Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Save more on your purchases! discount-offer-chevron-icon
Savings automatically calculated. No voucher code required.
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletter Hub
Free Learning
Arrow right icon
timer SALE ENDS IN
0 Days
:
00 Hours
:
00 Minutes
:
00 Seconds
Learning VMware vRealize Automation
Learning VMware vRealize Automation

Learning VMware vRealize Automation: Learn the fundamentals of vRealize Automation to accelerate the delivery of your IT services

Arrow left icon
Profile Icon Sriram Rajendran
Arrow right icon
$19.99 per month
Full star icon Full star icon Half star icon Empty star icon Empty star icon 2.7 (3 Ratings)
Paperback Feb 2016 230 pages 1st Edition
eBook
$9.99 $39.99
Paperback
$48.99
Subscription
Free Trial
Renews at $19.99p/m
Arrow left icon
Profile Icon Sriram Rajendran
Arrow right icon
$19.99 per month
Full star icon Full star icon Half star icon Empty star icon Empty star icon 2.7 (3 Ratings)
Paperback Feb 2016 230 pages 1st Edition
eBook
$9.99 $39.99
Paperback
$48.99
Subscription
Free Trial
Renews at $19.99p/m
eBook
$9.99 $39.99
Paperback
$48.99
Subscription
Free Trial
Renews at $19.99p/m

What do you get with a Packt Subscription?

Free for first 7 days. $19.99 p/m after that. Cancel any time!
Product feature icon Unlimited ad-free access to the largest independent learning library in tech. Access this title and thousands more!
Product feature icon 50+ new titles added per month, including many first-to-market concepts and exclusive early access to books as they are being written.
Product feature icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Product feature icon Thousands of reference materials covering every tech concept you need to stay up to date.
Subscribe now
View plans & pricing
Table of content icon View table of contents Preview book icon Preview Book

Learning VMware vRealize Automation

Chapter 2. Distributed Installation Using Custom Certificates

Deploying and configuring distributed architecture using custom certificates is unarguably a challenging task. In this chapter, we will focus on step-by-step elucidative material that will be easy to follow and guide you through the installation faster.

This chapter is precisely an installation guide that will help users deploy vRA in a distributed architecture. Our focus will be around the installation, configuration of vRA components, and configuration of NSX load balancer settings. It is assumed that the infrastructure setups (Active Directory, DNS, vRA hostname and IP address, NSX Manager, and Edge) are deployed, configured, and supported to work properly in the target environment.

The following topics will be covered in this chapter:

  • Planning and preparing for the installation
  • An overview of the installation flow
  • Identity management for authentication and authorization by vRA components
  • Identity appliance configuration...

Getting started

From an architecture standpoint, deployment modes can be of two types—simple and distributed.

Simple deployment architecture

As the name suggests, a simple installation deploys a single instance of each virtual appliance and installs all IaaS components, including the SQL database, in a single virtual machine. It is highly suited for development or proof-of-concept environments. Importantly, this deployment lacks high availability.

Distributed deployment architecture

A distributed installation allows the separation of components that are best suited to the organization's needs and ideally used in production environments, and provides options for high availability. We have three distinct deployment modes: small, medium, and large. To learn more about these deployment modes, refer to http://www.vmware.com/files/pdf/products/vCloud/VMware-vCloud-Automation-Center-61-Reference-Architecture.pdf.

Planning and preparation

Here are some of the key tasks to do before we start...

Overview of the installation flow

I have put together a flowchart in the hope that it helps you recognize the high-level steps involved in building a distributed and highly available vRealize Automation infrastructure.

The following steps are detailed in a logical sequence that takes dependencies into account:

Overview of the installation flow

Certificates

SSL certificates are commonly used for a secure handshake between different services. In vRA, all communications between the client browser and services (identity management, CAFÉ, and IaaS) and between services are over TLS/SSL. However, I wanted to highlight that vRA components work with different SSL certificate file formats. Here is a list of the common formats used in a vRA solution:

  • PEM: short for Privacy Enhanced Mail
  • P7B: Public Key Cryptography Standard (PKCS) Format #7
  • PFX: Public Key Cryptography Standard (PKCS) Format #12
  • CSR: short for Certificate Signing Request (.CER or .CRT files can be in either PEM or DER format):
    Certificates

The certificate generation process

Given that certificate generation is a protracted process, we have detailed the high-level steps involved in creating the certificates. The extensive list of steps for creating the certificates will be covered later in this chapter:

Step 1:

Identity management for authentication and authorization by vRA components

This is one of the critical components used by vRealize automation for authentication and authorization. Since we chose to use the NSX load balancer service in our design, our preference was to go with the ID appliance from the list of supported options at the time of writing this book. Let's comprehend the argument behind our choice:

Identity management for authentication and authorization by vRA components

The identity (ID) appliance

The major benefit of running the vRealize identity appliance is that it is released as part of the vRealize Automation product. This is important because if new features are released in vRealize Automation that have dependencies on specific support from the SSO server, the identity appliance will be updated with the needed support. This will allow you to upgrade when a new version is released without having to worry about external dependencies.

It is recommended that the ID appliance be used in small deployments (10,000 managed machines and 500 catalog...

Configuring the external vPostgres DB in HA for the vRealize Automation CAFÉ appliance

It is recommended that you use an external instance of the vPostgres database for the CAFÉ appliance in a high availability (HA) environment. However, since the release of VMware vRealize Automation standalone, VMware vFabric Postgres is the end of availability and is no longer available as a standalone product. To address customers' needs, VMware developed a way to utilize the database instance located in the VMware vRealize Automation appliance in HA mode without having to incur additional licensing.

The following steps are clearly documented at http://kb.vmware.com/kb/2108923. We will follow exactly the same steps given here, with some screenshots for ease of understanding.

Prerequisites

Allocate the hostname and IP address, and create DNS records (A and PTR) for the virtual IP of the vPostgres DB and two vPostgres DB nodes:

  1. Create the NSX load balancer configurations for the vPostgres database...

Getting started


From an architecture standpoint, deployment modes can be of two types—simple and distributed.

Simple deployment architecture

As the name suggests, a simple installation deploys a single instance of each virtual appliance and installs all IaaS components, including the SQL database, in a single virtual machine. It is highly suited for development or proof-of-concept environments. Importantly, this deployment lacks high availability.

Distributed deployment architecture

A distributed installation allows the separation of components that are best suited to the organization's needs and ideally used in production environments, and provides options for high availability. We have three distinct deployment modes: small, medium, and large. To learn more about these deployment modes, refer to http://www.vmware.com/files/pdf/products/vCloud/VMware-vCloud-Automation-Center-61-Reference-Architecture.pdf.

Planning and preparation

Here are some of the key tasks to do before we start the actual...

Overview of the installation flow


I have put together a flowchart in the hope that it helps you recognize the high-level steps involved in building a distributed and highly available vRealize Automation infrastructure.

The following steps are detailed in a logical sequence that takes dependencies into account:

Certificates


SSL certificates are commonly used for a secure handshake between different services. In vRA, all communications between the client browser and services (identity management, CAFÉ, and IaaS) and between services are over TLS/SSL. However, I wanted to highlight that vRA components work with different SSL certificate file formats. Here is a list of the common formats used in a vRA solution:

  • PEM: short for Privacy Enhanced Mail

  • P7B: Public Key Cryptography Standard (PKCS) Format #7

  • PFX: Public Key Cryptography Standard (PKCS) Format #12

  • CSR: short for Certificate Signing Request (.CER or .CRT files can be in either PEM or DER format):

The certificate generation process

Given that certificate generation is a protracted process, we have detailed the high-level steps involved in creating the certificates. The extensive list of steps for creating the certificates will be covered later in this chapter:

Step 1:

Identity management for authentication and authorization by vRA components


This is one of the critical components used by vRealize automation for authentication and authorization. Since we chose to use the NSX load balancer service in our design, our preference was to go with the ID appliance from the list of supported options at the time of writing this book. Let's comprehend the argument behind our choice:

The identity (ID) appliance

The major benefit of running the vRealize identity appliance is that it is released as part of the vRealize Automation product. This is important because if new features are released in vRealize Automation that have dependencies on specific support from the SSO server, the identity appliance will be updated with the needed support. This will allow you to upgrade when a new version is released without having to worry about external dependencies.

It is recommended that the ID appliance be used in small deployments (10,000 managed machines and 500 catalog items...

Configuring the external vPostgres DB in HA for the vRealize Automation CAFÉ appliance


It is recommended that you use an external instance of the vPostgres database for the CAFÉ appliance in a high availability (HA) environment. However, since the release of VMware vRealize Automation standalone, VMware vFabric Postgres is the end of availability and is no longer available as a standalone product. To address customers' needs, VMware developed a way to utilize the database instance located in the VMware vRealize Automation appliance in HA mode without having to incur additional licensing.

The following steps are clearly documented at http://kb.vmware.com/kb/2108923. We will follow exactly the same steps given here, with some screenshots for ease of understanding.

Prerequisites

Allocate the hostname and IP address, and create DNS records (A and PTR) for the virtual IP of the vPostgres DB and two vPostgres DB nodes:

  1. Create the NSX load balancer configurations for the vPostgres database.

  2. Freshly...

Configuring the CAFÉ appliance in HA


Now that we have completed the installation of the vPostgres database and identity appliance, let's start the installation of the CAFÉ appliance. In this section, let's look at the recipe of configuring two CAFÉ nodes in cluster mode.

Prerequisites

Allocate the hostname and IP address, and create DNS records (A and PTR) for the CAFÉ virtual IP in the load balancer and two CAFÉ nodes (CAFE1 and CAFE2):

  1. Create NSX load balancer configurations for CAFÉ.

  2. Freshly deploy two VMware vRealize Automation 6.2 appliances without any configurations (again, I'm not going to walk through OVA deployment in this book).

  3. Power on and perform the following checks in both the CAFÉ appliances:

    • Connect to the VAMI page of the virtual appliance: https://<IP_address-or_FQDN-of-CAFE(1/2)-appliance|:5480.

    • Navigate to Network | Address.

      Check whether the hostname and DNS entries are accurate.

      The IP settings should be set to static.

    • Navigate to Admin- | Admin, and check whether SSH is...

IaaS installation


Infrastructure as a Service (IaaS) enables the rapid modeling and provisioning of servers and desktops across virtual and physical, private and public, or hybrid cloud infrastructures. Access to the infrastructure features is provided by the IaaS component. The installation of all IaaS components takes place on a Windows machine (physical or virtual).

The IaaS component of vRealize Automation includes multiple parts:

  • MS SQL database

  • IaaS Web Server

  • IaaS Manager Service

  • Distributed Execution Managers (Orchestrator and Workers)

  • Proxy Agents

A list of supported OSes and databases for installing IaaS components can be found at https://www.vmware.com/pdf/vrealize-automation-62-support-matrix.pdf.

The following configuration will be used in this setup:

  • All IaaS components will be installed in a virtual machine

  • Windows OS—Windows 2012 Standard

  • Database—SQL Server 2008 R2 RTM (10.50.1600.1) Enterprise Edition (x64)

The following are just recommendations for virtual machine configuration; feel...

Overview of the IaaS installation flow (only the first nodes)


In this chapter, we will install the first node for all the IaaS components and perform a functional test to affirm that the installation thus far is upright. Based on the results, we will proceed to install the second nodes for high availability in the distributed architecture. I created the below flow chart which typically illustrates the installation process.

Installing PFX certificate to IIS Web Server

Uploading the PFX certificate to the IIS web server is a requirement since IaaS components (Model Manager WEB and Manager Service) use the IIS web server during installation. In this example, the WEB2 node is used. The following are the steps for installing a PFX certificate on the IIS web server:

  1. Log in to the Node (WEB or MGR) before starting the installation as a Domain Administrator or service account user with sufficient privileges.

  2. Go to Server Manager | Tools | IIS Manager and select WEB2 (if you have logged in to the WEB1...

IaaS WEB installation


In this section, we will take a look at how to install and configure the first WEB node, which is called the Model Manager Web, also known as repository node:

  1. Log in to the WEB1 machine using the domain user or service account user created for the installation:

  2. Connect to one of the CAFÉ nodes and download the IaaS installer from https://CAFE1.PKCT.LOCAL:5480/i

  3. Do not change the name of this file—the name reflects the CAFÉ node from where it is downloaded:

  4. Right-click on the downloaded file and select Run as Administrator to begin installation.

  5. Enter the credentials for the CAFÉ1 appliance, check Accept Certificate as shown in the following screenshot, and click on Next:

  6. Select Custom Install and then choose IaaS Server in Component Selection.

  7. Database configuration:

    Note

    Ensure that MSDTC is enabled in the Database Machine used by IaaS components (DO NOT SKIP):

    Go to Control Panel | Administrative Tools | Component Services.

    Expand Component Services | Computers | My Computer...

Left arrow icon Right arrow icon

Key benefits

  • Learn to install the vRealize Automation product in a distributed architecture using a load balancer
  • Plan backup and recovery strategies for every vRealize automation component
  • Use vRealize Automation to manage applications and improve operational efficiency using this simple and intuitive guide

Description

With the growing interest in Software Defined Data Centers (SDDC), vRealize Automation offers data center users an organized service catalog and governance for administrators. This way, end users gain autonomy while the IT department stays in control, making sure security and compliance requirements are met. Learning what each component does and how they dovetail with each other will bolster your understanding of vRealize Automation. The book starts off with an introduction to the distributed architecture that has been tested and installed in large scale deployments. Implementing and configuring distributed architecture with custom certificates is unarguably a demanding task, and it will be covered next. After this, we will progress with the installation. A vRealize Automation blueprint can be prepared in multiple ways; we will focus solely on vSphere endpoint blueprint. After this, we will discuss the high availability configuration via NSX loadbalancer for vRealize Orchestrator. Finally, we end with Advanced Service Designer, which provides service architects with the ability to create advanced services and publish them as catalog items.

Who is this book for?

This book is for anyone who wants to start their journey with vRealize Automation. It is your one-stop instruction guide to installing and configuring a distributed setup using NSX load balancer. Regardless of whether or not you have used vRealize Automation before, following the steps provided in each chapter will get you started with the product.

What you will learn

  • Understand the basic building blocks of vRealize Automation before embarking on the journey of installation
  • Familiarize yourself with the requirements and steps that need to be performed during the first phase of the distributed installation
  • Carry out a functional validation of the first phase of installation before completing the installation
  • Build a blueprint for vSphere endpoint, an essential step for a successful deployment of a service catalog
  • Create, configure, and deploy tenants, endpoints, blueprints, and the service catalog
  • Get to grips with the failover process for all components in vRealize Automation
  • Learn to configure the NSX loadbalancer for vRealize Orchestrator for high availability
  • Leverage ASD to develop XaaS (Anything as a Service) in vRealize Automation to deliver valuable competence

Product Details

Country selected
Publication date, Length, Edition, Language, ISBN-13
Publication date : Feb 03, 2016
Length: 230 pages
Edition : 1st
Language : English
ISBN-13 : 9781785885839
Vendor :
VMware
Tools :

What do you get with a Packt Subscription?

Free for first 7 days. $19.99 p/m after that. Cancel any time!
Product feature icon Unlimited ad-free access to the largest independent learning library in tech. Access this title and thousands more!
Product feature icon 50+ new titles added per month, including many first-to-market concepts and exclusive early access to books as they are being written.
Product feature icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Product feature icon Thousands of reference materials covering every tech concept you need to stay up to date.
Subscribe now
View plans & pricing

Product Details

Publication date : Feb 03, 2016
Length: 230 pages
Edition : 1st
Language : English
ISBN-13 : 9781785885839
Vendor :
VMware
Tools :

Packt Subscriptions

See our plans and pricing
Modal Close icon
$19.99 billed monthly
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Simple pricing, no contract
$199.99 billed annually
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Choose a DRM-free eBook or Video every month to keep
Feature tick icon PLUS own as many other DRM-free eBooks or Videos as you like for just $5 each
Feature tick icon Exclusive print discounts
$279.99 billed in 18 months
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Choose a DRM-free eBook or Video every month to keep
Feature tick icon PLUS own as many other DRM-free eBooks or Videos as you like for just $5 each
Feature tick icon Exclusive print discounts

Frequently bought together


Stars icon
Total $ 146.97
Learning VMware vRealize Automation
$48.99
VMware vRealize Orchestrator Essentials
$48.99
VMware vRealize Operations Essentials
$48.99
Total $ 146.97 Stars icon
Banner background image

Table of Contents

9 Chapters
1. vRealize Automation and the Deconstruction of Components Chevron down icon Chevron up icon
2. Distributed Installation Using Custom Certificates Chevron down icon Chevron up icon
3. Functional Validation – Phase 1 and Installing Secondary Nodes Chevron down icon Chevron up icon
4. Configuring a Guest OS for vRealize Automation vSphere Blueprints Chevron down icon Chevron up icon
5. Functional Validation – Phase 2 and Zero to VM Provisioning Chevron down icon Chevron up icon
6. Testing Failover Scenarios for vRealize Automation Components Chevron down icon Chevron up icon
7. vRealize Orchestrator in High Availability via the NSX Load Balancer Chevron down icon Chevron up icon
8. The Power of Advanced Service Designer (ASD) Chevron down icon Chevron up icon
Index Chevron down icon Chevron up icon

Customer reviews

Rating distribution
Full star icon Full star icon Half star icon Empty star icon Empty star icon 2.7
(3 Ratings)
5 star 0%
4 star 33.3%
3 star 33.3%
2 star 0%
1 star 33.3%
Amazon Customer Feb 09, 2016
Full star icon Full star icon Full star icon Full star icon Empty star icon 4
I was the technical reviewer of this book and I really enjoyed while perform the review of this book. Sriram Rajendran has done a great job in explaining the concepts of the vRA and the do’s and don’ts while designing and implementing vRealize Automation.The book is for anyone who is interested in learning the concepts of the vRA and planning to perform the deployments. It’s necessary to have basic system administration and virtualization skills particularity on the VMware vSphere.The book consists of 8 chapters, the first chapters gives a good overview of the vRA and the components which are part of the vRA suite. Chapter 2 – 5 takes you through installation & configuration of the vRA with the required functional testing to be done for a successful deployment. Chapter 6 helps to understand the failover testing which are performed as part of the User Acceptance testing of the vRealize Automation.Since the book is focused on the distributed install, load balancer is required for certain components of the vRA. VMware NSX load balancer is used as load balacer through this book for configuration. However do note this book covers only the basic configuration of the LB on NSX, it is assume NSX has been setup and fully functional for the vRA.The books ends with explaining the benefits of Advanced Service Designer (ASD), and how to achieve XaaS using the ASD.I would recommend this book for anyone interested in learning about automation and Orchestration.
Amazon Verified review Amazon
Bengt Grønås Apr 16, 2017
Full star icon Full star icon Full star icon Empty star icon Empty star icon 3
Vra6, basic for understanding vra. Very well written, simple to understand. Very pedagogically and comprehesive for you to understand the basics
Amazon Verified review Amazon
John Warner Sep 25, 2017
Full star icon Empty star icon Empty star icon Empty star icon Empty star icon 1
It's ok as an installation guide but is *extremely* shallow on blueprints. Not really worth buying.
Amazon Verified review Amazon
Get free access to Packt library with over 7500+ books and video courses for 7 days!
Start Free Trial

FAQs

What is included in a Packt subscription? Chevron down icon Chevron up icon

A subscription provides you with full access to view all Packt and licnesed content online, this includes exclusive access to Early Access titles. Depending on the tier chosen you can also earn credits and discounts to use for owning content

How can I cancel my subscription? Chevron down icon Chevron up icon

To cancel your subscription with us simply go to the account page - found in the top right of the page or at https://subscription.packtpub.com/my-account/subscription - From here you will see the ‘cancel subscription’ button in the grey box with your subscription information in.

What are credits? Chevron down icon Chevron up icon

Credits can be earned from reading 40 section of any title within the payment cycle - a month starting from the day of subscription payment. You also earn a Credit every month if you subscribe to our annual or 18 month plans. Credits can be used to buy books DRM free, the same way that you would pay for a book. Your credits can be found in the subscription homepage - subscription.packtpub.com - clicking on ‘the my’ library dropdown and selecting ‘credits’.

What happens if an Early Access Course is cancelled? Chevron down icon Chevron up icon

Projects are rarely cancelled, but sometimes it's unavoidable. If an Early Access course is cancelled or excessively delayed, you can exchange your purchase for another course. For further details, please contact us here.

Where can I send feedback about an Early Access title? Chevron down icon Chevron up icon

If you have any feedback about the product you're reading, or Early Access in general, then please fill out a contact form here and we'll make sure the feedback gets to the right team. 

Can I download the code files for Early Access titles? Chevron down icon Chevron up icon

We try to ensure that all books in Early Access have code available to use, download, and fork on GitHub. This helps us be more agile in the development of the book, and helps keep the often changing code base of new versions and new technologies as up to date as possible. Unfortunately, however, there will be rare cases when it is not possible for us to have downloadable code samples available until publication.

When we publish the book, the code files will also be available to download from the Packt website.

How accurate is the publication date? Chevron down icon Chevron up icon

The publication date is as accurate as we can be at any point in the project. Unfortunately, delays can happen. Often those delays are out of our control, such as changes to the technology code base or delays in the tech release. We do our best to give you an accurate estimate of the publication date at any given time, and as more chapters are delivered, the more accurate the delivery date will become.

How will I know when new chapters are ready? Chevron down icon Chevron up icon

We'll let you know every time there has been an update to a course that you've bought in Early Access. You'll get an email to let you know there has been a new chapter, or a change to a previous chapter. The new chapters are automatically added to your account, so you can also check back there any time you're ready and download or read them online.

I am a Packt subscriber, do I get Early Access? Chevron down icon Chevron up icon

Yes, all Early Access content is fully available through your subscription. You will need to have a paid for or active trial subscription in order to access all titles.

How is Early Access delivered? Chevron down icon Chevron up icon

Early Access is currently only available as a PDF or through our online reader. As we make changes or add new chapters, the files in your Packt account will be updated so you can download them again or view them online immediately.

How do I buy Early Access content? Chevron down icon Chevron up icon

Early Access is a way of us getting our content to you quicker, but the method of buying the Early Access course is still the same. Just find the course you want to buy, go through the check-out steps, and you’ll get a confirmation email from us with information and a link to the relevant Early Access courses.

What is Early Access? Chevron down icon Chevron up icon

Keeping up to date with the latest technology is difficult; new versions, new frameworks, new techniques. This feature gives you a head-start to our content, as it's being created. With Early Access you'll receive each chapter as it's written, and get regular updates throughout the product's development, as well as the final course as soon as it's ready.We created Early Access as a means of giving you the information you need, as soon as it's available. As we go through the process of developing a course, 99% of it can be ready but we can't publish until that last 1% falls in to place. Early Access helps to unlock the potential of our content early, to help you start your learning when you need it most. You not only get access to every chapter as it's delivered, edited, and updated, but you'll also get the finalized, DRM-free product to download in any format you want when it's published. As a member of Packt, you'll also be eligible for our exclusive offers, including a free course every day, and discounts on new and popular titles.