Administration

For more information about the authentication options, see “Command-line Reference for Conguring True
SSO,” on page 80.
Table 5‑3. vdmutil truesso Command Options for Managing Connectors
Options Description
--create --connector --domain domain-fqdn
--template template-name
--primaryEnrollmentServer enroll-server1-
fqdn [--secondaryEnrollmentServer enroll-
server2-fqdn] --certificateServer CA-
common-name --mode {enabled |disabled}
Creates a connector for the specied domain and congures the
connector to use the following seings:
n
template-name is the name of the certicate template to use.
n
enroll-server1-fqdn is the FQDN of the primary enrollment server to
use.
n
enroll-server2-fqdn is the FQDN of the secondary enrollment server
to use. This seing is optional.
n
CA-common-name is the common name of the certicate authority
to use. This can be a comma-separated list of CAs.
To determine which certicate template and certicate authority are
available for a particular enrollment server, you can run the vdmutil
command with the
--truesso --environment --list --enrollmentServer enroll-
server-fqdn --domain domain-fqdn options.
--list --connector
Lists the FQDNs of the domains that already have a connector created.
--list --connector --verbose
Lists all the domains that have connectors, and for each connector,
provides the following information:
n
Primary enrollment server
n
Secondary enrollment server, if there is one
n
Name of the certicate template
n
Whether the connector is enabled or disabled
n
Common name of the certicate authority server or servers, if
there are more than one
--edit --connector domain-fqdn [--template
template-name] [--mode {enabled |disabled]
[--primaryEnrollmentServer enroll-server1-
fqdn] [--secondaryEnrollmentServer enroll-
server2-fqdn] [--certificateServer CA-
common-name]
For the connector created for the domain specied by domain-fqdn,
allows you to change any of the following seings:
n
template-name is the name of the certicate template to use.
n
The mode can be either enabled or disabled.
n
enroll-server1-fqdn is the FQDN of the primary enrollment server to
use.
n
enroll-server2-fqdn is the FQDN of the secondary enrollment server
to use. This seing is optional.
n
CA-common-name is the common name of the certicate authority
to use. This can be a comma-separated list of CAs.
--delete --connector domain-fqdn
Deletes the connector that has been created for the domain specied
by domain-fqdn.
Commands for Managing Authenticators
Authenticators are created when you congure SAML authentication between VMware Identity Manager
and a connection server. The only management task is to enable or disable True SSO for the authenticator.
For readability, the options shown in the following table do not represent the complete command you would
enter. Only the options specic to the particular task are included. For example, one row shows the
--list --authenticator options, but the vdmUtil command you would actually enter also contains
options for authentication and for specifying that you are conguring True SSO:
vdmUtil --authAs admin-role-user --authDomain netbios-name --authPassword admin-user-password --
truesso --list --authenticator
For more information about the authentication options, see “Command-line Reference for Conguring True
SSO,” on page 80.
View Administration
82 VMware, Inc.