5.5.1

8 Select the method you want to use for managing user access on the vCenter Server system.
Option Description
Share a unique session
Creates only one connection to vCenter Server.
In the User name and Password text boxes, type the credentials for
Orchestrator to use to establish the connection to the vCenter Server host.
The user that you select must be a valid user with privileges to manage
vCenter Server extensions and a set of custom defined privileges.
Orchestrator uses these credentials to monitor the vCenter Web service,
typically to operate Orchestrator system workflows.
Session per user
Creates a new session to vCenter Server. This might rapidly use CPU,
memory, and bandwidth.
Select this option only if your vCenter Server is in an Active Directory
domain or if vCenter Server Single Sign-On is enabled.
The user that you select must be a valid user with privileges to manage
vCenter Server extensions.
The user account that you select is also used by the policy engine to collect statistical and other data. If
the user that you select does not have enough privileges, the policy engine cannot access the necessary
parts of the vCenter Server inventory and thus cannot collect the necessary data.
9 Click Apply changes.
The URL to the newly configured vCenter Server instance is added to the list of defined hosts.
10 Repeat Step 2 through Step 9 for each vCenter Server instance.
What to do next
Import the SSL certificates for each vCenter Server instance that you defined.
Import a vCenter Server SSL Certificate and License
The Orchestrator Appliance is distributed with a built-in evaluation license that expires 90 days after you
power on the appliance for the first time. To continue using the Orchestrator Appliance after the trial period,
you must import a vCenter Server license.
The Orchestrator configuration interface uses a secure connection to communicate with vCenter Server. You
can import the required SSL certificate from a URL or a file.
You cannot change the license key and server certificate if you set up Orchestrator to use the embedded
database. To change the license key and the server certificate when you use embedded database, you must
run the configuration workflows by using either the Orchestrator client or the REST API. For more
information about running the configuration workflows by using the Orchestrator client, see Using the
VMware vCenter Orchestrator Plug-Ins. For detailed instructions about running the configuration workflows
by using the REST API, see Chapter 8, “Configuring Orchestrator by Using the Configuration Plug-In and
the REST API,” on page 73.
Procedure
1 Log in to the Orchestrator configuration interface as vmware.
2 Click Network.
3 In the right pane, click the SSL Certificate tab.
Chapter 7 Configuring vCenter Orchestrator in the Orchestrator Appliance
VMware, Inc. 71