Administration

Commands for Managing Connectors
You create one connector for each domain. The connector denes the parameters that are used for True SSO.
For readability, the options shown in the following table do not represent the complete command you would
enter. Only the options specic to the particular task are included. For example, one row shows the
--list --connector options, but the vdmUtil command you would actually enter also contains options for
authentication and for specifying that you are conguring True SSO:
vdmUtil --authAs admin-role-user --authDomain netbios-name --authPassword admin-user-password --
truesso --list --connector
For more information about the authentication options, see “Command-line Reference for Conguring True
SSO,” on page 88.
Table 5‑3. vdmutil truesso Command Options for Managing Connectors
Options Description
--create --connector --domain domain-fqdn
--template template-name
--primaryEnrollmentServer enroll-server1-
fqdn [--secondaryEnrollmentServer enroll-
server2-fqdn] --certificateServer CA-
common-name --mode {enabled |disabled}
Creates a connector for the specied domain and congures the
connector to use the following seings:
n
template-name is the name of the certicate template to use.
n
enroll-server1-fqdn is the FQDN of the primary enrollment server to
use.
n
enroll-server2-fqdn is the FQDN of the secondary enrollment server
to use. This seing is optional.
n
CA-common-name is the common name of the certicate authority
to use. This can be a comma-separated list of CAs.
To determine which certicate template and certicate authority are
available for a particular enrollment server, you can run the vdmutil
command with the
--truesso --environment --list --enrollmentServer enroll-
server-fqdn --domain domain-fqdn options.
--list --connector
Lists the FQDNs of the domains that already have a connector created.
--list --connector --verbose
Lists all the domains that have connectors, and for each connector,
provides the following information:
n
Primary enrollment server
n
Secondary enrollment server, if there is one
n
Name of the certicate template
n
Whether the connector is enabled or disabled
n
Common name of the certicate authority server or servers, if
there are more than one
--edit --connector domain-fqdn [--template
template-name] [--mode {enabled |disabled]
[--primaryEnrollmentServer enroll-server1-
fqdn] [--secondaryEnrollmentServer enroll-
server2-fqdn] [--certificateServer CA-
common-name]
For the connector created for the domain specied by domain-fqdn,
allows you to change any of the following seings:
n
template-name is the name of the certicate template to use.
n
The mode can be either enabled or disabled.
n
enroll-server1-fqdn is the FQDN of the primary enrollment server to
use.
n
enroll-server2-fqdn is the FQDN of the secondary enrollment server
to use. This seing is optional.
n
CA-common-name is the common name of the certicate authority
to use. This can be a comma-separated list of CAs.
--delete --connector domain-fqdn
Deletes the connector that has been created for the domain specied
by domain-fqdn.
View Administration
90 VMware, Inc.