Installing vRealize Automation vRealize Automation 7.
Installing vRealize Automation You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/ If you have comments about this documentation, submit your feedback to docfeedback@vmware.com VMware, Inc. 3401 Hillview Ave. Palo Alto, CA 94304 www.vmware.com Copyright © 2008–2018 VMware, Inc. All rights reserved. Copyright and trademark information. VMware, Inc.
Contents vRealize Automation Installation Updated Information 6 7 1 vRealize Automation Installation Overview 8 Choosing Your Deployment Path 8 Minimal Deployment Overview 10 Enterprise Deployment Overview 10 vRealize Automation Installation Components VMware vRealize Automation Appliance Management Agents 11 12 12 vRealize Automation Infrastructure as a Service 12 2 Preparing for Installation 15 DNS and Host Name Resolution 15 Hardware and Virtual Machine Requirements Browser Considerations
Installing vRealize Automation Run the Prerequisite Checker 34 Specify Deployment Configuration Parameters 35 Create Snapshots Before You Begin the Installation Scenario: Finish the Installation Address Installation Failures 35 36 36 Set Up Credentials for Initial Content Configuration 37 Installing an Enterprise Deployment with the Installation Wizard Run the Installation Wizard for an Enterprise Deployment Installing the Management Agent Synchronize Server Times 38 39 42 Run the Prerequisit
Installing vRealize Automation 5 Configure Access to the Default Tenant 124 6 Replacing Self-Signed Certificates with Certificates Provided by an Authority 126 7 Troubleshooting 127 Default Log Locations 127 Rolling Back a Failed Installation 129 Roll Back a Minimal Installation 129 Roll Back a Distributed Installation 129 Create a Support Bundle for vRealize Automation General Installation Troubleshooting 130 131 Installation or Upgrade Fails with a Load Balancer Timeout Error Server Times Are
vRealize Automation Installation vRealize Automation Installation explains how to install VMware vRealize ™ Automation. Note Not all features and capabilities of vRealize Automation are available in all editions. For a comparison of feature sets in each edition, see https://www.vmware.com/products/vrealize-automation/. Intended Audience This information is intended for experienced Windows or Linux system administrators who are familiar with virtual machine technology and data center operations.
Updated Information Installing vRealize Automation 7.0 is updated with each release of the product or when necessary. This table provides the update history of the Installing vRealize Automation 7.0 publication. Revision Description EN-001835-04 Updates to SQL Server prerequisites. See IaaS Database Server Requirements. EN-001835-03 Additional troubleshooting procedures. EN-001835-02 Removed outdated procedures about database failovers, from Chapter 4.
vRealize Automation Installation Overview 1 vRealize Automation can be deployed in a variety of configurations. To ensure a successful deployment understand the deployment and configuration options, and the sequence of tasks required.
Installing vRealize Automation Choose a minimal installation to deploy a proof of concept (PoC) or development environment with a basic topology. Choose an enterprise installation to deploy a production environment with the topology best suited to your organizational needs. Table 1‑1. Choosing Your Installation Method Installation Method Details Installation Wizard The Installation Wizard provides the quickest installation path for most deployments.
Installing vRealize Automation Minimal Deployment Overview To complete a minimal deployment, a system administrator installs the vRealize Automation appliance and Infrastructure as a Service (IaaS) components. n vRealize Automation appliance includes the Web console interface and support for single sign-on capabilities. It is installed as a virtual appliance. n Infrastructure as a Service (IaaS) is installed on a Windows Server machine.
Installing vRealize Automation For high availability deployments, load balancers distribute the workload across the computing environment. System administrators configure load balancers outside of the vRealize Automation framework. The following figure shows the components of an enterprise deployment with distributed components, redundancy, and load balancers. Figure 1‑1.
Installing vRealize Automation An installation consists of the following components. n vRealize Automation appliance, which deploys the management console, manages Single Sign-On (SSO) capabilities for authorization and authentication, and includes an instance of vRealize Orchestrator. n Infrastructure as a Service (IaaS) components, which are installed on a Windows machine (virtual or physical), and appear largely under the Infrastructure tab on the console.
Installing vRealize Automation IaaS Website The IaaS Website component provides the infrastructure administration and service authoring capabilities to the vRealize Automation console. The Website component communicates with the Manager Service, which provides it with updates from the Distributed Execution Manager (DEM), proxy agents, and database. Model Manager vRealize Automation models facilitate integration with external systems and databases.
Installing vRealize Automation One DEM Orchestrator instance is designated as the active Orchestrator that performs these tasks. Because the DEM Orchestrator is essential to run workflows, install at least one additional Orchestrator instance on a separate machine for redundancy. The Orchestrator is automatically installed on the machine that also runs the Manager Service.
Preparing for Installation 2 System Administrators install vRealize Automation into their existing virtualization environments. Before you begin an installation, prepare the deployment environment to meet system requirements.
Installing vRealize Automation For operating system and high-level environment requirements, including information about supported browsers and operating systems, see the vRealize Automation Support Matrix. The Hardware Requirements table shows the minimum configuration requirements for deployment of virtual appliances and installation of IaaS components. Appliances are pre-configured virtual machines that you add to your vCenter Server or ESXi inventory.
Installing vRealize Automation Passwords that contain special characters might be accepted when you assign them, but cause failures when you perform operations such as saving endpoints or when the machine attempts to join the vRealize Automation cluster. Windows Server Requirements The virtual or physical Windows machine that hosts the IaaS components must meet configuration requirements for the IaaS database, the IaaS server components, the IaaS Manager Service, and Distributed Execution Managers.
Installing vRealize Automation Environment and Database Requirements for IaaS Your host configuration and MS SQL database must meet the following requirements. Table 2‑2. IaaS Requirements Area Host Configuration Microsoft SQL Database Requirements Requirements The following components must be installed on the host before installing IaaS: n Microsoft .NET Framework 4.5.2 or later. n Microsoft PowerShell 2.0 (included with Windows Server 2008 R2 SP1 and later) or Microsoft PowerShell 3.
Installing vRealize Automation Table 2‑3. Required Configuration for Microsoft Internet Information Services IIS Component Setting Internet Information Services (IIS) modules installed n WindowsAuthentication n StaticContent IIS Authentication settings IIS Windows Process Activation Service roles n DefaultDocument n ASPNET 4.
Installing vRealize Automation n SecondaryLogOnService is running. n No firewalls between DEM host and the Windows server, or ports opened as described in Port Requirements. Servers that host DEM Worker instances might have additional requirements depending on the provisioning resources that they interact with. Amazon Web Services EC2 Requirements The IaaS Windows server communicates with and collects data from an Amazon EC2 account.
Installing vRealize Automation n The MS PowerShell Execution Policy must be set to RemoteSigned or Unrestricted. For information on PowerShell Execution Policy issue one of the following commands at Power-Shell command prompt: help about_signing help Set-ExecutionPolicy n If all DEM Workers within the instance are not on compute resources meeting these requirements, Skills must be used to direct all SCVMM-related workflows to those that are. The following additional requirements apply to SCVMM.
Installing vRealize Automation Table 2‑4. Incoming Ports for the vRealize Automation appliance Port Protocol Comments 22 TCP Optional. SSH. 80 TCP Optional. Redirects to 443. 111 TCP, UDP RPC 443 TCP Access to the vRealize Automation console and API calls. 5480 TCP Access to virtual appliance Web management interface 5480 TCP Used by Management Agent 5488, 5489 TCP Internal. Used by vRealize Automation appliance for updates.
Installing vRealize Automation Table 2‑6.
Installing vRealize Automation Virtual Appliance Installation To deploy the vRealize Automation appliance, you must have the appropriate privileges on the deployment platform (for example, vSphere administrator credentials). During the deployment process, you specify the password for the virtual appliance administrator account. This account provides access to the vRealize Automation appliance management console from which you configure and administer the virtual appliances.
Installing vRealize Automation n The user must have dbo privileges for the IaaS database. If you use the installer to create the database, ensure that the service user login is added to SQL Server prior to running the installer. The installer grants the service user dbo privileges after creating the database. n The installer is run under the account that runs the Management Agent on the primary Web server.
Installing vRealize Automation Certificate Chains If you use certificate chains, specify the certificates in the following order: n Client/server certificate signed by the intermediate CA certificate n One or more intermediate certificates n A root CA certificate Include the BEGIN CERTIFICATE header and END CERTIFICATE footer for each certificate when you import certificates.
Installing vRealize Automation Third-Party Software Some components of vRealize Automation depend on third-party software, including Microsoft Windows and SQL Server. To guard against security vulnerabilities in third-party products, ensure that your software is up-to-date with the latest patches from the vendor. Time Synchronization A system administrator must set up accurate timekeeping as part of the vRealize Automation installation. Installation fails if time synchronization is set up incorrectly.
Installing vRealize Automation with the Installation Wizard 3 The Installation Wizard for vRealize Automation provides a simple and fast way to install minimal or enterprise deployments. Before you begin the wizard, you must deploy a vRealize Automation appliance, configure your Windows servers to meet installation prerequisites, and verify that each appliance and server uses the same timekeeping method.
Installing vRealize Automation Procedure 1 Select File > Deploy OVF Template from the vSphere client. 2 Browse to the vRealize Automation appliance file you downloaded and click Open. 3 Click Next. 4 Click Next on the OVF Template Details page. 5 Accept the license agreement and click Next.
Installing vRealize Automation c Wait for the machine to start. This could take up to 5 minutes. n If Power on after deployment is not available on the Ready to Complete page. a Click Close after the file finishes deploying into vCenter. b Power on the VM and wait for some time for the VM to start up. c Verify that you can ping the DNS of the virtual machine. If you cannot ping the DNS, restart the virtual machine. d Wait for the machine to start. This could take up to 5 minutes.
Installing vRealize Automation 8 If needed, you can change the timekeeping method for your vRealize Automation appliance. Click Change Time Settings, if you make changes. 9 ClickNext. 10 Click Run on the Run the Prerequisite Checker screen to verify that the Windows servers in your deployment are correctly configured for vRealize Automation use. Because this step runs remotely, it can take several minutes for the step to run.
Installing vRealize Automation Procedure 1 Log in to the vRealize Automation appliance console as root. 2 Enter the following command: openssl x509 -in /opt/vmware/etc/lighttpd/server.pem -fingerprint -noout -sha1 The SHA1 fingerprint appears. For example: SHA1 Fingerprint=E4:F0:37:9A:32:52:FA:7D:2E:91:BD:12:7A:2F:A3:75:F8:A1:7B:C4 3 Copy the fingerprint UID. For validation, you might need to remove the colons.
Installing vRealize Automation 7 Click Next. 8 Enter the Management Site Service details for the following fields. and click Next. Text box Input vRA appliance address https://vra-va-hostname.domain.name:5480 You must specify the port number. Root username The root user for the vRealize Automation appliance. Password The root user password for the vRealize Automation appliance. Management Site server certificate The SHA1 fingerprint for the Management Site Service certificate.
Installing vRealize Automation 14 Click Finish. 15 Repeat these steps for each Windows IaaS host. After you installed the Management Agent, the Windows server is listed on the Installation Prerequisites page of the installation wizard. Synchronize Server Times Clocks on vRealize Automation servers and Windows servers must be synchronized to ensure a successful installation.
Installing vRealize Automation 3 Click Run to verify corrections. 4 Click Next when all errors are resolved. Your Windows servers are correctly configured for installation of IaaS components. What to do next Continue to the vRealize Automation Host screen. Specify Deployment Configuration Parameters Specify configuration parameters for your deployment components. Prerequisites Procedure 1 On the vRealize Automation Host screen, specify the host.
Installing vRealize Automation 2 Locate your server or appliance in the vSphere Client inventory. 3 Right-click the server the inventory and select Take Snapshot. 4 Enter a snapshot name. 5 Select Snapshot the virtual machine's memory checkbox to capture the memory of the server and click OK. The snapshot is created. Repeat these steps to take snapshots of each of your servers or appliances.
Installing vRealize Automation Procedure 1 If the Retry Failed button is enabled, use the following steps. a Review the failure. b Assess what needs to be changed and make required changes. c Return to the Installation screen and click Retry Failed. The installer attempts to install all failed components. 2 3 If the Retry All IaaS button is enabled, use the following steps. a Review the failure. b Assess what needs to be changed.
Installing vRealize Automation A configuration admin user is created and a configuration catalog item is created in the default tenant. The configuration admin is granted the following rights: n Approval Administrator n Catalog Administrator n IaaS Administrator n Infrastructure Architect n Tenant Administrator n XaaS Architect What to do next n When you finish the wizard, you can log into the default tenant as the configurationadmin user and request the initial content catalog items.
Installing vRealize Automation n Deploy the vRealize Automation Appliance. Procedure 1 Open a Web browser. 2 Navigate to the vRealize Automation appliance management console by using its fully qualified domain name, https://vra-va-hostname.domain.name:5480/. 3 Log in with the user name root and the password you specified when the appliance was deployed. 4 The Installation Wizard appears the first time you log in to the appliance. 5 Accept the End User License Agreement and click Next.
Installing vRealize Automation What to do next Keep the fingerprint you copied for use with the Management Agent installer. Download and Install a Management Agent An administrator downloads and installs a Management Agent on IaaS machines in your deployment. The Management Agent must be installed on all IaaS servers except for those that are used exclusively for your MS SQL database.
Installing vRealize Automation Text box Input Management Site server certificate The SHA1 fingerprint for the Management Site Service certificate. The Management Site Service is hosted on the vRealize Automation appliance. Sample SHA1 fingerprint: DFF5FA0886DA2920D227ADF8BC9CDE4EF13EEF78. Load 9 Click Load to load the default fingerprint.
Installing vRealize Automation Synchronize Server Times Clocks on vRealize Automation servers and Windows servers must be synchronized to ensure a successful installation. Options on the Prerequisites page of the Installation Wizard let you select a time synchronization method for your virtual appliances. The IaaS host table informs you of time offsets. Procedure 1 Select an option from the Time Sync Mode menu.
Installing vRealize Automation What to do next Continue to the vRealize Automation Host screen. Specify Deployment Configuration Parameters Specify configuration parameters for your deployment components. Prerequisites Procedure 1 On the vRealize Automation Host screen, specify the host. n Click Resolve Automatically to have vRealize Automation supply the default address. n Click Enter Host and enter the DNS alias or FQDN for a different host. 2 Click Next.
Installing vRealize Automation 5 Select Snapshot the virtual machine's memory checkbox to capture the memory of the server and click OK. The snapshot is created. Repeat these steps to take snapshots of each of your servers or appliances. What to do next Finish the Installation Finish the Installation After creating snapshots, you initiate the installation of vRealize Automation and wait for the installation to complete successfully. Procedure 1 Return to the installation wizard.
Installing vRealize Automation 2 3 If the Retry All IaaS button is enabled, use the following steps. a Review the failure. b Assess what needs to be changed. c Revert all IaaS servers to the snapshots you created earlier. d Delete the MS SQL database, if you are using an external database. e Make required changes. f Click Retry All IaaS. If the failure is in the virtual appliance components use the following steps. a Review the failure. b Assess what needs to be changed.
Installing vRealize Automation What to do next n When you finish the wizard, you can log into the default tenant as the configurationadmin user and request the initial content catalog items. For an example of how to request the item and complete the manual user action, see Installing and Configuring vRealize Automation for the Rainpole Scenario. n Configure access to the default tenant for other users. See Chapter 5 Configure Access to the Default Tenant. VMware, Inc.
Installing vRealize Automation through the Standard Interfaces 4 As an alternative to the Installation Wizard, you can install vRealize Automation through the vRealize Automation appliance management console and the IaaS manual installer.
Installing vRealize Automation Table 4‑1. Minimal Deployment Checklist (Continued) Task Details Install additional agents, if required. Installing Agents Perform post-installation tasks such as configuring the default tenant. Deploy and Configure the vRealize Automation Appliance The vRealize Automation appliance is a preconfigured virtual appliance that deploys the vRealize Automation appliance server and Web console (the user portal). It is delivered as an open virtualization format (OVF) template.
Installing vRealize Automation 6 Enter a unique virtual appliance name according to the IT naming convention of your organization in the Name text box, select the datacenter and location to which you want to deploy the virtual appliance, and click Next. 7 Follow the prompts until the Disk Format page appears. 8 Verify on the Disk Format page that enough space exists to deploy the virtual appliance and click Next. 9 Follow the prompts to the Properties page.
Installing vRealize Automation Enable Time Synchronization on the vRealize Automation Appliance Clocks on the vRealize Automation server and Windows servers must be synchronized to ensure a successful installation. If you see certificate warnings during this process, continue past them to finish the installation. Prerequisites Deploy the vRealize Automation Appliance.
Installing vRealize Automation Procedure 1 Navigate to the vRealize Automation appliance management console by using its fully qualified domain name, https://vra-va-hostname.domain.name:5480/. 2 Continue past the certificate warning. 3 Log in with user name root and the password you specified when you deployed vRealize Automation appliance. 4 Select vRA Settings > Host Settings.
Installing vRealize Automation 6 Select the certificate type from the Certificate Action menu. If you are using a PEM-encoded certificate, for example for a distributed environment, select Import. Certificates that you import must be trusted and must also be applicable to all instances of vRealize Automation appliance and any load balancer through the use of Subject Alternative Name (SAN) certificates.
Installing vRealize Automation 10 Click the Telemetry tab to choose whether to join the VMware Customer Experience Improvement Program (CEIP). Details regarding the data collected through CEIP and the purposes for which it is used by VMware are set forth at the Trust & Assurance Center at http://www.vmware.com/trustvmware/ceip.html. n Select Join the VMware Customer Experience Improvement Program to participate in the program.
Installing vRealize Automation Installing IaaS Components The administrator installs a complete set of infrastructure (IaaS) components on a Windows machine (physical or virtual). Administrator rights are required to perform these tasks. A minimal installation installs all of the components on the same Windows server, except for the SQL database, which you can install on a separate server.
Installing vRealize Automation Prerequisites n Verify that your installation machine meets the requirements described in IaaS Web Service and Model Manager Server Requirements. n Enable Time Synchronization on the Windows Server. n Verify that you have deployed and fully configured the vRealize Automation appliance, and that the necessary services are running (plugin-service, catalog-service, iaas-proxy-provider).
Installing vRealize Automation n Log in to the Windows server as a local administrator. Procedure 1 Log in to the Windows machine where you are about to perform the installation. 2 Open a Web browser. 3 Enter the URL of the VMware vRealize Automation IaaS Installation download page. For example, https://vra-va-hostname.domain.name:5480/installer, where vra-vahostname.domain.name is the name of the vRealize Automation appliance host. 4 Download the installer by clicking on the IaaS Installer link.
Installing vRealize Automation 7 Select Complete Install on the Installation Type page if you are creating a minimal deployment and click Next. Check Prerequisites The Prerequisite Checker verifies that your machine meets IaaS installation requirements. Prerequisites Select the Installation Type. Procedure 1 2 Complete the Prerequisite Check. Option Description No errors Click Next. Noncritical errors Click Bypass. Critical errors Bypassing critical errors causes the installation to fail.
Installing vRealize Automation 4 Accept the default in the Database name text box or type an appropriate name if applicable. 5 Select the authentication method. 6 u Select Use Windows authentication if you want to create the database using the Windows credentials of the current user. The user must have SQL sys_admin privileges. u Deselect Use Windows authentication if you want to create the database using SQL authentication.
Installing vRealize Automation Procedure 1 Accept the default Server value, which is populated with the fully qualified domain name of the vRealize Automation appliance server from which you downloaded the installer. Verify that a fully qualified domain name is used to identify the server and not an IP address. If you have multiple virtual appliances and are using a load balancer, enter the load balancer virtual appliance path. 2 Click Load to populate the value of SSO Default Tenant (vsphere.local).
Installing vRealize Automation What to do next Verify IaaS Services. Distributed Deployment In a distributed deployment, the system administrator installs components on multiple machines in the deployment environment. Distributed Deployment Checklist A system administrator can deploy vRealize Automation in a distributed configuration, which provides failover protection and high-availability through redundancy.
Installing vRealize Automation Directories Management If you install a distributed installation with load balancers for high availability and failover, notify the team responsible for configuring your vRealize Automation environment. Your tenant administrators must configure Directories Management for high availability when they configure the link to your Active Directory. For more information about configuring Directories Management for high availability, see Configuring vRealize Automation.
Installing vRealize Automation Table 4‑4. IaaS Components (Continued) Component Description Distributed Execution Managers (Orchestrator and Worker) A Distributed Execution Manager (DEM) executes the business logic of custom models, interacting with the IaaS database and external databases. DEMs also manage cloud and physical machines. Agents Virtualization, integration, and WMI agents that communicate with infrastructure resources.
Installing vRealize Automation One copy of each worksheet is given here. Create additional copies as you need them. Settings are case sensitive. Table 4‑6. Leading cluster vRealize Automation appliance Information Variable Value Host Name (FQDN) SSO service over HTTPS Outgoing Port (default) vcac-va.mycompany.com 7444 (do not change) IP Username Example 7444 192.168.1.105 administrator@vsphere.local (default) Password administrator@vsphere.local vmware Table 4‑7.
Installing vRealize Automation Table 4‑10. IaaS Model Manager Data (Continued) Variable Value Example IP 192.168.1.107 Username Password Table 4‑11. IaaS Model Service Variable Value Example Host Name (FQDN) iaas-model-service.mycompany.com SSO service over HTTPS Outgoing Port (default) IP 192.168.1.108 Username Password Table 4‑12. Distributed Execution Managers Unique Name Orchestrator/Worker ex.
Installing vRealize Automation 3 Click Next. 4 Click Next on the OVF Template Details page. 5 Accept the license agreement and click Next. 6 Enter a unique virtual appliance name according to the IT naming convention of your organization in the Name text box, select the datacenter and location to which you want to deploy the virtual appliance, and click Next. 7 Follow the prompts until the Disk Format page appears.
Installing vRealize Automation d Wait for the machine to start. This could take up to 5 minutes. To verify that you successfully deployed the appliance, open a command prompt and ping the FQDN of the vRealize Automation appliance. What to do next Repeat this procedure to deploy additional instances of the vRealize Automation appliance for redundancy in a high-availability environment.
Installing vRealize Automation Configure the Primary vRealize Automation Appliance The vRealize Automation appliance is a preconfigured virtual appliance that deploys the vRealize Automation server and Web console (the user portal). It is delivered as an open virtualization format (OVF) template. The system administrator downloads the appliance and deploys it into the vCenter Server or ESX/ESXi inventory.
Installing vRealize Automation 5 Click Save Settings. 6 Verify that the value in Current Time is correct. You can change the time zone as required from the Time Zone Setting page on the System tab. Configure the vRealize Automation Appliance To prepare the vRealize Automation appliance for use, a system administrator configures the host settings, generates an SSL certificate, and provides SSO connection information.
Installing vRealize Automation 5 Select the certificate type from the Certificate Action menu. If you are using a PEM-encoded certificate, for example for a distributed environment, select Import. Certificates that you import must be trusted and must also be applicable to all instances of vRealize Automation appliance and any load balancer through the use of Subject Alternative Name (SAN) certificates.
Installing vRealize Automation d Select the SSH service enabled check box. Deselect the check box to disable SSH when finished. e Select the Administrator SSH login check box. Deselect the check box to disable SSH when finished. f Click Save Settings. 8 Configure the SSO settings. 9 Click Services. All services must be running before you can install a license or log in to the console. They usually start in about 10 minutes.
Installing vRealize Automation 14 Confirm that you can log into vRealize Automation console. a Open a browser and navigate to https://vcac-hostname.domain.name/vcac/. If you are using a load balancer, the host name must be the fully qualified domain name of the load balancer. b If prompted, continue past the certificate warnings. c Log in with administrator@vsphere.local and the password you specified when configuring SSO. The console opens to the Tenants page on the Administration tab.
Installing vRealize Automation 4 Select an option from the Time Sync Mode menu. Option Action Use Time Server Select Use Time Server from the Time Sync Mode menu to use Network Time Protocol . For each time server that you are using, enter the IP address or the host name in the Time Server text box. Use Host Time Select Use Host Time from the Time Sync Mode menu to use VMware Tools time synchronization.
Installing vRealize Automation 2 Continue past any certificate warnings. 3 Log in with user name root and the password you specified when deploying the vRealize Automation appliance. 4 Select vRA Settings > Cluster. 5 Enter the FQDN of a previously configured vRealize Automation appliance in the Leading Cluster Node text box. You can use the FQDN of the primary vRealize Automation appliance, or any vRealize Automation appliance that is already joined to the cluster.
Installing vRealize Automation 2 Confirm that you can log in to the vRealize Automation console by navigating to https://vcachostname.domain.name/vcac, where vcac-hostname.domain.name is the address of the load balancer. 3 After you have verified that the new vRealize Automation appliance is accessible by using the load balancer, re-enable the other nodes.
Installing vRealize Automation 5 Install Additional IaaS Website Components The Website component provides access to infrastructure capabilities in the vRealize Automation Web console. The system administrator can install one or many instances of the Website component. 6 Install the Active Manager Service The Manager Service component coordinates communication between agents and proxy agents, the database, and SMTP. A minimum of one instance of the Manager Service component must be installed.
Installing vRealize Automation 2 Open the Internet Information Services (IIS) Manager. 3 Double-click Server Certificates from Features View. 4 Click Import in the Actions pane. a Enter a file name in the Certificate file text box, or click the browse button (…), to navigate to the name of a file where the exported certificate is stored. b Enter a password in the Password text box if the certificate was exported with a password. c Select Mark this key as exportable. 5 Click OK.
Installing vRealize Automation Procedure 1 (Optional) Activate HTTP if you are installing on a Windows 2012 machine. a Select Features > Add Features from Server Manager. b Expand WCF Services under .NET Framework Features. c Select HTTP Activation. 2 Log in to the Windows machine where you are about to perform the installation. 3 Open a Web browser. 4 Enter the URL of the VMware vRealize Automation IaaS Installation download page. For example, https://vra-va-hostname.domain.
Installing vRealize Automation Table 4‑13. Choosing an IaaS Database Scenario Scenario Procedure Create the IaaS database manually using the provided database scripts. This option enables a database administrator to review the changes carefully before creating the database. Create the IaaS Database Manually. Prepare an empty database and use the installer to populate the database schema.
Installing vRealize Automation Table 4‑14. Database Values Variable Value db_server Specifies the SQL Server instance in the format dbhostname[,port number]\SQL instance. Specify a port number only if you are using a non-default port. The Microsoft SQL default port number is 1433. The default value for db_server is localhost. db_name Name of the database. The default value is vra. Database names must consist of no more than 128 ASCII characters.
Installing vRealize Automation 4 Edit CreateDatabase.sql and replace all instances of the variables in the table with the correct values for your environment. Table 4‑15. Database Values 5 Variable Value $(DBName) Name of the database, such as vra. Database names must consist of no more than 128 ASCII characters. $(DBDir) Path to the data directory for the database, excluding the final slash. $(LogDir) Path to the log directory for the database, excluding the final slash.
Installing vRealize Automation 2 Click Next. 3 Accept the license agreement and click Next. 4 On the Log in page, supply administrator credentials for the vRealize Automation appliance and verify the SSL Certificate. a Type the user name, which is root, and the password. The password is the password that you specified when you deployed the vRealize Automation appliance. b Select Accept Certificate. c Click View Certificate.
Installing vRealize Automation 15 Select an authentication method for installing the database from the Authentication list. n To use the credentials under which you are running the installer to create the database, select User Windows identity.... n To use SQL authentication, deselect Use Windows identity.... Type SQL credentials in the user and password text boxes.
Installing vRealize Automation Procedure 1 Install the First IaaS Website Component A system administrator installs a Website component to provide access to infrastructure capabilities on the vRealize Automation Web console. 2 Configure Model Manager Data You install the Model Manager component on the same machine that hosts the first Website component. You can only install Model Manager Data once. You can install additional Website components or install the Manager Service.
Installing vRealize Automation 6 On the Log in page, supply administrator credentials for the vRealize Automation appliance and verify the SSL Certificate. a Type the user name, which is root, and the password. The password is the password that you specified when you deployed the vRealize Automation appliance. b Select Accept Certificate. c Click View Certificate. Compare the certificate thumbprint with the thumbprint set for the vRealize Automation appliance.
Installing vRealize Automation Configure Model Manager Data You install the Model Manager component on the same machine that hosts the first Website component. You can only install Model Manager Data once. Prerequisites Install the First IaaS Website Component. Procedure 1 Click the Model Manager Data tab. 2 Type the fully qualified domain name of the vRealize Automation appliance in the Server text box. IP addresses are not recognized. For example, vra.mycompany.com.
Installing vRealize Automation 12 Complete the Prerequisite Check. Option Description No errors Click Next. Noncritical errors Click Bypass. Critical errors Bypassing critical errors causes the installation to fail. If warnings appear, select the warning in the left pane and follow the instructions on the right. Address all critical errors and click Check Again to verify.
Installing vRealize Automation n Verify that your environment meets the requirements described in IaaS Web Service and Model Manager Server Requirements. n If you previously installed other components in this environment, verify that you know the passphrase that was created. See Security Passphrase. n If you are using load balancers in your environment, verify that they meet the configuration requirements.
Installing vRealize Automation 15 Select the certificate for this component. a If you imported a certificate after you began the installation, click Refresh to update the list. b Select the certificate to use from Available certificates. c If you imported a certificate that does not have a friendly name and it does not appear in the list, deselect Display certificates using friendly names and click Refresh.
Installing vRealize Automation 23 Provide the passphrase used to generate the encryption key that protects the database. Option Description If you have already installed components in this environment Type the passphrase you created previously in the Passphrase and Confirm text boxes. If this is the first installation Type a passphrase in the Passphrase and Confirm text boxes. You must use this passphrase every time you install a new component. Keep this passphrase in a secure place for later use.
Installing vRealize Automation Procedure 1 Disable any health checks for the load balancer and ensure that traffic is directed to the node. 2 Right-click the setup__vra-va-hostname.domain.name@5480.exe setup file and select Run as administrator. 3 Accept the license agreement and click Next. 4 On the Log in page, supply administrator credentials for the vRealize Automation appliance and verify the SSL Certificate. a Type the user name, which is root, and the password.
Installing vRealize Automation 16 Select the certificate for this component. a If you imported a certificate after you began the installation, click Refresh to update the list. b Select the certificate to use from Available certificates. c If you imported a certificate that does not have a friendly name and it does not appear in the list, deselect Display certificates using friendly names and click Refresh.
Installing vRealize Automation A system administrator can change the authentication method used to access the SQL database during run time (after the installation is complete). See Configuring Windows Service to Access the IaaS Database. Install a Backup Manager Service Component You can install a passive backup instance of the Manager Service component that you can start manually to provide redundancy in a high-availability deployment.
Installing vRealize Automation 7 Select Custom Install on the Installation Type page. 8 Select IaaS Server under Component Selection on the Installation Type page. 9 Accept the root install location or click Change and select an installation path. 10 Click Next. 11 Select Manager Service on the IaaS Server Custom Install page. 12 Type IaaS server information in the IaaS Server text box.
Installing vRealize Automation 22 Provide the passphrase used to generate the encryption key that protects the database. Option Description If you have already installed components in this environment Type the passphrase you created previously in the Passphrase and Confirm text boxes. If this is the first installation Type a passphrase in the Passphrase and Confirm text boxes. You must use this passphrase every time you install a new component. Keep this passphrase in a secure place for later use.
Installing vRealize Automation n You can install additional DEM instances for redundancy and scalability, including multiple instances on the same machine. There are specific requirements for the DEM installation that depend on the endpoints you use. See Distributed Execution Manager Requirements. Install the Distributed Execution Managers A system administrator installs at least one DEM Worker and one DEM Orchestrator. The installation procedure is the same for both roles.
Installing vRealize Automation 11 Enter the log in credentials under which the service will run. This must be a local administrator account. 12 Click Next. 13 Select the installation type from the DEM role drop-down menu. Option Description Worker The Worker executes workflows. Orchestrator The Orchestrator oversees DEM worker activities, including scheduling and preprocessing workflows, and monitors DEM worker online status. 14 Enter a unique name that identifies this DEM in the DEM name text box.
Installing vRealize Automation What to do next Verify that the service is running and that the log shows no errors. The service name is VMware DEM Role - Name where role is Orchestrator or Worker. The log location is Install Location\Distributed Execution Manager\Name\Logs. Repeat this procedure to install additional DEM instances. Configure the DEM to Connect to SCVMM on a Nonstandard Installation Path By default, the DEM Worker configuration file (DynamicOps.DEM.exe.
Installing vRealize Automation Enable IaaS Database Access from the Service User If the SQL database is installed on a separate host from the Manager Service, database access from the Manager Service must be enabled. If the user name under which the Manager Service will run is the owner of the database, no action is required. If the user is not the owner of the database, the system administrator must grant access. Prerequisites n Choosing an IaaS Database Scenario.
Installing vRealize Automation 3 Navigate to the Server directory. C:\Program Files (x86) \VMware\vCAC\Server\ 4 Open the ManagerService.exe.config file in a text editor. 5 In the connectionStrings section and the serviceConfiguration serviceURIsection, replace Integrated Security=True with User Id=DATABASE_USER;Password=DATABASE_PASSWORD. 6 Save and close the file. 7 Navigate to C:\Program Files (x86)\VMware\vCAC\Server\Model Manager Web\. 8 Open the Web.config file in a text editor.
Installing vRealize Automation 3 n VMware vCloud Automation Center Agent Agent name n VMware vCloud Automation Center Service Close the Services window. Installing Agents vRealize Automation uses agents to integrate with external systems. A system administrator can select agents to install to communicate with other virtualization platforms.
Installing vRealize Automation 2 For Remote Signed, run Set-ExecutionPolicy RemoteSigned. 3 For Unrestricted, run Set-ExecutionPolicy Unrestricted. 4 Verify that the command did not produce any errors. 5 Type Exit at the PowerShell command prompt. Choosing the Agent Installation Scenario The agents that you need to install depend on the external systems with which you plan to integrate. Table 4‑16.
Installing vRealize Automation Installing and Configuring the Proxy Agent for vSphere A system administrator installs proxy agents to communicate with vSphere server instances. The agents discover available work, retrieve host information, and report completed work items and other host status changes. vSphere Agent Requirements vSphere endpoint credentials, or the credentials under which the agent service runs, must have administrative access to the installation host.
Installing vRealize Automation Table 4‑17. Permissions Required for vSphere Agent to Manage vCenter Server Instance (Continued) Attribute Value Permission Device Connection Power Off Power On Reset Suspend Tools Install Configuration Add Existing Disk Add New Disk Add or Remove Remove Disk Advanced Change CPU Count Change Resource Device Extend Virtual Disk Settings Disk Change Tracking Memory Modify Device Settings Rename Set Annotation (version 5.
Installing vRealize Automation Install the vSphere Agent Install a vSphere agent to manage vCenter Server instances. For high availability, you can install a second, redundant vSphere agent for the same vCenter Server instance. You must name and configure both vSphere agents identically, and install them on different machines. Prerequisites n The IaaS components, including the Manager Service and Website, are installed. n Verify that you have completed all the vSphere Agent Requirements.
Installing vRealize Automation 12 Enter an identifier for this agent in the Agent name text box. Maintain a record of the agent name, credentials, endpoint name, and platform instance for each agent. You need this information to configure endpoints and to add hosts in the future. Important Do not duplicate agent names unless you are installing redundant, identically configured agents for high availability.
Installing vRealize Automation 20 Click Next. 21 Click Finish. 22 Verify that the installation is successful. 23 (Optional) Add multiple agents with different configurations and an endpoint on the same system. What to do next Configure the vSphere Agent. Configure the vSphere Agent You can use the proxy agent utility to modify the initial configurations that are encrypted in the agent configuration file, or to change the machine deletion policy for virtualization platforms.
Installing vRealize Automation 6 Navigate to Start > Administrative Tools > Services and restart the vRealize Automation Agent – agentname service. What to do next For high-availability, you can install and configure a redundant agent for your endpoint. Install each redundant agent on a separate server, but name and configure the agents identically.
Installing vRealize Automation n If you are using Xen pools, note that all nodes within the Xen pool must be identified by their fully qualified domain names. vRealize Automation cannot communicate with or manage any node that is not identified by its fully qualified domain name within the Xen pool. n Configure Hyper-V for remote management to enable Hyper-V server communication with vRealize Automation Hyper-V proxy agents.
Installing vRealize Automation 12 Enter an identifier for this agent in the Agent name text box. Maintain a record of the agent name, credentials, endpoint name, and platform instance for each agent. You need this information to configure endpoints and to add hosts in the future. Important Do not duplicate agent names unless you are installing redundant, identically configured agents for high availability.
Installing vRealize Automation 20 (Optional) Add another agent. For example, you can add a XEN agent if you previously added the Hyper-V agent. 21 Click Install to begin the installation. After several minutes a success message appears. 22 Click Next. 23 Click Finish. 24 Verify that the installation is successful. What to do next For high-availability, you can install and configure a redundant agent for your endpoint.
Installing vRealize Automation 4 Property Description username The username representing administrator-level credentials for the XenServer or Hyper-V server the agent communicates with. password The password for the administrator-level username. Click Start > Administrative Tools > Services and restart the vRealize Automation Agent – agentname service.
Installing vRealize Automation XenDesktop Requirements The name given to the XenServer Host on your XenDesktop server must match the UUID of the Xen Pool in XenCenter. See Set the XenServer Host Name for more information. Each XenDesktop DDC server with which you intend to register machines must be configured in the following way: n The group/catalog type must be set to Existing for use with vRealize Automation.
Installing vRealize Automation Prerequisites n The IaaS components, including the Manager Service and Website, are installed. n Verify that your environment meets the XenDesktop Requirements. n Download the IaaS Installer. Procedure 1 Right-click the setup__vra-va-hostname.domain.name@5480.exe setup file and select Run as administrator. 2 Click Next. 3 Accept the license agreement and click Next.
Installing vRealize Automation 13 Enter an identifier for this agent in the Agent name text box. Maintain a record of the agent name, credentials, endpoint name, and platform instance for each agent. You need this information to configure endpoints and to add hosts in the future. Important Do not duplicate agent names unless you are installing redundant, identically configured agents for high availability.
Installing vRealize Automation 22 Click Next. 23 Click Finish. 24 Verify that the installation is successful. 25 (Optional) Add multiple agents with different configurations and an endpoint on the same system. What to do next For high-availability, you can install and configure a redundant agent for your endpoint. Install each redundant agent on a separate server, but name and configure the agents identically.
Installing vRealize Automation MS PowerShell Execution Policy is set to RemoteSigned or Unrestricted. See Set the PowerShell Execution Policy to RemoteSigned. For more information about PowerShell Execution Policy, run help about_signing or help SetExecutionPolicy at the PowerShell command prompt. Install the Citrix Agent External provisioning integration (EPI) PowerShell agents integrate external systems into the machine provisioning process.
Installing vRealize Automation 10 Click Next. 11 Select EPIPowerShell from the Agent type list. 12 Enter an identifier for this agent in the Agent name text box. Maintain a record of the agent name, credentials, endpoint name, and platform instance for each agent. You need this information to configure endpoints and to add hosts in the future. Important Do not duplicate agent names unless you are installing redundant, identically configured agents for high availability.
Installing vRealize Automation 20 Click Install to begin the installation. After several minutes a success message appears. 21 Click Next. 22 Click Finish. 23 Verify that the installation is successful. 24 (Optional) Add multiple agents with different configurations and an endpoint on the same system. What to do next For high-availability, you can install and configure a redundant agent for your endpoint. Install each redundant agent on a separate server, but name and configure the agents identically.
Installing vRealize Automation Table 4‑18. EPI Agents for Visual Scripting Requirement Description Credentials Credentials under which the agent will run must have administrative access to the installation host. Microsoft PowerShell Microsoft PowerShell must be installed on the installation host prior to agent installation: The version required depends on the operating system of the installation host and might have been installed with that operating system. Visit http://support.microsoft.
Installing vRealize Automation 5 Select Custom Install on the Installation Type page. 6 Select Component Selection on the Installation Type page. 7 Accept the root install location or click Change and select an installation path. 8 Click Next. 9 Log in with administrator privileges for the Windows services on the installation machine. The service must run on the same installation machine. 10 Click Next. 11 Select EPIPowerShell from the Agent type list.
Installing vRealize Automation 15 Click Test to verify connectivity to each host. 16 Select the EPI type. 17 Enter the fully qualified domain name of the managed server in the EPI Server text box. 18 Click Add. 19 Click Next. 20 Click Install to begin the installation. After several minutes a success message appears. 21 Click Next. 22 Click Finish. 23 Verify that the installation is successful. 24 (Optional) Add multiple agents with different configurations and an endpoint on the same system.
Installing vRealize Automation Procedure 1 Right-click the setup__vra-va-hostname.domain.name@5480.exe setup file and select Run as administrator. 2 Click Next. 3 Accept the license agreement and click Next. 4 On the Log in page, supply administrator credentials for the vRealize Automation appliance and verify the SSL Certificate. a Type the user name, which is root, and the password. The password is the password that you specified when you deployed the vRealize Automation appliance.
Installing vRealize Automation 13 Configure a connection to the Manager Service component. Option Description If you are using a load balancer Enter the fully qualified domain name and port number of the load balancer for the Manager Service component. For example, manager-load-balancer.eng.mycompany.com:443. IP addresses are not recognized. With no load balancer Enter the fully qualified domain name and port number of the machine where you installed the Manager Service component.
Configure Access to the Default Tenant 5 You must grant your team access rights to the default tenant before they can begin configuring vRealize Automation. The default tenant is automatically created when you configure single sign-on in the installation wizard. You cannot edit the tenant details, such as the name or URL token, but you can create new local users and appoint additional tenant or IaaS administrators at any time.
Installing vRealize Automation 7 Assign your local users to the tenant administrator and IaaS administrator roles. a Enter a username in the Tenant administrators search box and press Enter. b Enter a username in the IaaS administrators search box and press Enter. The IaaS administrator is responsible for creating and managing your infrastructure endpoints in vRealize Automation. Only the system administrator can grant this role. 8 Click Update.
Replacing Self-Signed Certificates with Certificates Provided by an Authority 6 If you installed vRealize Automation with self-signed certificates, you might want to replace them with certificates provided by a certificate authority before deploying to production. For more information about updating certificates, see Managing vRealize Automation. VMware, Inc.
Troubleshooting 7 vRealize Automation troubleshooting provides procedures for resolving issues you might encounter when installing or configuring vRealize Automation.
Installing vRealize Automation Installation Logs Installation logs are in the following locations. Log Default Location Installation Logs C:\Program Files (x86)\vCAC\InstallLogs C:\Program Files (x86)\VMware\vCAC\Server\ConfigTool\Log WAPI Installation Logs C:\Program Files (x86)\VMware\vCAC\Web API\ConfigTool\Logfilename WapiConfiguration IaaS Logs IaaS logs are in the following locations. Log Default Location Website Logs C:\Program Files (x86)\VMware\vCAC\Server\Website\Logs Repository Lo
Installing vRealize Automation Rolling Back a Failed Installation When an installation fails and rolls back, the system administrator must verify that all required files have been uninstalled before starting another installation. Some files must be uninstalled manually. Roll Back a Minimal Installation A system administrator must manually remove some files and revert the database to completely uninstall a failed vRealize Automation IaaS installation.
Installing vRealize Automation Procedure 1 If the following components are present, uninstall them with the Windows uninstaller. n vRealize Automation Server n vRealize Automation WAPI Note If you see the following message, restart the machine and then follow this procedure: Error opening installation log file. Verify that the specified log file location exists and it is writable.
Installing vRealize Automation 3 Click Create support bundle. 4 Click Download and save the file on your system. You can use the support bundle to troubleshoot issues on your own or to send to your VMware support representative. General Installation Troubleshooting The troubleshooting topics for vRealize Automation appliances provide solutions to potential installationrelated problems that you might encounter when using vRealize Automation.
Installing vRealize Automation Solution For each vRealize Automation appliance server and all Windows servers where the IaaS components will be installed, enable time synchronization as described in the following topics: n Enable Time Synchronization on the vRealize Automation Appliance n Enable Time Synchronization on the Windows Server For an overview of timekeeping for vRealize Automation, see Time Synchronization.
Installing vRealize Automation Problem If a certificate issue occurs with vcac-config.exe when upgrading a security certificate, you might see the following message: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel You can find more information about the cause of the issue by using the following procedure. Solution 1 Open the vcac-config.exe.
Installing vRealize Automation 5 If your proxy server requires credentials, enter the user name and password. 6 Click Save Settings. What to do next Configuring to use a proxy might affect VMware Identity Manager user access. To correct the issue, see Proxy Prevents VMware Identity Manager User Log In. Proxy Prevents VMware Identity Manager User Log In Configuring to use a proxy might prevent VMware Identity Manager users from logging in.
Installing vRealize Automation Problem Installers do not download when running setup__vra-va-hostname.domain.name.exe. Cause n Network connectivity issues when connecting to the vRealize Automation appliance machine. n Not able to connect to the vRealize Automation appliance machine because the machine cannot be reached or it cannot respond before the connection times out. Solution 1 Verify that you can connect to the vRealize Automation appliance by typing the following URL in a Web browser.
Installing vRealize Automation Read and write permission is required and the owner and group for the file must be vcac. 3 If the output you see is different, change the permissions or ownership of the file as needed. What to do next Log in to the Tenant page to verify that you can log in without error.
Installing vRealize Automation Problem You see authorization errors when using IaaS features. Cause Authorization errors can occur when IaaS does not recognize security certificates from other components. Solution 1 Open a command prompt as an administrator and navigate to the Cafe directory at \Server\Model Manager Data\Cafe, typically C:\Program Files (x86)\VMware\vCAC\Server\Model Manager Data\Cafe. 2 Type a command of the form Vcac-Config.
Installing vRealize Automation Problem An inaccurate error message indicating that user settings have not been saved appears during IaaS installation. Cause Communication or network problems can cause this message to appear erroneously. Solution Ignore the error message and proceed with the installation. This message should not cause the setup to fail.
Installing vRealize Automation 4 Click Save. 5 Rerun the Prerequisite Checker. Failed to Install Model Manager Data and Web Components Your vRealize Automation installation can fail if the IaaS installer is unable to save the Model Manager Data component and Web component. Problem Your installation fails with the following message: The IaaS installer failed to save the Model Manager Data and Web components. Cause The failure has several potential causes.
Installing vRealize Automation n Certificate Name Mismatch This error can occur when the certificate is issued to a particular name and a different name or IP address is used. You can suppress the certificate name mismatch error during installation by selecting Suppress certificate mismatch. You can also use the Suppress certificate mismatch option to ignore remote certificate revocation list match errors. n Invalid Certificate Open Microsoft Management Console with the command mmc.exe.
Installing vRealize Automation 2 Locate the reference code in the error message. For example, c0DD0C01. 3 Search for the reference code in the log file to locate the associated entry. 4 Review the entries that appear above and below the associated entry to troubleshoot the problem. The associated log entry does not specifically call out the source of the problem. Uninstalling a Proxy Agent Fails Removing a proxy agent can fail if Windows Installer Logging is enabled.
Installing vRealize Automation Solution 1 Launch Windows Server Manager to enable DTC on all vRealize servers and associated SQL servers. In Windows 7, navigate Start > Administrative Tools > Component Services. Note Ensure that all Windows servers have unique SIDs for MSDTC configuration. 2 Open all nodes to locate the local DTC, or the clustered DTC if using a clustered system. Navigate Component Services > Computers > My Computer > Distributed Transaction Coordinator.
Installing vRealize Automation Cause When you clone an IaaS node that has MS DTC installed, then both clones use the same unique identifier for MS DTC. Communication between the nodes fails. Solution 1 Open an Administrator command prompt. 2 Run the following command: msdtc -uninstall 3 Reboot the virtual machine. 4 Open a separate command prompt and run the following command: msdtc -install . Email Customization Behavior Has Changed In vRealize Automation 6.
Installing vRealize Automation Troubleshooting Log-In Errors The troubleshooting topics for log-in errors for vRealize Automation provide solutions to potential installation-related problems that you might encounter when using vRealize Automation. Attempts to Log In as the IaaS Administrator with Incorrect UPN Format Credentials Fails with No Explanation You attempt to log in to vRealize Automation as an IaaS administrator and are redirected to the login page with no explanation.
Installing vRealize Automation ERROR com.vmware.vcac.platform.service.rest.resolver.ApplicationExceptionHandler.handle UnexpectedException:820 - Failed trying to retrieve token: ns0:RequestFailed: Error occurred looking for solution user :: Insufficient access com.vmware.vim.sso.client.exception.
