Procedure
1
Log on to the VMware vSphere 6.x Web Client on the vCenter VM or Element Manager VM using
this URL account at:
https://FQDN / IP:9443/vsphere-client/
2
Log on using the [email protected] administrator account (username and password
are case-sensitive). For credentials information, refer to Converged Systems usernames and
passwords.
3
Select
Administration
>
Deployment
>
System Configuration
>
Nodes
.
4
Select Platform Services Controller 2's hostname, select the
Manage
tab and click
Settings
.
5
Under
Advanced
, select
Active Directory
, and click
Join….
6
Type the AD Domain,
User name
, and
Password
(with appropriate AD domain administrative
rights). Leave
Organizational unit
blank, and click
OK
.
7
Reboot
the Platform Service Controller Node under the
Actions
menu.
8
Repeat step 5 but select Platform Services Controller 1’s hostname.
9
Reboot the
Platform Service Controller Node
under the
Actions
menu.
Rebooting the (primary) Platform Service Controller Node 1 affects the following:
—
All running tasks on the node are cancelled or interrupted.
—
All users currently accessing this node temporarily lose connectivity.
—
If this node is a vCenter Server, features such as DRS and vMotion will temporarily
become unavailable.
—
If this node is a PSC, services such as SSO, licensing and certificate, running on
this node will temporarily go down.
10
Select
Administration
>
Single Sign-On
>
Configuration
.
11
Select the
Identity Sources
tab, then click the green
+
icon to type the details for the AD domain
that is to be added.
12
Select
Active Directory
(Integrated Windows Authentication) under
Identity source type
.
13
Verify the
domain name
that was previously registered to the Platform Services Controller will be
assigned to this AD domain registration.
14
Select
Use machine account
and click
OK
.
15
The AD registration is complete. While logged into vCenter through the Web Client or vSphere
Client (6.0) as the [email protected] administrative user, you must assign
Administrator roles/permissions for domain user accounts or groups that will require access to
vCenter 6.x. By default, only the [email protected] administrator account can access
vCenter until additional permissions are explicitly assigned to domain users.
89
|
Managing VMware vCenter SSO for VMware vSphere 6.x
