6.7

n
Two-factor authentication such as Common Access Card authentication
n
Login banner
Procedure
1 Log in to a vCenter Server associated with the Platform Services Controller as a user with
administrator privileges in the local vCenter Single Sign-On domain (vsphere.local by default).
2 Select Administration and click the item that you want to manage.
Option Description
Single Sign-On Configure vCenter Single Sign-On.
n
Set policies.
n
Manage identity sources.
n
Manage the STS Signing certificate.
n
Manage SAML service providers.
n
Manage users and groups.
Licensing Configure licensing.
Use Scripts to Manage Platform Services Controller Services
Platform Services Controller includes scripts for generating CSRs, managing certificates and managing
services.
For example, you can use the certool utility to generate CSRs and to replace certificates, both for
scenarios with embedded Platform Services Controller and for scenarios with external
Platform Services Controller. See Managing Certificates with the vSphere Certificate Manager Utility.
Use the CLIs for management tasks that the Web interfaces do not support, or to create custom scripts
for your environment.
Table 1‑4. CLIs for Managing Certificates and Associated Services
CLI Description Links
certool
Generate and manage certificates and
keys. Part of VMCA.
certool Initialization Commands Reference
vecs-cli
Manage the contents of VMware
Certificate Store instances. Part of
VMAFD.
vecs-cli Command Reference
dir-cli
Create and update certificates in
VMware Directory Service. Part of
VMAFD.
dir-cli Command Reference
sso-config
Utility for configuring smart card
authentication.
Understanding vCenter Server Two-Factor
Authentication
service-control
Command for starting, stopping, and
listing services.
Run this command to stop services before
running other CLI commands.
Platform Services Controller Administration
VMware, Inc. 18