6.2
Table Of Contents
- Installation and Configuration
- Contents
- vRealize Automation Installation and Configuration
- Updated Information
- Installation Overview
- Preparing for Installation
- Minimal Deployment Checklist
- Minimal Deployment
- Distributed Deployment
- Distributed Deployment Checklist
- Distributed Installation Components
- Disabling Load Balancer Health Checks
- Certificate Trust Requirements in a Distributed Deployment
- Installation Worksheets
- Deploy Appliances for vRealize Automation
- Configuring Your Load Balancer
- Configuring Appliances for vRealize Automation
- Configure the Identity Appliance
- Configure the Primary vRealize Appliance
- Configuring Additional Instances of vRealize Appliance
- Enable Time Synchronization on the vRealize Appliance
- Configure Appliance Database on the Secondary vRealize Appliance
- Configure Appliance Database Replication on the Secondary Appliance
- Join a vRealize Appliance to a Cluster
- Disable Unused Services
- Validate the Distributed Deployment
- Test Appliance Database Failover
- Test Appliance Database Failback
- Validate Appliance Database Replication
- Install the IaaS Components in a Distributed Configuration
- Install IaaS Certificates
- Download the IaaS Installer
- Choosing an IaaS Database Scenario
- Install the Primary IaaS Website Component with Model Manager Data
- Install Additional IaaS Website Components
- Install the Primary Manager Service
- Install an Additional Manager Service Component
- Installing Distributed Execution Managers
- Configuring Windows Service to Access the IaaS Database
- Verify IaaS Services
- Installing Agents
- Set the PowerShell Execution Policy to RemoteSigned
- Choosing the Agent Installation Scenario
- Agent Installation Location and Requirements
- Installing and Configuring the Proxy Agent for vSphere
- Installing the Proxy Agent for Hyper-V or XenServer
- Installing the VDI Agent for XenDesktop
- Installing the EPI Agent for Citrix
- Installing the EPI Agent for Visual Basic Scripting
- Installing the WMI Agent for Remote WMI Requests
- Configuring Initial Access
- Configuring Additional Tenants
- Updating vRealize Automation Certificates
- Extracting Certificates and Private Keys
- Updating the Identity Appliance Certificate
- Updating the vRealize Appliance Certificate
- Updating the IaaS Certificate
- Replace the Identity Appliance Management Site Certificate
- Updating the vRealize Appliance Management Site Certificate
- Replace a Management Agent Certificate
- Troubleshooting
- Default Log Locations
- Rolling Back a Failed Installation
- Create a Support Bundle for vRealize Automation
- Installers Fail to Download
- Failed to Install Model Manager Data and Web Components
- Save Settings Warning Appears During IaaS Installation
- WAPI and Distributed Execution Managers Fail to Install
- IaaS Authentication Fails During IaaS Web and Model Management Installation
- Installation or Upgrade Fails with a Load Balancer Timeout Error
- Uninstalling a Proxy Agent Fails
- Validating Server Certificates for IaaS
- Server Times Are Not Synchronized
- RabbitMQ Configuration Fails in a High-Availability Environment
- Encryption.key File has Incorrect Permissions
- Log in to the vRealize Automation Console Fails
- Error Communicating to the Remote Server
- Blank Pages May Appear When Using Internet Explorer 9 or 10 on Windows 7
- Cannot Establish Trust Relationship for the SSL/TLS Secure Channel
- Cannot Log in to a Tenant or Tenant Identity Stores Disappear
- Adding an Endpoint Causes an Internal Error
- Error in Manager Service Communication
- Machine Requests Fail When Remote Transactions Are Disabled
- Credentials Error When Running the IaaS Installer
- Attempts to Log In as the IaaS Administrator with Incorrect UPN Format Credentials Fails with No Explanation
- Email Customization Behavior Has Changed
- Changes Made to /etc/hosts Files Might Be Overwritten
- Network Settings Were Not Successfully Applied
Table 4‑1. Minimal Deployment Checklist (Continued)
Task Details
Perform post-installation tasks such as configuring the
default tenant and entering the IaaS license
Chapter 7 Configuring Initial Access
If needed, configure additional tenants to represent
business units in an enterprise or companies that subscribe
to cloud services from a service provider.
Chapter 8 Configuring Additional Tenants
Deploy and Configure the Identity Appliance
Download and configure the Identity Appliance to provide Single Sign-On (SSO) capability for the
vRealize Automation environment.
You can use the Identity Appliance SSO provided with vRealize Automation or some versions of the SSO
provided with vSphere. For information about supported versions, see vRealize Automation Support
Matrix for this release available from https://www.vmware.com/support/pubs/vcac-pubs.html.
Note PSC version 6.0, the vSphere SSO component introduced in vSphere 6.0, allows you to specify a
tenant name other than vsphere.local. vRealize Automation requires vsphere.local as the name of the
default tenant because you cannot enter the name of the tenant on the SSO tab of the management
console when you configure vRealize Automation. If you have used another name, rename the tenant to
vsphere.local.
1 Deploy the Identity Appliance
The Identity Appliance is a preconfigured virtual appliance that provides single sign-on capabilities.
You download the Identity Appliance and deploy it into vCenter Server or ESX/ESXi inventory.
2 Enable Time Synchronization on the Identity Appliance
You must synchronize the clocks on the Identity Appliance server, the vRealize Automation server,
and Windows servers to ensure a successful installation.
3 Configure the Identity Appliance
The Identity Appliance provides Single-Sign On (SSO) capability for vRealize Automation users.
SSO is an authentication broker and security token exchange that interacts with the enterprise
identity store (Active Directory or OpenLDAP) to authenticate users. A system administrator
configures SSO settings to provide access to the vRealize Automation.
Deploy the Identity Appliance
The Identity Appliance is a preconfigured virtual appliance that provides single sign-on capabilities. You
download the Identity Appliance and deploy it into vCenter Server or ESX/ESXi inventory.
Exact steps for this procedure vary depending on whether you use the native or Web vSphere client.
Also, specific steps can vary depending on the your data center configuration. If you are using VSphere
Single-Sign (SSO), you can skip to Configure the Identity Appliance.
Installation and Configuration
VMware, Inc. 36