Open topic with navigation

# Preparing a Private DNS Zone

Required permissions: create private DNS zone. You will also need a link to the virtual network.

To prepare the private DNS zone:

1. Set your main resource group name to an environment variable, for example:
   `RESOURCE_GROUP=srg-demo`
2. Create the private-dns zone (for example, `arcsight.private.com`) in your resource group by running the command:
   `az network private-dns zone create -g $RESOURCE_GROUP -n arcsight.private.com`

You can use another zone name in place of `arcsight.private.com`, but you must use the same DNS suffix for the `--external-access-host` argument during OMT installation.

1. Link the private-dns zone with your virtual network by running the command:
   `az network private-dns link vnet create \
   -g $RESOURCE_GROUP \
   -n DNSLink \
   -z arcsight.private.com \
   -v <your virtual network, such as demo-vnet> \
   -e false`

Next Step: Assigning an IP Address to Private DNS