7.0

Table Of Contents
n
The user must have dbo privileges for the IaaS database. If you use the installer to create the
database, ensure that the service user login is added to SQL Server prior to running the installer. The
installer grants the service user dbo privileges after creating the database.
n
The installer is run under the account that runs the Management Agent on the primary Web server. If
you want to use the installer to create an MS SQL database during installation, you must have the
sysadmin role enabled under MS SQL. This is not a requirement if you choose to use a pre-created
empty database.
n
The domain user account that you plan to use as the IIS application pool identity for the Model
Manager Web Service is configured with Log on as batch job privileges.
Model Manager Server Specifications
Specify the Model Manager server name by using a fully qualified domain name (FQDN). Do not use an
IP address to specify the server.
Security
vRealize Automation uses SSL to ensure secure communication among components. Passphrases are
used for secure database storage.
For more information see Certificate Trust Requirements in a Distributed Deployment.
Certificates
vRealize Automation uses SSL certificates for secure communication among IaaS components and
instances of the vRealize Automation appliance. The appliances and the Windows installation machines
exchange these certificates to establish a trusted connection. You can obtain certificates from an internal
or external certificate authority, or generate self-signed certificates during the deployment process for
each component.
For important information about troubleshooting, supportability, and trust requirements for certificates, see
the VMware knowledge base article at http://kb.vmware.com/kb/2106583.
You can update or replace certificates after deployment. For example, a certificate may expire or you may
choose to use self-signed certificates during your initial deployment, but then obtain certificates from a
trusted authority before going live with your vRealize Automation implementation.
Table 28. Certificate Implementations
Component
Minimal Deployment (non-
production) Distributed Deployment (production-ready)
vRealize
Automation
Appliance
Generate a self-signed certificate
during appliance configuration.
For each appliance cluster, you can use a certificate from an
internal or external certificate authority. Multi-use and wildcard
certificates are supported.
IaaS Components During installation, accept the
generated self-signed certificates or
select certificate suppression.
Obtain a multi-use certificate, such as a Subject Alternative Name
(SAN) certificate, from an internal or external certificate authority
that your Web client trusts.
Installing vRealize Automation
VMware, Inc. 25