7.3
Table Of Contents
- Managing vRealize Automation
- Contents
- Managing vRealize Automation
- Updated Information
- Maintaining and Customizing vRealize Automation Components and Options
- Broadcast a Message on the Message Board Portlet
- Starting Up and Shutting Down vRealize Automation
- Updating vRealize Automation Certificates
- Extracting Certificates and Private Keys
- Replace Certificates in the vRealize Automation Appliance
- Replace the Infrastructure as a Service Certificate
- Replace the IaaS Manager Service Certificate
- Update Embedded vRealize Orchestrator to Trust vRealize Automation Certificates
- Update External vRealize Orchestrator to Trust vRealize Automation Certificates
- Updating the vRealize Automation Appliance Management Site Certificate
- Replace a Management Agent Certificate
- Change the Polling Method for Certificates
- Managing the vRealize Automation Postgres Appliance Database
- Backup and Recovery for vRealize Automation Installations
- The Customer Experience Improvement Program
- Adjusting System Settings
- Monitoring vRealize Automation
- Monitoring vRealize Automation Health
- Monitoring and Managing Resources
- Monitoring Containers
- Bulk Import, Update, or Migrate Virtual Machines
7 Confirm that you can log in to vRealize Automation console.
a Open a browser and navigate to https://vcac-hostname.domain.name/vcac/.
If you are using a load balancer, the host name must be the fully qualified domain name of the
load balancer.
b If prompted, continue past the certificate warnings.
c Log in with administrator@vsphere.local and the password you specified when configuring
Directories Management.
The console opens to the Tenants page on the Administration tab. A single tenant named
vsphere.local appears in the list.
8 If you are using a load balancer, configure and enable any applicable health checks.
The certificate is updated.
Replace the Infrastructure as a Service Certiļ¬cate
The system administrator can replace an expired certificate or a self-signed certificate with one from a
certificate authority to ensure security in a distributed deployment environment.
You can use a Subject Alternative Name (SAN) certificate on multiple machines. Certificates used for the
IaaS components (Website and Manager Service) must be issued with SAN values including FQDNs of
all Windows hosts on which the corresponding component is installed and with the Load Balancer FQDN
for the same component.
There are three options for replacing a certificate:
n
Generate certificate - Use this option to have the system generate a self-signed certificate.
n
Import certificate - Use this option if you have a certificate that you want to use.
n
Provide certificate thumbprint - If you accept a certificate that is signed by a CA but that certificate is
not trusted by your system, you must determine whether to accept the certificate thumbprint. The
thumbprint is used to quickly determine if a presented certificate is the same as another certificate,
such as the certificate that was accepted previously.
Also, you can use Keep Existing to keep your existing certificate.
Procedure
1 Open a Web browser to the vRealize Automation appliance management interface URL.
2 Log in with user name root and the password you specified when deploying the vRealize Automation
appliance.
3 Select vRA Settings > Certificates.
4 Click IaaS Web on the Component Type menu.
5 Go to the IaaS Web Certificate pane.
Managing vRealize Automation
VMware, Inc. 16