the AWS Marketplace using the following links:
To discover and subscribe to products from the License Manager console
You can also discover the required products to subscribe to from the License Manager console.
Open the License Manager console at https://console.aws.amazon.com/license-manager/
. -
In the left navigation pane, under User-based subscriptions, choose Products.
-
Choose a product’s name to display subscription details.
-
Choose View in AWS Marketplace.
-
Review the subscription details and choose Continue to Subscribe.
-
Review the terms and choose Accept Terms if you want to proceed.
If you accept the terms, the product subscription will need to be processed. The subscription will have an in progress message until it completes. You can repeat these steps for any other configured products you require. Once all of the required products have an active subscription, you can proceed with subscribing users to the products.
Note
Your estimated bill for charges on the number of users and related costs will take 48 hours to appear for billing periods that haven't closed (marked as Pending billing status) in AWS Billing. For more information, see Viewing your monthly charges in the AWS Billing User Guide.
Step 3: Launch an instance to provide user-based subscriptions
After you have subscribed to a product, you must launch instances for your users to connect to from the AWS Marketplace AMI that includes the product. Once you launch an instance, AWS Systems Manager will attempt to join the instance to the domain and perform additional configuration and hardening on the resource. The configurations to make the instance ready to use can take around 20 minutes to complete. You can confirm the resource is ready to use from the User association page of the License Manager console by checking for a Health status of Active for the instance.
Important
The instances you launch must meet the required prerequisites to be in compliance. Resources that are unable to complete the initial configuration will be terminated. For more information, see the Prerequisites to create user-based subscriptions in License Manager and Troubleshoot user-based subscriptions in License Manager.
To launch an instance with user-based subscriptions
-
Access the Amazon EC2 console at https://console.aws.amazon.com/ec2/
. -
Under Images, choose AMI Catalog.
-
Choose AWS Marketplace AMIs.
-
Enter the product name into the search box and press enter. For example, you might search for
Visual Studio
. -
Under Publisher, select Amazon Web Services.
-
Choose Select for the product that you want to launch an instance to provide user-based subscriptions.
-
Choose Continue to proceed.
-
Choose Launch Instance with AMI.
-
Complete the wizard while ensuring that you:
-
Choose a Nitro based instance type that is not Graviton based.
-
Choose a VPC and subnet from which your instance can connect to your AWS Managed Microsoft AD directory.
-
Choose a security group that permits connectivity from your instance to your AWS Managed Microsoft AD directory.
-
Expand Advanced details and choose an IAM role that allows Systems Manager functionality for your instance.
-
-
Choose Launch instance.
When you have running instances from the AWS Marketplace AMI, you must subscribe users to the product and associate them with instances, which provide the product so that they can use it.
Step 4: Associate users to a user-based subscription instance
Once you have subscribed to the required product’s AWS Marketplace AMI, you can subscribe users to a product and associate them to an instance providing the product. You can subscribe users to products and associate them with an instance in a single step, or separately. When you subscribe a user, the directory is checked to ensure that the user identity is present. One subscription will be created for each user you subscribe to the product.
Note
Each user must have a subscription to both Windows Server Remote Desktop Services Subscriber Access License (RDS SAL) and the product they will use. When your account has subscribed to RDS SAL as detailed in Step 2: Subscribe to a product, your user will be subscribed to RDS SAL on their behalf when they subscribe to a user-based subscription product.
The Products page in License Manager will display active subscriptions by listing their Marketplace subscription status as Active. In the product’s details page, License Manager will display active user subscriptions with a Status of Subscribed.
Important
If your directory is not configured with the product, a notification bar will appear at the top of the console advising you to adjust the directory’s settings. On the notification bar, choose Open settings to access the Settings page in License Manager and edit your directory.
Each user must have a subscription to both RDS SAL and the product they will use. Subscribing users to a product in which the Marketplace subscription status is Inactive will fail.
You can subscribe users to a product and associate them to an instance with the following process.
To subscribe and associate users to an instance
Open the License Manager console at https://console.aws.amazon.com/license-manager/
. -
In the left navigation pane, under User-based subscriptions, choose User association.
-
Select the instance that you want to associate users with, then choose Subscribe & Associate users.
-
Specify up to five user names that exist in your directory, including the Domain name if they exist in a trusted domain, and choose Subscribe & Associate.
On the User association page, the users you selected should be displayed under Users with an Association Status of Associated. Also, on the Products page, you can review the product's details page by choosing the Product name. Subscribed users will be displayed under Users with a Status of Subscribed.
You can subscribe users to a product using one of the following methods.
For more information about the available software products, see Supported software products for user-based subscriptions in License Manager.
Users that have a subscription will be displayed under Users with a Status of Subscribed.
You can associate users to an instance using one of the following methods.
Important
Before associating a product to an instance you must first subscribe users to the products.
For more information about the available software products, see Supported software products for user-based subscriptions in License Manager.
On the User association page, the users you selected should be displayed under Users with an Association Status of Associated.
Step 5: Connect to a user-based subscription instance
Once you have associated users with the instance providing the product, they can connect to the instance if the Health status of the instance is Active. The users will need to connect with their user credentials for the domain to use the product with their associated identity.
Important
The process of creating the EC2 instance and preparing it for users can take around 20 minutes. The Association status of the instance must be Active in order to access it and use the product.
To connect to instances with a user-based subscription
Open the License Manager console at https://console.aws.amazon.com/license-manager/
. -
In the left navigation pane, under User-based subscriptions, choose User association.
-
On the User association page, confirm the instance’s Health status is Active.
-
Make note of the instance ID as you will need it to gather connection details.
-
Follow the steps listed in Connect to your Windows instance using RDP while ensuring to specify the fully qualified user name of the associated user.