5.8
Table Of Contents
- VMware vRealize Configuration ManagerInstallation Guide
- Contents
- About This Book
- Preparing to Install VCM
- Common Prerequisites for All VCM Servers
- VCM Installation
- Post-Installation
- Hardware and Operating System Requirements for VCM Managed Machines
- VCM Agent Support on Non-English Windows Platforms
- VCM Managed Machine Requirements
- Linux, UNIX, and Mac OS Agent Files
- Windows Custom Information Supports PowerShell 2.0
- Linux and UNIX Patch Assessment and Deployment Requirements
- Support for VMware Cloud Infrastructure
- vRealize Operations Manager Integration Features
- FIPS Requirements
- Agent Sizing Information
- Index
account
n You can reuse an account for more than one function, but dedicated accounts might be useful for
troubleshooting and tracking.
The Collector, VCM Remote, Tomcat, and vSphere Client VCM Plug-in can be the same account. If you
reuse one account, apply the permissions shown for the Collector service account.
IMPORTANT Never use the service accounts for logging in to the VCM Console or for any other purpose.
Logging in to VCM using a service account can lead to unexpected or inconsistent behavior. Services that
use the same account as a logged in user might modify the logged in user's current role or the machine
group, or log the user out of the system.
Account Permissions
VCM Administrator During installation only, local admin on VCM Collector and Web
server
During installation only, system administrator access in VCM SQL
Server on the database server
Must be an interactive account and separate from the other
accounts in this table
VCM Collector Service Local admin on VCM Collector and Web server
Not a domain administrator
Not an interactive user account
VCM Remote Service Local admin on VCM Web server
Not a domain administrator
Not an interactive user account
VCM Tomcat Service Local admin on VCM database server
Public access on VCM databases
Not an interactive user account
vSphere Client VCM Plug-in
Service
Local admin on VCM Web server
Not an interactive user account
VCM Default Network
Authority
Local admin on Windows machines that VCM collects from using
the DCOM Agent
Depending on enterprise size and for convenience, possibly a
separate, domain administrator account with rights on the
Windows machines
Not an interactive user account
Table 1–1. VCM Domain Accounts to Create
VCM Account Configuration
You create accounts for VCM to use as described in "Create VCM Domain Accounts" on the previous
page. In addition, the installation and subsequent operation of VCM causes further impact on those
accounts and other accounts.
Because some accounts, services, and permissions might conflict with site policies, review the following
information before installing and operating VCM. You might need to request a variance if a policy restricts
VCM operation.
Preparing to Install VCM
VMware, Inc.
9