vCAC 6 series – Part 3 – Deploy VMware Identity Appliance

What is VMware Identity Appliance- A pre-configured virtual appliance that provides Single Sign-On capabilities for vCloud Automation Center solution. However, if you have vSphere 5.5b deployed already, you can use vCenter SSO as and identity instance for vCAC deployment.

Deployment:
  • Using vSphere client go to File –> Deploy OVF template
deploy OVF template VMware identity Appliance

deploy OVF template VMware identity Appliance

  • follow the prompts to the properties page
  • on the properties page provide:
    • hostname
    • root password
    • networking configuration

– See more at: http://vmwaremine.com/?p=6138&preview=true#sthash.nRVCB1fI.dpuf

deploy VM from OVF - properties page

deploy VM from OVF – properties page

Configuration
  • Power virtual machine on
  • Browse to https://<appliance FQDN>:5480 and log in using root credentials
  • Set up time settings, I use my internal NTP server
Time source

Time source configuration

  • On the SSO tab enter password for administrator in system domain vsphere.local
SSO configuration

SSO configuration

[box type=”warning”] NOTE: write down password – you will need it in further process of vCloud Automation Center deployment. It can take several minutes for the success message to appear. Do not interrupt the process.[/box]

  • On host settings tab type FQDN of identity appliance and append SSO port 7444 to host name, in my case it is via01.lab.local:7444
SSO port 7444

SSO port 7444

  • generate self-signed SSL certificate or import signed one
generate self-signed SSL certificate

generate self-signed SSL certificate

  • On AD tab, you can join appliance to Active Directory domain
Join appliance to AD

Join appliance to AD

DONE.

vCloud Automation Center 6.0 series

Artur Krzywdzinski

Artur is Consulting Architect at Nutanix. He has been using, designing and deploying VMware based solutions since 2005 and Microsoft since 2012. He specialize in designing and implementing private and hybrid cloud solution based on VMware and Microsoft software stacks, datacenter migrations and transformation, disaster avoidance. Artur holds VMware Certified Design Expert certification (VCDX #077).

  • FreeYourself

    I am getting the below error message after trying to join to my active directory.

    Error invoking Active Directory tools.

    Any Ideas?

    • did you apply latest patches to AD controllers ? what AD version you have ?
      is it flat network between AD and vmware identity appliance or with firewalls ?

      • FreeYourself

        I am using Windows 2012R2. However, I opted to not use the identity server and use my existing vsphere SSO service that I use for my vcenter. This actually was a lot more ideal.

        • be careful with vCenter SSO and vCAC – it doesn’t work really well – you may end up with strange error or behavior of vCAC