7.1
Table Of Contents
- Managing vRealize Automation
- Contents
- Managing vRealize Automation
- Updated Information
- Managing vRealize Automation
- Broadcast a Message on the Message Board Portlet
- Starting Up and Shutting Down vRealize Automation
- Updating vRealize Automation Certificates
- Extracting Certificates and Private Keys
- Replace Certificates in the vRealize Automation appliance
- Replace the Infrastructure as a Service Certificate
- Replace the IaaS Manager Service Certificate
- Updating the vRealize Automation Appliance Management Site Certificate
- Replace a Management Agent Certificate
- Change the Polling Method for Certificates
- Managing the vRealize Automation Postgres Appliance Database
- Backup and Recovery for vRealize Automation Installations
- Configuring the Customer Experience Improvement Program for vRealize Automation
- Adjusting System Settings
- Monitoring vRealize Automation
- Monitoring and Managing Resources
- Bulk Import, Update, or Migrate Virtual Machines
- Managing Machines
- Managing Virtual Machines
- Running Actions for Provisioned Resources
6 If required by your network or load balancer, copy the imported or newly created certificate to the
virtual appliance load balancer.
You might need to enable root SSH access in order to export the certificate.
a If not already logged in, log in to the vRealize Automation appliance Management Console as
root.
b Click the Admin tab.
c Click the Admin sub menu.
d Select the SSH service enabled check box.
Deselect the check box to disable SSH when finished.
e Select the Administrator SSH login check box.
Deselect the check box to disable SSH when finished.
f Click Save Settings.
7 Confirm that you can log in to vRealize Automation console.
a Open a browser and navigate to https://vcac-hostname.domain.name/vcac/.
If you are using a load balancer, the host name must be the fully qualified domain name of the
load balancer.
b If prompted, continue past the certificate warnings.
c Log in with administrator@vsphere.local and the password you specified when configuring
Directories Management.
The console opens to the Tenants page on the Administration tab. A single tenant named
vsphere.local appears in the list.
8 If you are using a load balancer, configure and enable any applicable health checks.
The certificate is updated.
Replace the Infrastructure as a Service Certiļ¬cate
The system administrator can replace an expired certificate or a self-signed certificate with one from a
certificate authority to ensure security in a distributed deployment environment.
You can use a Subject Alternative Name (SAN) certificate on multiple machines. Certificates used for the
IaaS components (Website and Manager Service) must be issued with SAN values including FQDNs of
all Windows hosts on which the corresponding component is installed and with the Load Balancer FQDN
for the same component.
There are three options for replacing a certificate:
n
Generate certificate - Use this option to have the system generate a self-signed certificate.
n
Import certificate - Use this option if you have a certificate that you want to use.
Managing vRealize Automation
VMware, Inc. 15