6.2

n
To provision a Generation-2 machine on an SCVMM 2012 R2 resource, you must add the following
properties in the blueprint.
Scvmm.Generation2 = true
Hyperv.Network.Type = synthetic
Generation-2 blueprints should have an existing data-collected virtualHardDisk (vHDX) in the
blueprint build information page. Having it blank causes Generation-2 provisioning to fail.
For more information, see Configure the DEM to Connect to SCVMM at a Different Installation Path.
Additional information about preparing for machine provisioning is available in IaaS Configuration for
Virtual Platforms.
Port Requirements
vRealize Automation uses designated ports for communication and data access.
Although vRealize Automation uses only port 443 for communication, there might be other ports open on
the system. Because open, unsecure ports can be sources of security vulnerabilities, review all open
ports on your system and ensure that only the ports that are required by your business applications are
open.
Identity Appliance
The following ports are used by the Identity Appliance.
Table 2‑5. Incoming Ports for the Identity Appliance
Port Protocol Comments
22 TCP Optional. SSH
5480 TCP Access to virtual appliance Web management interface
7444 TCP SSO service over HTTPS
Table 2‑6. Outgoing Ports for the Identity Appliance
Port Protocol Comments
53 TCP, UDP DNS
67, 68, 546, 547 TCP, UDP DHCP
80 TCP Optional. For fetching software updates. Updates can be downloaded separately and
applied.
123 TCP, UDP Optional. For connecting directly to NTP instead of using host time.
389, 636 TCP, UDP OpenLDAP and Active Directory
vRealize Appliance
The following ports are used by the vRealize Appliance.
Installation and Configuration
VMware, Inc. 27