7.2

5 Install Additional IaaS Web Server Components on page 85
The Web server provides access to infrastructure capabilities in vRealize Automation. After the rst
Web server is installed, you might increase performance by installing additional IaaS Web servers.
6 Install the Active Manager Service on page 87
The active Manager Service is a Windows service that coordinates communication between IaaS
Distributed Execution Managers, the database, agents, proxy agents, and SMTP.
7 Install a Backup Manager Service Component on page 90
The backup Manager Service provides redundancy and high availability, and may be started manually
if the active service stops.
8 Installing Distributed Execution Managers on page 92
You install the Distributed Execution Manager as one of two roles: DEM Orchestrator or DEM Worker.
You must install at least one DEM instance for each role, and you can install additional DEM instances
to support failover and high-availability.
9 Conguring Windows Service to Access the IaaS Database on page 95
A system administrator can change the authentication method used to access the SQL database during
run time (after the installation is complete). By default, the Windows identity of the currently logged
on account is used to connect to the database after it is installed.
10 Verify IaaS Services on page 97
After installation, the system administrator veries that the IaaS services are running. If the services
are running, the installation is a success.
What to do next
Install a DEM Orchestrator and at least one DEM Worker instance. See “Installing Distributed Execution
Managers,” on page 92.
Install IaaS Certificates
For production environments, obtain a domain certicate from a trusted certicate authority. Import the
certicate to the trusted root certicate store of all machines on which you intend to install the Website
Component and Manager Service (the IIS machines) during the IaaS installation.
Prerequisites
On Windows 2012 machines, you must disable TLS1.2 for certicates that use SHA512. For more
information about disabling TLS1.2, see Microsoft Knowledge Base article 245030.
Procedure
1 Obtain a certicate from a trusted certicate authority.
2 Open the Internet Information Services (IIS) Manager.
3 Double-click Server  from Features View.
4 Click Import in the Actions pane.
a Enter a le name in the   text box, or click the browse buon (…), to navigate to the
name of a le where the exported certicate is stored.
b Enter a password in the Password text box if the certicate was exported with a password.
c Select Mark this key as exportable.
5 Click OK.
6 Click on the imported certicate and select View.
Chapter 4 The Standard vRealize Automation Installation Interfaces
VMware, Inc. 75