---
title: "Create Workspot Landing Zone - Azure"
slug: "create-workspot-landing-zone-azure"
updated: 2024-07-15T07:29:36Z
published: 2024-07-15T07:29:36Z
canonical: "docs.workspot.com/create-workspot-landing-zone-azure"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.workspot.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create Workspot Landing Zone - Azure

### Prerequisites

- An empty Azure subscription dedicated to Workspot IaaS
- An Network CIDR block for Virtual Network configuration
- A supported Identity Provider (such as Microsoft Active Directory, Microsoft Azure Active Directory, OKTA, etc)
- Connectivity to Microsoft Active Directory or Domain Controller on the VNet
- A supported operating system for VDI desktops or RD Pools servers
- Optional network connectivity to on-premises such as Site-to-Site VPN

### Azure Subscription

- Create an Azure subscription that is dedicated to Workspot.
- Leave everything in the subscription at the defaults.
- The subscription will require Public IP's for the Workspot managed gateways.

### Networking

- Create an Azure Virtual Network (VNet) i.e. ws-azr-vnet with 3 subnets
  - Gateway Subnet - subnet used to provision or create Workspot managed gateways on, i.e. ws-azr-subnet-dmz
  - Management Subnet - subnet used to create Workspot Enterprise Connector on, i.e. ws-azr-subnet-mgmt
  - Cloud PC Subnet - subnet used to provision Workspot VDI desktops on, i.e ws-azr-subnet-vdi
- CIDR block example: 10.0.0.0/20
- The CIDR block CANNOT overlap with any other CIDR block within the private network when connecting this Azure subscription to the private network.
- Provide a large enough block of IP addresses to allow for expansion over time.