7.1

5 Select the certicate type from the  Action menu.
If you are using a PEM-encoded certicate, for example for a distributed environment, select Import.
Certicates that you import must be trusted and must also be applicable to all instances of vRealize
Automation appliance and any load balancer through the use of Subject Alternative Name (SAN)
certicates.
N If you use certicate chains, specify the certicates in the following order:
a Client/server certicate signed by the intermediate CA certicate
b One or more intermediate certicates
c A root CA certicate
Option Action
Keep Existing
Leave the current SSL conguration. Select this option to cancel your
changes.
Generate Certificate
a The value displayed in the Common Name text box is the Host Name
as it appears on the upper part of the page. If any additional instances
of the vRealize Automation appliance available, their FQDNs are
included in the SAN aribute of the certicate.
b Enter your organization name, such as your company name, in the
Organization text box.
c Enter your organizational unit, such as your department name or
location, in the Organizational Unit text box.
d
Enter a two-leer ISO 3166 country code, such as US, in the Country
text box.
Import
a Copy the certicate values from BEGIN PRIVATE KEY to END
PRIVATE KEY, including the header and footer, and paste them in the
RSA Private Key text box.
b Copy the certicate values from BEGIN CERTIFICATE to END
CERTIFICATE, including the header and footer, and paste them in the
 Chain text box. For multiple certicate values, include a
BEGIN CERTIFICATE header and END CERTIFICATE footer for each
certicate.
N In the case of chained certicates, additional aributes may be
available.
c (Optional) If your certicate uses a pass phrase to encrypt the
certicate key, copy the pass phrase and paste it in the Passphrase text
box.
6 Click Save  to save host information and SSL conguration.
7 Congure the SSO seings.
8 Click Messaging. The conguration seings and status of messaging for your appliance is displayed.
Do not change these seings.
9 Click the Telemetry tab to choose whether to join the VMware Customer Experience Improvement
Program (CEIP).
Details regarding the data collected through CEIP and the purposes for which it is used by VMware are
set forth at the Trust & Assurance Center at hp://www.vmware.com/trustvmware/ceip.html.
n
Select Join the VMware Customer Experience Improvement Program to participate in the
program.
n
Deselect Join the VMware Customer Experience Improvement Program to not participate in the
program.
Installing vRealize Automation
54 VMware, Inc.