WilliamLam.com

  • About
    • About
    • Privacy
  • VMware Cloud Foundation
  • VKS
  • Homelab
    • Hardware Options
    • Hardware Reviews
    • Lab Deployment Scripts
    • Nested Virtualization
    • Homelab Podcasts
  • VMware Nostalgia
  • Apple

Ultimate automation guide to deploying VCSA 6.0 Part 2: Platform Services Controller Node

02.26.2015 by William Lam // 14 Comments

In this article, I will share alternative methods of deploying the first Platform Services Controller Node (PSCs) using the VCSA 6.0 appliance. If you are interested in deploying additional PSC instances joined to an existing SSO Domain, stay tune for Part 3 where this will be covered. Take a look at the various deployment methods below and their respective instructions for more details. If you are deploying using one of the scripts below, you will need to extract the contents of the VCSA ISO. If you are deploying to Workstation/Fusion, you will need to extract the VCSA ISO and add the .ova extension to the following file VMware-VCSA-all-6.0.0-2562643->vcsa->vmware-vcsa before deploying.
psc
Disclaimer: Though these alternative deployment options work, they are however not officially supported by VMware. Please use at your own risk.

Deploying to an existing vCenter Server using ovftool (shell script)

I have created a shell script called deploy_vcsa6_first_psc_to_vc.sh which requires using ovftool 4.1 (included in the VCSA ISO) to specify the appropriate OVF "guestinfo" properties for a PSC deployment. You will need to edit the script and modify several variables based on your environment.

Here is an example of executing the script:

vcsa-6.0-platform-service-controller-node-deployment

Deploying to an ESXi host using ovftool (shell script)

I have created a shell script called deploy_vcsa6_first_psc_to_esxi.sh which requires using ovftool 4.0 or greater to specify the appropriate OVF "guestinfo" properties for a PSC deployment. You will need to edit the script and modify several variables based on your environment. The behavior of this script is similar to the one above, except you are deploying directly to an ESXi host.

Deploying to an existing vCenter Server using ovftool (PowerCLI)

I have created a PowerCLI script called Deployment-PSC.ps1 which uses ovftool and specifies the appropriate OVF "guestinfo" properties for a PSC deployment. You will need to edit the script and modify several variables based on your environment.

Deploying to VMware Fusion & Workstation

To properly deploy the new VCSA 6.0, the proper OVF properties MUST be set prior to the booting of the VM. Since VMware Fusion and Workstation do not support OVF properties, you will need to manually deploy the VCSA, but not power it on. Once the deployment has finished, you will need to add the following entries to the VCSA's VMX file and replace it with your environment settings. Once you have saved your changes, you can then power on the VM and the configurations will then be read into the VM for initial setup.

guestinfo.cis.deployment.node.type = "infrastructure"
guestinfo.cis.vmdir.domain-name = "vghetto.local"
guestinfo.cis.vmdir.site-name = "vghetto"
guestinfo.cis.vmdir.password = "VMware1!"
guestinfo.cis.appliance.net.addr.family = "ipv4"
guestinfo.cis.appliance.net.addr = "192.168.1.60"
guestinfo.cis.appliance.net.pnid = "192.168.1.60"
guestinfo.cis.appliance.net.prefix = "24"
guestinfo.cis.appliance.net.mode = "static"
guestinfo.cis.appliance.net.dns.servers = "192.168.1.1"
guestinfo.cis.appliance.net.gateway = "192.168.1.1"
guestinfo.cis.appliance.root.passwd = "VMware1!"
guestinfo.cis.appliance.ssh.enabled = "true"

For more information, you can take a look at this article here.

Deploying using new scripted install (bonus)

As mentioned earlier, there is also a new scripted installer included inside of the VMware-VCSA ISO under /vcsa-cli-installer which supports Windows, Mac OS X and Linux, but must be connected directly to an ESXi host. There are several templates that are also included within the /vcsa-cli-installer/templates. I thought as a bonus I would also share the template I have been using to deploy the first PSC using a static IP Address which some of you may find useful.

{
    "__comments":
    [
        "William Lam - www.virtuallyghetto.com",
        "Example VCSA 6.0 1st Platform Service Controller Node Deployment w/Static IP Address"
    ],

    "deployment":
    {
        "esx.hostname":"192.168.1.200",
        "esx.datastore":"mini-local-datastore-1",
        "esx.username":"root",
        "esx.password":"vmware123",
        "deployment.network":"VM Network",
        "deployment.option":"infrastructure",
        "appliance.name":"psc-01",
        "appliance.thin.disk.mode":true
    },

    "vcsa":
    {
        "system":
        {
            "root.password":"VMware1!",
            "ssh.enable":true,
            "ntp.servers":"0.pool.ntp.org"
        },

        "sso":
        {
            "password":"VMware1!",
            "domain-name":"vghetto.local",
            "site-name":"virtuallyGhetto",
            "first-instance":true
        },

        "networking":
        {
            "ip.family":"ipv4",
            "mode":"static",
            "ip":"192.168.1.50",
            "prefix":"24",
            "gateway":"192.168.1.1",
            "dns.servers":"192.168.1.1",
            "system.name":"192.168.1.50"
        }
    }
}

The use the scripted installer, you just need to change into the appropriate OS platform directory (win32,mac or lin64) and there should be a binary called vcsa-deploy. To use this template, you just need to save the JSON to a file and then specify that as the first argument to vcsa-deploy utility.

Here is an example of deploying a PSC using the vcsa-deploy scripted installer.

vcsa-6.0-first-platform-service-controller-scripted-install

  • Part 0: Introduction
  • Part 1: Embedded Node
  • Part 2: Platform Services Controller Node
  • Part 3: Replicated Platform Services Controller Node
  • Part 4: vCenter Server Management Node

Categories // Automation, Fusion, OVFTool, VCSA, vSphere 6.0, Workstation Tags // fusion, ovftool, platform service controller, psc, sso, VCSA, vcva, vSphere 6.0, workstation

Automating Active Directory Identity Source & Default Domain in vSphere Web Client

01.05.2015 by William Lam // 4 Comments

Over the holiday break I learned about two awesome tidbits from my buddies Blair Fritz and Frank Buechsel who both work over in our GSS Organization. The first tidbit came from Blair who recently shared a newly published VMware KB 2063424 that provides both a Windows and Linux script to automate the setup of your Active Directory as an Identity Source within vSphere SSO. The reason this is so cool is that you no longer have to perform this additional manual step using the vSphere Web Client just to be able to start using your Active Directory as a source for authorization within your vSphere environment. In my opinion, this step should just happen automatically if your vCenter Server (applies to both VC for Windows and VCSA) is already joined to an Active Directory Domain.

UPDATE (01/15/19) - For vSphere 6.5 and 6.7, please refer to VMware KB 67304 for the updated package required to automate this configuration

active-directory-identity-source-and-default-domain-in-vsphere-web-client-0
Looking at the contents of the script, I have extracted the main parts of the script to create a quick snippet that can easily be integrated into my existing VCSA 5.5 Configuration script if you are interested in automating this particular configuration.

AD_DOMAIN=primp-industries.com
EXPORTED_SSO_PROPERTIES=/usr/lib/vmware-upgrade/sso/exported_sso.properties

if [ -e ${EXPORTED_SSO_PROPERTIES} ] ;then
	rm -f  ${EXPORTED_SSO_PROPERTIES}
fi

cat > ${EXPORTED_SSO_PROPERTIES} << __SSO_EXPORT_CONF__
ExternalIdentitySource.${AD_DOMAIN}.name=${AD_DOMAIN}
ExternalIdentitySource.${AD_DOMAIN}.type=0
ExternalIdentitySourcesDomainNames=${AD_DOMAIN}
__SSO_EXPORT_CONF__

/usr/lib/vmware-upgrade/sso/sso_import.sh > /dev/null 2>&1
rm -rf ${EXPORTED_SSO_PROPERTIES}

The next tidbit that I learned the same day came from Frank. It was in regards to configuring the default Identity Source for vSphere SSO which includes localos, vsphere.local and if you have Active Directory configure, your AD Domain is an option as seen in the screenshot below. For a fresh installation, the "localos" Domain is always the default and I was interested in configuring my AD Domain as the default. It turns out this is also possible to automate and more details can be found in this handy VMware KB 2070433.

active-directory-identity-source-and-default-domain-in-vsphere-web-client-1
Similar to the other KB, I have created a quick snippet which can be integrated into my existing VCSA 5.5 Configuration script if you are also interested in automating this configuration.

AD_DOMAIN=primp-industries.com
SSO_ADMINISTRATOR_PASSWORD=vmware
SSO_LDIF_CONF=/tmp/defaultdomain.ldif
                
cat > ${SSO_LDIF_CONF} << __DEFAULT_SSO_DOMAIN__
dn: cn=vsphere.local,cn=Tenants,cn=IdentityManager,cn=Services,dc=vsphere,dc=local
changetype: modify
replace: vmwSTSDefaultIdentityProvider
vmwSTSDefaultIdentityProvider: ${AD_DOMAIN}
__DEFAULT_SSO_DOMAIN__

ldapmodify -f ${SSO_LDIF_CONF} -h localhost -p 11711 -D "cn=Administrator,cn=Users,dc=vsphere,dc=local" -w ${SSO_ADMINISTRATOR_PASSWORD}

I was quite happy to learn about these two tips as these are literally the two last configurations that I have not been able to automate since the vSphere SSO Admins APIs are currently private. I will be updating my VCSA Configuration Script in the next few days to include these additional configurations and will publish an updated script once it is complete. A big thanks goes to both Blair and Frank for sharing this awesome information!

Categories // Automation Tags // active directory, default domain, exported_sso.properties, integrated windows authentication, ldapmodify, sso, sso_import.sh, vSphere 5.5, vsphere web client

Handy VCSA (vCenter Server Appliance) Operational KB Resources

12.09.2014 by William Lam // 1 Comment

I am a huge fan of the VCSA (vCenter Server Appliance) for anyone that knows me. From time to time, I see interesting VMware KB articles that contain what I think are valuable tidbits of "Operational" information that could come handy in the future. I normally would bookmark these in my browser since you never know when you might need it. I figured for customers who are currently using the VCSA, having some of these operational tidbits would definitely be helpful, especially during troubleshooting or helping them build out a list of resources they could reference when they need to update, increase capacity or change the configurations for the VCSA. Instead of just keeping this list for myself, I thought I can share what I have for the latest VCSA 5.5.x as well comb through our VMware KB site looking for other handy operational KB's to include.

I have categorized the VCSA KB's into four categories that I felt made the most sense, I am sure you could break it down further but I thought this would make it easier to process. In addition, I have also included articles from virtuallyGhetto (subset from this page) that may also apply to these areas which I have listed at the very bottom in case you were interested in those as well. Hopefully this will be helpful for anyone managing VCSA(s) and if there are any that I have missed or you would like to see get added, feel free to leave a comment.

Deployment:
  • Minimum Requirements for the VMware vCenter Server 5.x Appliance (2005086)
  • Downloading and deploying the vCenter Server Appliance 5.x (2007619)
Configurations:
  • Updating VMware vCenter Server Appliance 5.x (2031331)
  • Increase the disk space in vCenter Server Appliance (2056764)
  • vCenter Server Appliance fails to reconfigure JVM settings when the memory size of the virtual machine on which it resides is modified (2066099)
  • Configuring Certificate Authority (CA) signed certificates for vCenter Server Appliance 5.5 (2057223)
  • Re-repointing and re-registering VMware vCenter Server Appliance 5.5 and components (2094888)
  • vSphere Flash Read Cache considerations for vCenter Server 5.5u2 (2072392)
  • Adding an Integrated Active Directory (IWA) Identity Source without the vSphere Web Client for vCenter Single Sign-On 5.5 (2063424)
  • Adding Default Identity Provider (2070433)
Logging & Troubleshooting:
  • Location of vCenter Server log files (1021804)
  • Location of vCenter Server Service log files (2056632)
  • Location of vSphere Profile-Driven Storage log files (2056646)
  • Location of vSphere ESXi Dump Collector log files (2003277)
  • Location of vCenter Inventory Service log files (2056632)
  • Location of vSphere Web Client service log files (2004090)
  • Location of vCenter Single Sign-On log files for vCenter Server 5.x (2033430)
  • Location of vCenter Server SMTP mail log files (2075375)
  • Enable debug logging for the vCenter Inventory Service (2021705)
  • Stopping, starting, or restarting vCenter Server Appliance services (2054085)
Backups & Recovery: 
  • Backing up and restoring the vCenter Server Appliance vPostgres Database (2034505)
  • Backing up and restoring the VMware vCenter Single Sign-On 5.5 configuration (2057353)
  • Backing up and restoring the vCenter Server Appliance Inventory Service Database (2062682)
  • Preserving the Storage Policies during a backup and restore of the vCenter Server Inventory Service Database (2072307)

virtuallyGhetto VCSA Operational Resources

Deployment:
  • Automating VCSA 5.5 Configurations including SSO Administrator password
  • How to finally inject OVF properties into VCSA when deploying directly onto ESXi?
  • Quick Tip – Automate the enabling of the Customer Experience Improvement Program (vTelemetry) in VCSA
  • How to automate NTP configurations on the VCSA using the CLI
  • Quick Tip – Minimum amount of memory to run the vCenter Server Appliance
  • Automating VCSA Network Configurations For Greenfield Deployments
Configurations:
  • Hybrid environment leveraging SSO Multi-Master Replication between vCenter Server for Windows & VCSA
  • Administrator password expiration in new VCSA 5.5
  • Automating SSL Self Signed Certificate Regeneration in VCSA 5.1 & 5.5 (vCenter Server Appliance)
  • Separating Out the vCenter SSO, vSphere Web Client and vCenter Server Services Using the VCSA
  • Changing VCSA Failed Login Attempt & Lock Out Period
  • Default Password for vCenter SSO Admin Account on VCSA
  • Automatically Join Multiple VCSA 5.1 using New vCenter SSO (Single Sign-On)
  • How to Register a vCenter Server 5.0 with Admin Tool on VCSA 5.1 Using SSH Port Forwarding
  • Automating Active Directory Identity Source & Default Domain in vSphere Web Client
  • Quick Tip – Automate JVM Heap configurations after increasing VCSA memory
  • How to change the default HTML5 VM console port in vSphere 5.5?
Logging & Troubleshooting:
  • Quick Tip – Start & Stop order for vCenter Server Services
  • Quick Tip – How to quickly find the release & build number on VCSA
  • How do I find my SSO Server 5.5 Site name?
  • Forwarding vCenter Server Logs to a Syslog Server
  • How To Add A Tag (Log prefix) To Syslog Entries
Backups & Recovery:
  • How to recover VCSA 5.5 from an expired administrator account?
Tips/Tricks:
  • How to Send vCenter Alarm Notification to Growl
  • Getting Rid of the Inventory Tree in the New vSphere Web Client
  • vCloud Director Simulator
  • How to bootstrap Horizon View 5.3.1 onto a VSAN Datastore using VCT

Categories // VCSA, vSphere Tags // inventory service, operational, sso, vcenter server appliance, VCSA, vcva

  • « Previous Page
  • 1
  • …
  • 3
  • 4
  • 5
  • 6
  • 7
  • …
  • 11
  • Next Page »

Search

Thank Author

Author

William is Distinguished Platform Engineering Architect in the VMware Cloud Foundation (VCF) Division at Broadcom. His primary focus is helping customers and partners build, run and operate a modern Private Cloud using the VMware Cloud Foundation (VCF) platform.

Connect

  • Bluesky
  • Email
  • GitHub
  • LinkedIn
  • Mastodon
  • Reddit
  • RSS
  • Twitter
  • Vimeo

Recent

  • Ultimate Lab Resource for VCF 9.0 06/25/2025
  • VMware Cloud Foundation (VCF) on ASUS NUC 15 Pro (Cyber Canyon) 06/25/2025
  • VMware Cloud Foundation (VCF) on Minisforum MS-A2 06/25/2025
  • VCF 9.0 Offline Depot using Synology 06/25/2025
  • Deploying VCF 9.0 on a single ESXi host? 06/24/2025

Advertisment

Privacy & Cookies: This site uses cookies. By continuing to use this website, you agree to their use.
To find out more, including how to control cookies, see here: Cookie Policy

Copyright WilliamLam.com © 2025

 

Loading Comments...