Installing vRealize Automation vRealize Automation 7.1 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new edition. To check for more recent editions of this document, see http://www.vmware.com/support/pubs.
Installing vRealize Automation You can find the most up-to-date technical documentation on the VMware Web site at: http://www.vmware.com/support/ The VMware Web site also provides the latest product updates. If you have comments about this documentation, submit your feedback to: docfeedback@vmware.com Copyright © 2017 VMware, Inc. All rights reserved. Copyright and trademark information. VMware, Inc. 3401 Hillview Ave. Palo Alto, CA 94304 www.vmware.com 2 VMware, Inc.
Contents vRealize Automation Installation 7 Updated Information 9 1 vRealize Automation Installation Overview 11 Choosing Your Deployment Path 11 Minimal Deployment Overview 12 Enterprise Deployment Overview 13 vRealize Automation Installation Components 14 The vRealize Automation Appliance 15 Management Agents 15 vRealize Automation Infrastructure as a Service 15 2 Preparing for vRealize Automation Installation 19 Host Names and IP Addresses 19 Hardware and Virtual Machine Requirements 20 Browser Cons
Installing vRealize Automation Address Installation Failures 39 Set Up Credentials for Initial Content Configuration 40 Using the Installation Wizard for Enterprise Deployments 40 Run the Installation Wizard for an Enterprise Deployment 40 Installing the Management Agent 41 Synchronize Server Times 43 Run the Prerequisite Checker 44 Specify Enterprise Deployment Parameters 45 Create Snapshots Before You Begin the Installation 45 Finish the Installation 45 Address Installation Failures 46 Set Up Credentials
Contents Rolling Back a Failed Installation 122 Roll Back a Minimal Installation 122 Roll Back a Distributed Installation 123 Create a vRealize Automation Support Bundle 124 General Installation Troubleshooting 124 Installation or Upgrade Fails with a Load Balancer Timeout Error 124 Server Times Are Not Synchronized 125 Blank Pages May Appear When Using Internet Explorer 9 or 10 on Windows 7 Cannot Establish Trust Relationship for the SSL/TLS Secure Channel 126 125 Connect to the Network Through a Prox
Installing vRealize Automation 6 VMware, Inc.
vRealize Automation Installation vRealize Automation Installation explains how to install VMware vRealize ™ Automation. Note Not all features and capabilities of vRealize Automation are available in all editions. For a comparison of feature sets in each edition, see https://www.vmware.com/products/vrealize-automation/. Intended Audience This information is intended for experienced Windows or Linux system administrators who are familiar with virtual machine technology and data center operations.
Installing vRealize Automation 8 VMware, Inc.
Updated Information The following table lists the changes to Installing vRealize Automation for this product release. Revision Description EN-002088-04 Added Configure a Datastore Cluster permission to “vSphere Agent Requirements,” on page 98. EN-002088-03 n n Revised “Configure the Windows Services Account to Use SQL Authentication,” on page 95. Revised “vSphere Agent Requirements,” on page 98. EN-002088-02 Updates to IaaS Windows server prerequisites.
Installing vRealize Automation 10 VMware, Inc.
vRealize Automation Installation Overview 1 You can deploy vRealize Automation in a variety of configurations. To ensure success, familiarize yourself with the deployment and configuration options, and the sequence of tasks required. If you installed earlier versions of vRealize Automation, note the following changes before you begin. n This release of vRealize Automation includes the Installation Wizard that was introduced in vRealize Automation 7.0.
Installing vRealize Automation Table 1‑1. Choosing Your Installation Method Installation Method Details Installation Wizard The Installation Wizard provides the quickest installation path for most deployments. You can choose a minimal or enterprise deployment to support distributed components with or without load balancers. Complete and verify all prerequisites before you start the wizard. For more information, see Chapter 2, “Preparing for vRealize Automation Installation,” on page 19.
Chapter 1 vRealize Automation Installation Overview Users vRealize Automation Appliance Optional Infrastructure as a Service (IaaS) Agent 1 SQL Database Cluster IaaS Server Web, MMD, Manager Service DEM Agent 2, 3,... DEM Worker 1 DEM 2, 3,... Enterprise Deployment Overview The system administrator can deploy and install multiple instances of the vRealize Automation appliance and individual IaaS components for scale, redundancy, high availability, and disaster recovery.
Installing vRealize Automation Figure 1‑1. Deployment Configuration for Enterprise Installations Users Load Balancer for vRealize Automation Appliance vRealize Automation Appliance vRealize Automation Appliance Infrastructure as a Service (IaaS) Load Balancer for IaaS Web server Agent 1 SQL Database Cluster Website Component 1 Model Manager Data (only one instance allowed) Website Component 2, 3,...
Chapter 1 vRealize Automation Installation Overview The vRealize Automation Appliance The vRealize Automation appliance is a preconfigured Linux virtual appliance that contains the vRealize Automation server. vRealize Automation is delivered as an open virtualization .ovf or .ova file. You deploy the virtual appliance on existing virtualized infrastructure.
Installing vRealize Automation Manager Service The Manager Service is a Windows service that coordinates communication between IaaS Distributed Execution Managers, the database, agents, proxy agents, and SMTP. Your IaaS deployment requires that only one Windows machine actively run the Manager Service. For backup or high availability, you may deploy additional Windows machines where you manually start the Manager Service if the active service stops.
Chapter 1 vRealize Automation Installation Overview Integration Agents Virtual desktop integration (VDI) PowerShell agents allow vRealize Automation to integrate with external virtual desktop systems. Currently, virtual machines that vRealize Automation provisions can be registered with XenDesktop on a Citrix Desktop Delivery Controller (DDC) and their owners can access the XenDesktop Web Interface from vRealize Automation.
Installing vRealize Automation 18 VMware, Inc.
Preparing for vRealize Automation Installation 2 System Administrators install vRealize Automation into their existing virtualization environments. Before you begin an installation, prepare the deployment environment to meet system requirements.
Installing vRealize Automation n A best practice is to reserve and use static IP addresses for all vRealize Automation appliances and IaaS Windows servers. vRealize Automation supports DHCP, but static IP addresses are recommended for long-term deployments such as production environments. n You apply an IP address to the vRealize Automation appliance during OVF or OVA deployment. n For the IaaS Windows servers, you follow the usual operating system process.
Chapter 2 Preparing for vRealize Automation Installation Windows Server Requirements The virtual or physical Windows machine that hosts the IaaS components must meet configuration requirements for the IaaS database, the IaaS server components, the IaaS Manager Service, and Distributed Execution Managers. The Installation Wizard runs a vRealize Automation prerequisite checker on all IaaS Windows servers to ensure that they meet the configuration necessary for installation.
Installing vRealize Automation Table 2‑2. IaaS Requirements Area Requirements Host Configuration The following components must be installed on the host before installing IaaS: n Microsoft .NET Framework 4.5.2 or later. n Microsoft PowerShell 2.0 (included with Windows Server 2008 R2 SP1 and later) or Microsoft PowerShell 3.0 on Windows Server 2012 R2. Microsoft Internet Information Services 7.5.
Chapter 2 Preparing for vRealize Automation Installation IaaS Manager Service Your environment must meet some general requirements that support the installation of the IaaS Manager Service. n Microsoft .NET Framework 4.5.2 is installed. n Microsoft PowerShell 2.0, 3.0, or 4.0. Some vRealize Automation upgrades or migrations might require you to install an older or newer PowerShell version, in addition to the one that you are currently running. n SecondaryLogOnService is running.
Installing vRealize Automation Openstack and PowerVC Requirements The machines on which you install your DEMs must meet certain requirements to communicate with and collect data from your Openstack or PowerVC instance. Table 2‑4. DEM Host Requirements Your Installation Requirements All In Windows Registry, enable TLS v1.2 support for .NET framework. For example: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFram ework\v4.0.30319] "SchUseStrongCrypto"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\
Chapter 2 Preparing for vRealize Automation Installation n The MS PowerShell Execution Policy must be set to RemoteSigned or Unrestricted. For information on PowerShell Execution Policy issue one of the following commands at Power-Shell command prompt: help about_signing help Set-ExecutionPolicy n If all DEM Workers within the instance are not on compute resources meeting these requirements, Skills must be used to direct all SCVMM-related workflows to those that are.
Installing vRealize Automation Table 2‑5. Incoming Ports for the vRealize Automation appliance (Continued) Port Protocol Comments 5480 TCP Access to the virtual appliance Web management interface. 5480 TCP Used by the Management Agent. 5488, 5489 TCP Internally used by the vRealize Automation appliance for updates. 4369, 25672,5671,5672 TCP RabbitMQ messaging. 8230, 8280, 8281 TCP Internal vRealize Orchestrator instance.
Chapter 2 Preparing for vRealize Automation Installation Table 2‑7. Incoming Ports for Infrastructure as a Service Components (Continued) Component Port Protocol Comments Infrastructure Endpoint Hosts 443 TCP Communication with IaaS components and vRealize Automation appliance over HTTPS.
Installing vRealize Automation Virtual Appliance Installation To deploy the vRealize Automation appliance, you must have the appropriate privileges on the deployment platform (for example, vSphere administrator credentials). During the deployment process, you specify the password for the virtual appliance administrator account. This account provides access to the vRealize Automation appliance management console from which you configure and administer the virtual appliances.
Chapter 2 Preparing for vRealize Automation Installation Model Manager Server Specifications Specify the Model Manager server name by using a fully qualified domain name (FQDN). Do not use an IP address to specify the server. Security vRealize Automation uses SSL to ensure secure communication among components. Passphrases are used for secure database storage. For more information see “Certificate Trust Requirements in a Distributed Deployment,” on page 63.
Installing vRealize Automation Table 2‑10. Sample Certificate Values and Commands (openssl) Certificate Authority Provides Command Virtual Appliance Entries RSA Private Key openssl pkcs12 -in path _to_.pfx certificate_file -nocerts -out key.pem RSA Private Key PEM File openssl pkcs12 -in path _to_.pfx certificate_file -clcerts -nokeys -out cert.pem Certificate Chain (Optional) Pass Phrase n/a Pass Phrase Security Passphrase vRealize Automation uses security passphrases for database security.
Installing vRealize Automation with the Installation Wizard 3 The vRealize Automation Installation Wizard provides a simple and fast way to install minimal or enterprise deployments. Before you launch the wizard, you deploy a vRealize Automation appliance and configure IaaS Windows servers to meet prerequisites. The Installation Wizard appears the first time you log in to the newly deployed vRealize Automation appliance. n To stop the wizard and return later, click Logout.
Installing vRealize Automation 6 Enter a unique virtual appliance name according to the IT naming convention of your organization in the Name text box, select the datacenter and location to which you want to deploy the virtual appliance, and click Next. 7 Follow the prompts until the Disk Format page appears. 8 Verify on the Disk Format page that enough space exists to deploy the virtual appliance and click Next. 9 Follow the prompts to the Properties page.
Chapter 3 Installing vRealize Automation with the Installation Wizard 13 e Power on the vRealize Automation appliance. f Wait for the machine to start, which might take up to 5 minutes. Open a command prompt and ping the FQDN to verify that the fully qualified domain name can be resolved against the IP address of vRealize Automation appliance.
Installing vRealize Automation 11 Proceed through the next screens, supplying the requested information to configure your deployment components, including the Web server, Manager Service, Distributed Execution Manager, vSphere proxy agent, and certificate information. Additional information is available from the Help buttons.
Chapter 3 Installing vRealize Automation with the Installation Wizard Download and Install a Management Agent An administrator downloads and installs the Management Agent on the IaaS machine in your deployment. The Management Agent must be installed on the IaaS server but does not need to be installed on the SQL database server if it is separate.
Installing vRealize Automation 9 Text box Input Management Site server certificate The SHA1 fingerprint for the Management Site Service certificate. The Management Site Service is hosted on the vRealize Automation appliance. Sample SHA1 fingerprint: DFF5FA0886DA2920D227ADF8BC9CDE4EF13EEF78. Load Click Load to load the default fingerprint.
Chapter 3 Installing vRealize Automation with the Installation Wizard Procedure 1 Select an option from the Time Sync Mode menu. Option Action Use Time Server Select Use Time Server from the Time Sync Mode menu to use Network Time Protocol . For each time server that you are using, enter the IP address or the host name in the Time Server text box. Use Host Time Select Use Host Time from the Time Sync Mode menu to use VMware Tools time synchronization.
Installing vRealize Automation Specify Minimal Deployment Parameters Use the vRealize Automation Installation Wizard to enter configuration settings for the minimal deployment components. Prerequisites Procedure u Follow the Installation Wizard pages to enter vRealize Automation appliance and IaaS Windows server FQDNs, account credentials, default tenant password, and other settings.
Chapter 3 Installing vRealize Automation with the Installation Wizard 3 Enter the product license key and click Next. 4 Accept or change the default telemetry settings and click Next. 5 Click Next. 6 Click Finish. The installation starts. Depending on your network configuration, installation can take between fifteen minutes and one hour. A confirmation message appears when the installation finishes. What to do next You are now ready to configure your deployment.
Installing vRealize Automation Set Up Credentials for Initial Content Configuration Optionally, you can start an initial content workflow for a vSphere endpoint. The process uses a local user called configurationadmin that is granted administrator rights. Procedure 1 Create and enter a password for the configurationadmin account in the Password text box. 2 Reenter the password in the Confirm password text box. Make a note of the password for later use. 3 Click Create Initial Content. 4 Click Next.
Chapter 3 Installing vRealize Automation with the Installation Wizard Prerequisites n Verify that you have met the prerequisites described in Chapter 2, “Preparing for vRealize Automation Installation,” on page 19 n “Deploy the vRealize Automation Appliance,” on page 65. Procedure 1 Open the vRealize Automation appliance in a Web browser. Use the fully qualified domain name (FQDN).
Installing vRealize Automation Download and Install a Management Agent An administrator downloads and installs a Management Agent on IaaS machines in your deployment. The Management Agent must be installed on all IaaS servers except for those that are used exclusively for your MS SQL database. The Management Agent registers IaaS nodes with the vRealize Automation appliance, automates the installation and management of IaaS components, and collects support and telemetry information.
Chapter 3 Installing vRealize Automation with the Installation Wizard 9 Text box Input Management Site server certificate The SHA1 fingerprint for the Management Site Service certificate. The Management Site Service is hosted on the vRealize Automation appliance. Sample SHA1 fingerprint: DFF5FA0886DA2920D227ADF8BC9CDE4EF13EEF78. Load Click Load to load the default fingerprint.
Installing vRealize Automation Procedure 1 Select an option from the Time Sync Mode menu. Option Action Use Time Server Select Use Time Server from the Time Sync Mode menu to use Network Time Protocol . For each time server that you are using, enter the IP address or the host name in the Time Server text box. Use Host Time Select Use Host Time from the Time Sync Mode menu to use VMware Tools time synchronization.
Chapter 3 Installing vRealize Automation with the Installation Wizard Specify Enterprise Deployment Parameters Use the vRealize Automation Installation Wizard to enter configuration settings for the enterprise deployment components. Prerequisites Procedure u Follow the Installation Wizard pages to enter vRealize Automation appliance and IaaS Windows server FQDNs, account credentials, default tenant password, and other settings.
Installing vRealize Automation 3 Click Next. 4 Click Finish. The installation starts. Depending on your network configuration, installation can take between fifteen minutes and one hour. A confirmation message appears when the installation finishes. What to do next You are now ready to configure your deployment. Address Installation Failures When you install from the Installation Details page, you are informed of any issues that are preventing the installation from finishing.
Chapter 3 Installing vRealize Automation with the Installation Wizard Set Up Credentials for Initial Content Configuration Optionally, you can start an initial content workflow for a vSphere endpoint. The process uses a local user called configurationadmin that is granted administrator rights. Procedure 1 Create and enter a password for the configurationadmin account in the Password text box. 2 Reenter the password in the Confirm password text box. Make a note of the password for later use.
Installing vRealize Automation 48 VMware, Inc.
The Standard vRealize Automation Installation Interfaces 4 After running the Installation Wizard, you might need or want to perform certain installation tasks manually, through the standard interfaces. The Installation Wizard described in Chapter 3, “Installing vRealize Automation with the Installation Wizard,” on page 31 is your primary tool for new vRealize Automation installations. However, after you run the wizard, some operations still require the older, manual installation process.
Installing vRealize Automation Print out a copy of the checklist and use it to track your work as you complete the installation. Complete the tasks in the order in which they are given. Table 4‑1. Minimal Deployment Checklist Task Details Plan and prepare the installation environment and verify that all installation prerequisites are met.
Chapter 4 The Standard vRealize Automation Installation Interfaces 6 Enter a unique virtual appliance name according to the IT naming convention of your organization in the Name text box, select the datacenter and location to which you want to deploy the virtual appliance, and click Next. 7 Follow the prompts until the Disk Format page appears. 8 Verify on the Disk Format page that enough space exists to deploy the virtual appliance and click Next. 9 Follow the prompts to the Properties page.
Installing vRealize Automation 13 e Power on the vRealize Automation appliance. f Wait for the machine to start, which might take up to 5 minutes. Open a command prompt and ping the FQDN to verify that the fully qualified domain name can be resolved against the IP address of vRealize Automation appliance. Enable Time Synchronization on the vRealize Automation Appliance Clocks on the vRealize Automation server and Windows servers must be synchronized to ensure a successful installation.
Chapter 4 The Standard vRealize Automation Installation Interfaces 2 Continue past the certificate warning. 3 Log in with user name root and the password you specified when you deployed vRealize Automation appliance. 4 Select vRA Settings > Host Settings. Option Action Resolve Automatically Select Resolve Automatically to specify the name of the current host for the vRealize Automation appliance. Update Host For new hosts, select Update Host.
Installing vRealize Automation 5 Select the certificate type from the Certificate Action menu. If you are using a PEM-encoded certificate, for example for a distributed environment, select Import. Certificates that you import must be trusted and must also be applicable to all instances of vRealize Automation appliance and any load balancer through the use of Subject Alternative Name (SAN) certificates.
Chapter 4 The Standard vRealize Automation Installation Interfaces 10 Click Services and verify that services are registered. Depending on your site configuration, this can take about 10 minutes. Note You can log in to the appliance and run tail -f /var/log/vcac/catalina.out to monitor startup of the services. 11 Enter your license information. a Click vRA Settings > Licensing. b Click Licensing.
Installing vRealize Automation 2 Type the following command to navigate to the VMware Tools directory. cd C:\Program Files\VMware\VMware Tools 3 Type the command to display the timesync status. VMwareToolboxCmd.exe timesync status 4 If timesync is disabled, type the following command to enable it. VMwareToolboxCmd.exe timesync enable IaaS Certificates vRealize Automation IaaS components use certificates and SSL to secure communications between components.
Chapter 4 The Standard vRealize Automation Installation Interfaces Download the vRealize Automation IaaS Installer To install IaaS on your minimal virtual or physical Windows server, you download a copy of the IaaS installer from the vRealize Automation appliance. If you see certificate warnings during this process, continue past them to finish the installation. Prerequisites n Microsoft .NET Framework 4.5.2 or later. You can download the .NET installer from the same Web page as the IaaS installer.
Installing vRealize Automation 7 Select Complete Install on the Installation Type page if you are creating a minimal deployment and click Next. Check Prerequisites The Prerequisite Checker verifies that your machine meets IaaS installation requirements. Prerequisites “Select the Installation Type,” on page 57. Procedure 1 2 Complete the Prerequisite Check. Option Description No errors Click Next. Noncritical errors Click Bypass.
Chapter 4 The Standard vRealize Automation Installation Interfaces 5 Select the authentication method. u Select Use Windows authentication if you want to create the database using the Windows credentials of the current user. The user must have SQL sys_admin privileges. u Deselect Use Windows authentication if you want to create the database using SQL authentication. Type the User name and Password of the SQL Server user with SQL sys_admin privileges on the SQL server instance.
Installing vRealize Automation 3 Click Download to retrieve the certificate from the vRealize Automation appliance. You can click View Certificate to view the certificate details. 4 Select Accept Certificate to install the SSO certificate. 5 In the SSO Administrator panel, type administrator in the User name text box and the password you defined for this user when you configured SSO in Password and Confirm password.
Chapter 4 The Standard vRealize Automation Installation Interfaces Table 4‑2. Distributed Deployment Checklist Task Details Plan and prepare the installation environment and verify that all installation prerequisites are met. Chapter 2, “Preparing for vRealize Automation Installation,” on page 19 Plan for and obtain your SSL certificates.
Installing vRealize Automation Table 4‑3. Virtual Appliances and Appliance Database Component Description vRealize Automation appliance A preconfigured virtual appliance that deploys the vRealize Automation server. The server includes the vRealize Automation console, which provides a single portal for self-service provisioning and management of cloud services, as well as authoring and administration. Appliance Database Stores information required by the virtual appliances.
Chapter 4 The Standard vRealize Automation Installation Interfaces Certificate Trust Requirements in a Distributed Deployment For secure communication, vRealize Automation relies on certificates to create trusted relationships among components. The specific implementation of the certificates required to achieve this trust depends on your environment. To provide high availability and failover support, you might deploy load-balanced clusters of components.
Installing vRealize Automation 3 Open a Microsoft Management Console window on each of the applicable host machines. Note Actual paths and options in the Management Console may differ somewhat based on Windows versions and system configurations. a Select Add/Remove Snap-in. b Select Certificates. c Select Local Computer. d Open the certificate files that you imported previously and copy the thumb prints.
Chapter 4 The Standard vRealize Automation Installation Interfaces Table 4‑9. IaaS Website (Continued) Variable Value Example Username Password Table 4‑10. IaaS Model Manager Data Variable Value Example Host Name (FQDN) iaas-model-man.mycompany.com SSO service over HTTPS Outgoing Port (default) IP 192.168.1.107 Username Password Table 4‑11. IaaS Model Service Variable Value Example Host Name (FQDN) iaas-model-service.mycompany.com SSO service over HTTPS Outgoing Port (default) IP 192.168.
Installing vRealize Automation Procedure 1 Select File > Deploy OVF Template from the vSphere client. 2 Browse to the vRealize Automation appliance file you downloaded and click Open. 3 Click Next. 4 Click Next on the OVF Template Details page. 5 Accept the license agreement and click Next.
Chapter 4 The Standard vRealize Automation Installation Interfaces e n Wait for the machine to start, which might take up to 5 minutes. If you deployed the vRealize Automation appliance to vCloud using vCloud Director, vCloud might override the password that you entered during OVA deployment. To prevent the override, take the following steps. a After deploying in vCloud Director, click your vApp to view the vRealize Automation appliance.
Installing vRealize Automation Configuring Appliances for vRealize Automation After deploying your appliances and configuring load balancing, you configure the appliances for vRealize Automation. Configure the Primary vRealize Automation Appliance The vRealize Automation appliance is a preconfigured virtual appliance that deploys the vRealize Automation server and Web console (the user portal). It is delivered as an open virtualization format (OVF) template.
Chapter 4 The Standard vRealize Automation Installation Interfaces 6 Verify that the value in Current Time is correct. You can change the time zone as required from the Time Zone Setting page on the System tab. Configure the vRealize Automation Appliance To prepare the vRealize Automation appliance for use, a system administrator configures the host settings, generates an SSL certificate, and provides SSO connection information.
Installing vRealize Automation 5 Select the certificate type from the Certificate Action menu. If you are using a PEM-encoded certificate, for example for a distributed environment, select Import. Certificates that you import must be trusted and must also be applicable to all instances of vRealize Automation appliance and any load balancer through the use of Subject Alternative Name (SAN) certificates.
Chapter 4 The Standard vRealize Automation Installation Interfaces e Select the Administrator SSH login check box. Deselect the check box to disable SSH when finished. f Click Save Settings. 8 Configure the SSO settings. 9 Click Services. All services must be running before you can install a license or log in to the console. They usually start in about 10 minutes. Note You can also log in to the appliance and run tail -f /var/log/vcac/catalina.out to monitor service startup.
Installing vRealize Automation Configuring Additional Instances of the vRealize Automation Appliance The system administrator can deploy multiple instances of the vRealize Automation appliance to ensure redundancy in a high-availability environment. For each vRealize Automation appliance, you must enable time synchronization and add the appliance to a cluster.
Chapter 4 The Standard vRealize Automation Installation Interfaces Prerequisites n You must have one or more vRealize Automation appliance nodes already in the cluster, where one node is the primary node. See “Configure the Primary vRealize Automation Appliance,” on page 68. You can set a new node to be the primary node only after joining the new node to the cluster. n Verify that the load balancer is configured for use with the new vRealize Automation appliance.
Installing vRealize Automation Validate the Distributed Deployment After deploying additional instances of the vRealize Automation appliance, you should validate that you can access the clustered appliances. Procedure 1 In the load balancer management interface or configuration file, temporarily disable all nodes except the node that you are testing. 2 Confirm that you can log in to the vRealize Automation console by navigating to https://vcachostname.domain.name/vcac, where vcac-hostname.domain.
Chapter 4 The Standard vRealize Automation Installation Interfaces 5 Install Additional IaaS Website Components on page 84 The Website component provides access to infrastructure capabilities in the vRealize Automation Web console. The system administrator can install one or many instances of the Website component.
Installing vRealize Automation 7 Verify that the certificate and its chain is trusted. If the certificate is untrusted, you see the message, This CA root certificate is not trusted. Note You must resolve the trust issue before proceeding with the installation. If you continue, your deployment fails. 8 Restart IIS or open an elevated command prompt window and type iisreset. What to do next “Download the vRealize Automation IaaS Installer,” on page 76.
Chapter 4 The Standard vRealize Automation Installation Interfaces Choosing an IaaS Database Scenario vRealize Automation IaaS uses a Microsoft SQL Server database to maintain information about the machines it manages and its own elements and policies. Depending on your preferences and privileges, there are several procedures to choose from to create the IaaS database. Note You can enable secure SSL when creating or upgrading the SQL database.
Installing vRealize Automation 4 Review the database deployment scripts as needed. In particular, review the settings in the DBSettings section of CreateDatabase.sql and edit them if necessary. The settings in the script are the recommended settings. Only ALLOW_SNAPSHOT_ISOLATION ON and READ_COMMITTED_SNAPSHOT ON are required. 5 Execute the following command with the arguments described in the table. BuildDB.
Chapter 4 The Standard vRealize Automation Installation Interfaces 4 Edit CreateDatabase.sql and replace all instances of the variables in the table with the correct values for your environment. Table 4‑15. Database Values 5 Variable Value $(DBName) Name of the database, such as vra. Database names must consist of no more than 128 ASCII characters. $(DBDir) Path to the data directory for the database, excluding the final slash.
Installing vRealize Automation 4 On the Log in page, supply administrator credentials for the vRealize Automation appliance and verify the SSL Certificate. a Type the user name, which is root, and the password. The password is the password that you specified when you deployed the vRealize Automation appliance. b Select Accept Certificate. c Click View Certificate. Compare the certificate thumbprint with the thumbprint set for the vRealize Automation appliance.
Chapter 4 The Standard vRealize Automation Installation Interfaces 17 Complete the Prerequisite Check. Option Description No errors Click Next. Noncritical errors Click Bypass. Critical errors Bypassing critical errors causes the installation to fail. If warnings appear, select the warning in the left pane and follow the instructions on the right. Address all critical errors and click Check Again to verify. 18 Click Install.
Installing vRealize Automation n If you previously installed other components in this environment, verify that you know the passphrase that was created. See “Security Passphrase,” on page 30. n If you are using load balancers in your environment, verify that they meet the configuration requirements. Procedure 1 If using a load balancer, disable the other nodes under the load balancer, and verify that traffic is directed to the node that you want.
Chapter 4 The Standard vRealize Automation Installation Interfaces 16 (Optional) Click View Certificate, view the certificate, and click OK to close the information window. 17 (Optional) Select Suppress certificate mismatch to suppress certificate errors. The installation ignores certificate name mismatch errors as well as any remote certificate-revocation list match errors. This is a less secure option.
Installing vRealize Automation 12 13 Complete the Prerequisite Check. Option Description No errors Click Next. Noncritical errors Click Bypass. Critical errors Bypassing critical errors causes the installation to fail. If warnings appear, select the warning in the left pane and follow the instructions on the right. Address all critical errors and click Check Again to verify.
Chapter 4 The Standard vRealize Automation Installation Interfaces Procedure 1 If using a load balancer, disable the other nodes under the load balancer, and verify that traffic is directed to the node that you want. In addition, disable load balancer health checks until all vRealize Automation components are installed and configured. 2 Right-click the setup__vra-va-hostname.domain.name@5480.exe setup file and select Run as administrator. 3 Click Next. 4 Accept the license agreement and click Next.
Installing vRealize Automation 17 (Optional) Select Suppress certificate mismatch to suppress certificate errors. The installation ignores certificate name mismatch errors as well as any remote certificate-revocation list match errors. This is a less secure option. 18 Type IaaS server information in the IaaS Server text box. Option Description If you are using a load balancer Type the fully qualified domain name of the load balancer for the IaaS Website Server. For example, IaaS-load-balancer.eng.
Chapter 4 The Standard vRealize Automation Installation Interfaces Install the Active Manager Service The active Manager Service is a Windows service that coordinates communication between IaaS Distributed Execution Managers, the database, agents, proxy agents, and SMTP. Your IaaS deployment requires that only one Windows machine actively run the Manager Service.
Installing vRealize Automation 8 Accept the root install location or click Change and select an installation path. 9 Click Next. 10 Select Manager Service on the IaaS Server Custom Install page. 11 Type IaaS server information in the IaaS Server text box. Option Description If you are using a load balancer Type the fully qualified domain name of the load balancer for the IaaS Website Server. For example, IaaS-load-balancer.eng.mycompany.com.
Chapter 4 The Standard vRealize Automation Installation Interfaces 23 Click Next. 24 Click Install. 25 When the installation finishes, deselect Guide me through the initial configuration and click Next. 26 Click Finish. What to do next To ensure that the Manager Service you installed is the active instance, verify that the vCloud Automation Center Service is running and set it to "Automatic" startup type.
Installing vRealize Automation 5 On the Log in page, supply administrator credentials for the vRealize Automation appliance and verify the SSL Certificate. a Type the user name, which is root, and the password. The password is the password that you specified when you deployed the vRealize Automation appliance. b Select Accept Certificate. c Click View Certificate. Compare the certificate thumbprint with the thumbprint set for the vRealize Automation appliance.
Chapter 4 The Standard vRealize Automation Installation Interfaces 21 On the Server and Account Settings page, in the Server Installation Information text boxes, enter the user name and password of the service account user that has administrative privileges on the current installation server. The service account user must be one domain account that has privileges on each distributed IaaS server. Do not use local system accounts.
Installing vRealize Automation Install the Distributed Execution Managers A system administrator installs at least one DEM Worker and one DEM Orchestrator. The installation procedure is the same for both roles. DEM Orchestrators support active-active high availability. Typically, you install a single DEM Orchestrator on each Manager Service machine. You can install DEM Orchestrators and DEM workers on the same machine. Prerequisites “Download the vRealize Automation IaaS Installer,” on page 76.
Chapter 4 The Standard vRealize Automation Installation Interfaces 14 Enter a unique name that identifies this DEM in the DEM name text box. If you plan to use the migration tool, this name must exactly match the name you used in your vCloud Automation Center 5.2.3 installation. The name cannot include spaces and cannot exceed 128 characters. If you enter a previously used name, the following message appears: "DEM name already exists. To enter a different name for this DEM, click Yes.
Installing vRealize Automation Machine Manager\bin" /> [...] Procedure 1 Stop the DEM Worker. 2 Determine the installation path. 3 Update the DynamicOps.DEM.exe.config file. 4 Restart the DEM Worker. The default DEM Worker path is updated to the new folder.
Chapter 4 The Standard vRealize Automation Installation Interfaces Configure the Windows Services Account to Use SQL Authentication By default, the Windows service account accesses the database during run-time, even if you configured the database for SQL authentication. You can change run-time authentication from Windows to SQL. One reason to change run-time authentication might be when, for example, the database is on an untrusted domain.
Installing vRealize Automation Installing vRealize Automation Agents vRealize Automation uses agents to integrate with external systems. A system administrator can select agents to install to communicate with other virtualization platforms.
Chapter 4 The Standard vRealize Automation Installation Interfaces Choosing the Agent Installation Scenario The agents that you need to install depend on the external systems with which you plan to integrate. Table 4‑16. Choosing an Agent Scenario Integration Scenario Agent Requirements and Procedures Provision cloud machines by integrating with a cloud environment such as Amazon Web Services or Red Hat Enterprise Linux OpenStack Platform. You do not need to install an agent.
Installing vRealize Automation vSphere Agent Requirements vSphere endpoint credentials, or the credentials under which the agent service runs, must have administrative access to the installation host. Multiple vSphere agents must meet vRealize Automation configuration requirements.
Chapter 4 The Standard vRealize Automation Installation Interfaces Table 4‑17. Permissions Required for vSphere Agent to Manage vCenter Server Instance (Continued) Attribute Value Permission Advanced Change CPU Count Change Resource Extend Virtual Disk Disk Change Tracking Memory Modify Device Settings Rename Set Annotation (version 5.
Installing vRealize Automation 4 On the Log in page, supply administrator credentials for the vRealize Automation appliance and verify the SSL Certificate. a Type the user name, which is root, and the password. The password is the password that you specified when you deployed the vRealize Automation appliance. b Select Accept Certificate. c Click View Certificate. Compare the certificate thumbprint with the thumbprint set for the vRealize Automation appliance.
Chapter 4 The Standard vRealize Automation Installation Interfaces 14 Configure a connection to the Manager Website component. Option Description If you are using a load balancer Enter the fully qualified domain name and port number of the load balancer for the Manager Website component. For example, website-load-balancer.eng.mycompany.com:443. IP addresses are not recognized.
Installing vRealize Automation 3 (Optional) Enter DynamicOps.Vrm.VRMencrypt.exe VRMAgent.exe.config get to view the current configuration settings. The following is an example of the output of the command: managementEndpointName: VCendpoint doDeletes: True 4 (Optional) Enter the set managementEndpointName command to change the name of the endpoint you configured at installation. For example, DynamicOps.Vrm.VRMencrypt.exe VRMAgent.exe.config set managementEndpointName My Endpoint.
Chapter 4 The Standard vRealize Automation Installation Interfaces Hyper-V and XenServer Requirements Hyper-V Hypervisor proxy agents require system administrator credentials for installation. The credentials under which to run the agent service must have administrative access to the installation host. Administrator-level credentials are required for all XenServer or Hyper-V instances on the hosts to be managed by the agent.
Installing vRealize Automation 4 On the Log in page, supply administrator credentials for the vRealize Automation appliance and verify the SSL Certificate. a Type the user name, which is root, and the password. The password is the password that you specified when you deployed the vRealize Automation appliance. b Select Accept Certificate. c Click View Certificate. Compare the certificate thumbprint with the thumbprint set for the vRealize Automation appliance.
Chapter 4 The Standard vRealize Automation Installation Interfaces 15 Configure a connection to the Manager Website component. Option Description If you are using a load balancer Enter the fully qualified domain name and port number of the load balancer for the Manager Website component. For example, website-load-balancer.eng.mycompany.com:443. IP addresses are not recognized.
Installing vRealize Automation 3 Enter the set command to change a property, where property is one of the options shown in the table. Dynamic0ps.Vrm.VRMencrypt.exe VRMAgent.exe.config set property value If you omit value, the utility prompts you for a new value. 4 Property Description username The username representing administrator-level credentials for the XenServer or Hyper-V server the agent communicates with. password The password for the administrator-level username.
Chapter 4 The Standard vRealize Automation Installation Interfaces Each XenDesktop DDC server with which you intend to register machines must be configured in the following way: n The group/catalog type must be set to Existing for use with vRealize Automation. n The name of a vCenter Server host on a DDC server must match the name of thevCenter Server instance as entered in the vRealize Automation vSphere endpoint, without the domain.
Installing vRealize Automation 4 On the Log in page, supply administrator credentials for the vRealize Automation appliance and verify the SSL Certificate. a Type the user name, which is root, and the password. The password is the password that you specified when you deployed the vRealize Automation appliance. b Select Accept Certificate. c Click View Certificate. Compare the certificate thumbprint with the thumbprint set for the vRealize Automation appliance.
Chapter 4 The Standard vRealize Automation Installation Interfaces 15 Configure a connection to the Manager Website component. Option Description If you are using a load balancer Enter the fully qualified domain name and port number of the load balancer for the Manager Website component. For example, website-load-balancer.eng.mycompany.com:443. IP addresses are not recognized.
Installing vRealize Automation Although an EPI agent can generally interact with multiple servers, Citrix Provisioning Server requires a dedicated EPI agent. You must install one EPI agent for each Citrix Provisioning Server instance, providing the name of the server hosting it. The credentials under which the agent runs must have administrative access to the Citrix Provisioning Server instance. Consult the vRealize Automation Support Matrix for information about supported versions of Citrix PVS.
Chapter 4 The Standard vRealize Automation Installation Interfaces 7 Accept the root install location or click Change and select an installation path. 8 Click Next. 9 Log in with administrator privileges for the Windows services on the installation machine. The service must run on the same installation machine. 10 Click Next. 11 Select EPIPowerShell from the Agent type list. 12 Enter an identifier for this agent in the Agent name text box.
Installing vRealize Automation 20 Click Install to begin the installation. After several minutes a success message appears. 21 Click Next. 22 Click Finish. 23 Verify that the installation is successful. 24 (Optional) Add multiple agents with different configurations and an endpoint on the same system. What to do next For high-availability, you can install and configure a redundant agent for your endpoint.
Chapter 4 The Standard vRealize Automation Installation Interfaces Table 4‑18. EPI Agents for Visual Scripting Requirement Description Credentials Credentials under which the agent will run must have administrative access to the installation host. Microsoft PowerShell Microsoft PowerShell must be installed on the installation host prior to agent installation: The version required depends on the operating system of the installation host and might have been installed with that operating system.
Installing vRealize Automation 9 Log in with administrator privileges for the Windows services on the installation machine. The service must run on the same installation machine. 10 Click Next. 11 Select EPIPowerShell from the Agent type list. 12 Enter an identifier for this agent in the Agent name text box. Maintain a record of the agent name, credentials, endpoint name, and platform instance for each agent. You need this information to configure endpoints and to add hosts in the future.
Chapter 4 The Standard vRealize Automation Installation Interfaces 22 Click Finish. 23 Verify that the installation is successful. 24 (Optional) Add multiple agents with different configurations and an endpoint on the same system. Installing the WMI Agent for Remote WMI Requests A system administrator enables the Windows Management Instrumentation (WMI) protocol and installs the WMI agent on all managed Windows machines to enable management of data and operations.
Installing vRealize Automation 5 Select Custom Install on the Installation Type page. 6 Select Component Selection on the Installation Type page. 7 Accept the root install location or click Change and select an installation path. 8 Click Next. 9 Log in with administrator privileges for the Windows services on the installation machine. The service must run on the same installation machine. 10 Click Next. 11 Select WMI from the Agent type list.
Chapter 4 The Standard vRealize Automation Installation Interfaces 18 Click Install to begin the installation. After several minutes a success message appears. 19 Click Next. 20 Click Finish. 21 Verify that the installation is successful. 22 (Optional) Add multiple agents with different configurations and an endpoint on the same system. VMware, Inc.
Installing vRealize Automation 118 VMware, Inc.
vRealize Automation Post-Installation Tasks 5 After you install vRealize Automation, there are post-installation tasks that might need your attention.
Installing vRealize Automation Procedure 1 Log in to the vRealize Automation console as the system administrator of the default tenant. a b Navigate to the vRealize Automation console. Option Description With no load balancer https://vrealize-appliance-hostname.domain.name/vcac Log in with the user name administrator and the password you defined for this user when you configured SSO. 2 Select Administration > Tenants. 3 Click the name of the default tenant, vsphere.local.
Troubleshooting a vRealize Automation Installation 6 vRealize Automation troubleshooting provides procedures for resolving issues you might encounter when installing or configuring vRealize Automation.
Installing vRealize Automation Log Default Location Installation Logs C:\Program Files (x86)\vCAC\InstallLogs C:\Program Files (x86)\VMware\vCAC\Server\ConfigTool\Log WAPI Installation Logs C:\Program Files (x86)\VMware\vCAC\Web API\ConfigTool\Logfilename WapiConfiguration- IaaS Logs IaaS logs are in the following locations. Log Default Location Website Logs C:\Program Files (x86)\VMware\vCAC\Server\Website\Logs Repository Log C:\Program Files (x86)\VMware\vCAC\Server\Model Manager Web\Logs
Chapter 6 Troubleshooting a vRealize Automation Installation Procedure 1 If the following components are present, uninstall them with the Windows uninstaller. n vRealize Automation Agents n vRealize Automation DEM-Worker n vRealize Automation DEM-Orchestrator n vRealize Automation Server n vRealize Automation WAPI Note If you see the following message, restart the machine and then follow the steps in this procedure: Error opening installation log file.
Installing vRealize Automation Table 6‑1. Roll Back Failure Points Failure Point Action Installing Manager Service If present, uninstall vCloud Automation Center Server. Installing DEM-Orchestrator If present, uninstall the DEM Orchestrator . Installing DEM-Worker If present, uninstall all DEM Workers Installing an Agent If present, uninstall all vRealize Automation agents.
Chapter 6 Troubleshooting a vRealize Automation Installation Solution 1 Increase your load balancer timeout value to at least 100 seconds. For example, and depending on the load balancer you are using, edit the load balancer timeout setting in your ssl.conf, httpd.conf or other Web configuration file. 2 Rerun the installation or upgrade. Server Times Are Not Synchronized An installation might not succeed when IaaS time servers are not synchronized with the vRealize Automation appliance.
Installing vRealize Automation Cannot Establish Trust Relationship for the SSL/TLS Secure Channel You might receive the message "Cannot establish trust relationship for the SSL/TLS secure channel when upgrading security certificates for vCloud Automation Center." Problem If a certificate issue occurs with vcac-config.
Chapter 6 Troubleshooting a vRealize Automation Installation What to do next Configuring to use a proxy might affect VMware Identity Manager user access. To correct the issue, see “Proxy Prevents VMware Identity Manager User Log In,” on page 137. Console Steps for Initial Content Configuration There is an alternative to using the vRealize Automation installation interface to create the configuration administrator account and initial content.
Installing vRealize Automation Troubleshooting the vRealize Automation Appliance The troubleshooting topics for vRealize Automation appliances provide solutions to potential installationrelated problems that you might encounter when using your vRealize Automation appliances. Installers Fail to Download Installers fail to download from the vRealize Automation appliance. Problem Installers do not download when running setup__vra-va-hostname.domain.name.exe.
Chapter 6 Troubleshooting a vRealize Automation Installation Read and write permission is required and the owner and group for the file must be vcac. 3 If the output you see is different, change the permissions or ownership of the file as needed. What to do next Log in to the Tenant page to verify that you can log in without error.
Installing vRealize Automation Solution When failover occurs, follow these guidelines when configuring old versus new master nodes. n Before promoting another node to master, remove the previous master node from the load balancer pool of vRealize Automation appliance nodes. n To have vRealize Automation bring an old master node back to the cluster, let the old machine come online. Then, open the new master management console.
Chapter 6 Troubleshooting a vRealize Automation Installation Credentials Error When Running the IaaS Installer When you install IaaS components, you get an error when entering your virtual appliance credentials. Problem After providing credentials in the IaaS installer, an org.xml.sax.SAXParseException error appears. Cause You used incorrect credentials or an incorrect credential format. Solution u Ensure that you use the correct tenant and user name values.
Installing vRealize Automation IaaS Authentication Fails During IaaS Web and Model Management Installation When running the Prerequisite Checker, you see a message that the IIS authentication check has failed. Problem The message tells you that authentication is not enabled, but the IIS authentication check box is selected. Solution 1 Clear the Windows authentication check box. 2 Click Save. 3 Select the Windows authentication check box. 4 Click Save. 5 Rerun the Prerequisite Checker.
Chapter 6 Troubleshooting a vRealize Automation Installation n Certificate Name Mismatch This error can occur when the certificate is issued to a particular name and a different name or IP address is used. You can suppress the certificate name mismatch error during installation by selecting Suppress certificate mismatch. You can also use the Suppress certificate mismatch option to ignore remote certificate revocation list match errors.
Installing vRealize Automation Adding an XaaS Endpoint Causes an Internal Error When you attempt to create an XaaS endpoint, an internal error message appears. Problem Creation of an endpoint fails with the following internal error message, An internal error has occurred. If the problem persists, please contact your system administrator. When contacting your system administrator, use this reference: c0DD0C01. Reference codes are randomly generated and not linked to a particular error message.
Chapter 6 Troubleshooting a vRealize Automation Installation Solution 1 Launch Windows Server Manager to enable DTC on all vRealize servers and associated SQL servers. In Windows 7, navigate Start > Administrative Tools > Component Services. Note Ensure that all Windows servers have unique SIDs for MSDTC configuration. 2 Open all nodes to locate the local DTC, or the clustered DTC if using a clustered system. Navigate Component Services > Computers > My Computer > Distributed Transaction Coordinator.
Installing vRealize Automation 4 Open a separate command prompt and run the following command: msdtc -install . Email Customization Behavior Has Changed In vRealize Automation 6.0 or later, only notifications generated by the IaaS component can be customized by using the email template functionality from earlier versions.
Chapter 6 Troubleshooting a vRealize Automation Installation Cause The UPN entered must adhere to a yourname.admin@yourdomain format, for example if you log in using jsmith.admin@sqa.local as the user name but the UPN in the Active Directory is only set as jsmith.admin, the login fails. Solution To correct the problem change the userPrincipalName value to include the needed @yourdomain content and retry login. In this example the UPN name should be jsmith.admin@sqa.local.
Installing vRealize Automation Solution Prerequisites Configure vRealize Automation to access the network through a proxy server. See “Connect to the Network Through a Proxy Server,” on page 126. Procedure 1 Log in to the console of the vRealize Automation appliance as root. 2 Open the following file in a text editor. /etc/sysconfig/proxy 3 Update the NO_PROXY line to ignore the proxy server for VMware Identity Manager logins. NO_PROXY=vra-hostname For example: NO_PROXY="localhost, 127.0.0.1, vra.
Silent vRealize Automation Installation 7 vRealize Automation includes an option for scripted, silent installation. Silent installation uses an executable that references a text-based answer file, in which you preconfigure system FQDNs, account credentials, and other settings that you typically add throughout a conventional wizard-based or manual installation. Silent installation is useful for the following kinds of deployments.
Installing vRealize Automation 4 Add entries specific to your deployment in ha.properties, and save and close the file. Alternatively, you can save time by copying and modifying an ha.properties file from another deployment instead of editing the entire default file. 5 From the same directory, start the installation by running the following command. vra-ha-config.sh Installation might take up to an hour or more to complete, depending on the environment and size of the deployment.
Chapter 7 Silent vRealize Automation Installation Silent vRealize Automation Installation Answer File Silent vRealize Automation installations require that you prepare a text-based answer file in advance. All newly deployed vRealize Automation appliances contain a default answer file. /usr/lib/vcac/tools/install/ha.properties To perform a silent installation, you must use a text editor to customize the settings in ha.properties to the deployment that you want to install.
Installing vRealize Automation vRealize Automation Installation Command Line Basics The vRealize Automation installation command line interface has three basic operations. The basic operations display vRealize Automation node IDs, run commands, or display the help information. To show these operations at the console display, enter the following command without any options or qualifiers.
Index A account settings, specifying 58 agents choosing the installation scenario 97 configuring Hyper-V 105 configuring vSphere agents 101 configuring XenServer 105 enabling remote WMI requests 115 EPI Powershell 16 Hyper-V 102, 103 installation location and requirements 97 installing 96 installing WMI 115 installing XenDesktop 107 installing Citrix agents 110 installing EPI agent for Citrix 109 installing for Visual Basic scripting 113 installing the EPI agent for VB scripting 112 installing vSphere agen
Installing vRealize Automation Federal Information Processing Standard (FIPS) 133 FIPS (Federal Information Processing Standard) 133 H health checks 62 Hyper-V agent 102 proxy agent 102 requirements 103 Hyper-V agents, installing 103 hypervisor, requirements 103 I IaaS agents 16 download installer 76 IaaS administrators, creating 119 IaaS components installing 55 installing in a distributed configuration 74 registering 59 troubleshooting 130 IaaS components,definitions 61 IaaS installer downloading 57 tr
Index Log Insight 119 Log in errors, troubleshooting 136 login failure servers out of sync 125 troubleshooting 137 logs collecting 124 locations 121 Logs IaaS 121 troubleshooting 121 PowerVC, DEM requirements 24 Prerequisite Checker, run in Installation Wizard 37, 44 prerequisites browser considerations 20 checking 58 provisioning server 109 proxy 137 proxy agent, uninstall fails 134 proxy agents, installing and configuring for vSphere 97 M R machine request fails 134 Management Agent install 35, 42 in
Installing vRealize Automation trusted certificate issues 132 U uninstall, failed installation 122, 123 Uninstall, failed installation 122 updated information 9 use cases, silent installation 139 V vCloud Suite, licensing 7 VDI agent for XenDesktop, installing 106 virtual appliance time settings, with the Installation Wizard 36, 43 virtualization proxy agents 16 Visual Basic, scripting requirements 112 Visual Basic scripting installing EPI agents 113 installing the EPI agent 112 VMware Identity Manager 1