Month: October 2013

vSphere 5.5 Install Pt. 16: vCenter SSL

Now that vCenter is fully installed, now it's time to replace the self-signed certificate for the vCenter service and Orchestrator. Since we've already replaced the other certificates (SSO, Inventory, etc.) this process is a piece of cake. If you haven't been following this series to the letter and have all...

vSphere 5.5 Install Pt. 15: Install vCenter

The previous 14 installments have all been leading up to this, installing vCenter. Yes, we are finally here. In this post we install vCenter, the windows vSphere client, fix profile driven storage, and configure vCenter to support a clustered SQL database. This post is not the end of the road,...

vSphere 5.5 Install Pt. 14: Create Databases

We are just one post away from installing the actual vCenter service! Now that the rest of the infrastructure is ready, we need to create a service account, databases and DSNs. After all of these steps are completed we can rejoice and very shortly have a working vCenter server. Remember...

vSphere 5.5 Install Pt. 13: Install Inventory Svc

The vCenter inventory service has two primary purposes in life. First, it's a cache of objects which the web client accesses. This cache enables the offloading of retrieving objects from the vCenter core service (vpxd). This can also lessen the load on your back-end database if the vCenter service isn't...

vSphere 5.5 Install Pt. 12: Configure SSO

Now that the SSO service and web client are installed, it's time to do a little SSO configuration. In this installment we will configure the SSO STS certificate chain, add an Active Directory identity and source, and delegate SSO administrative rights to a AD group. If you recall the vCenter...

vSphere 5.5 Install Pt. 11: Install Web Client

The web client is the new and strongly preferred mechanism to manage your vSphere environment. In fact, the Windows VI client now comes up with a big warning that it's going the way of the dodo bird when you launch it. I suspect in vSphere 6.0 the Windows VI client...

vSphere 5.5 Install Pt. 10: Replace SSO Certs

Just like replacing a hip joint, replacing vCenter SSO SSL certificates can induce some pain, is a bit complex, and the outcome can be questionable. The replacement process in SSO 5.5 is pretty much like that in 5.1, but now we have the VMware certificate automation tool and my vCenter...

vSphere 5.5 Install Pt. 9: Offline SSL Minting

Not everyone has an online Microsoft Certificate Authority, or maybe my toolkit script has issues in your environment. So in this installment we will go over manual SSL minting. By that I mean we will use my Toolkit script to create the CSRs, you will download the certificates yourself, then run my...

vSphere 5.5 Install Pt. 8: Online SSL Minting

In the last installment of the vSphere 5.5 series we installed the SSO service. Now that the Java JRE is installed (via the SSO installer), we have the tools ready to create our vCenter SSL certificates via an online Microsoft CA. If you don't have an online Microsoft CA that can...

vSphere 5.5 Install Pt. 7: Install SSO

Yes, seven parts into this series we can finally mount our handy dandy vCenter 5.5 ISO and start installing software. Hopefully I haven't lost anyone along the way with all of the background and SSL information. But with the complexities in vCenter 5.5 and all the moving parts, I think it's important...

vSphere 5.5 Install Pt. 6: Certificate Template

Now that you understand what type of SSL certificates you need and how many vCenter 5.5 requires, we need to create a Certificate Authority template that will mint proper certificates. You may very well be able to get away with the Microsoft "Web server" template, but it is missing a few...

vSphere 5.5 Install Pt. 5: SSL Deep Dive

Now that you've read up on upgrade best practices and SSO enhancements in the first four installments, we can get to the fun stuff! Understanding vCenter 5.5 SSL certificates. Ok maybe not fun for all, but fun to me. Last year in my 5.1 install series I just plowed right into...