Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Save more on your purchases! discount-offer-chevron-icon
Savings automatically calculated. No voucher code required.
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletter Hub
Free Learning
Arrow right icon
timer SALE ENDS IN
0 Days
:
00 Hours
:
00 Minutes
:
00 Seconds
Learning VMware vRealize Automation
Learning VMware vRealize Automation

Learning VMware vRealize Automation: Learn the fundamentals of vRealize Automation to accelerate the delivery of your IT services

eBook
$35.98 $39.99
Paperback
$48.99
Subscription
Free Trial
Renews at $19.99p/m

What do you get with eBook?

Product feature icon Instant access to your Digital eBook purchase
Product feature icon Download this book in EPUB and PDF formats
Product feature icon Access this title in our online reader with advanced features
Product feature icon DRM FREE - Read whenever, wherever and however you want
OR
Modal Close icon
Payment Processing...
tick Completed

Billing Address

Table of content icon View table of contents Preview book icon Preview Book

Learning VMware vRealize Automation

Chapter 2. Distributed Installation Using Custom Certificates

Deploying and configuring distributed architecture using custom certificates is unarguably a challenging task. In this chapter, we will focus on step-by-step elucidative material that will be easy to follow and guide you through the installation faster.

This chapter is precisely an installation guide that will help users deploy vRA in a distributed architecture. Our focus will be around the installation, configuration of vRA components, and configuration of NSX load balancer settings. It is assumed that the infrastructure setups (Active Directory, DNS, vRA hostname and IP address, NSX Manager, and Edge) are deployed, configured, and supported to work properly in the target environment.

The following topics will be covered in this chapter:

  • Planning and preparing for the installation
  • An overview of the installation flow
  • Identity management for authentication and authorization by vRA components
  • Identity appliance configuration...

Getting started

From an architecture standpoint, deployment modes can be of two types—simple and distributed.

Simple deployment architecture

As the name suggests, a simple installation deploys a single instance of each virtual appliance and installs all IaaS components, including the SQL database, in a single virtual machine. It is highly suited for development or proof-of-concept environments. Importantly, this deployment lacks high availability.

Distributed deployment architecture

A distributed installation allows the separation of components that are best suited to the organization's needs and ideally used in production environments, and provides options for high availability. We have three distinct deployment modes: small, medium, and large. To learn more about these deployment modes, refer to http://www.vmware.com/files/pdf/products/vCloud/VMware-vCloud-Automation-Center-61-Reference-Architecture.pdf.

Planning and preparation

Here are some of the key tasks to do before we start...

Overview of the installation flow

I have put together a flowchart in the hope that it helps you recognize the high-level steps involved in building a distributed and highly available vRealize Automation infrastructure.

The following steps are detailed in a logical sequence that takes dependencies into account:

Overview of the installation flow

Certificates

SSL certificates are commonly used for a secure handshake between different services. In vRA, all communications between the client browser and services (identity management, CAFÉ, and IaaS) and between services are over TLS/SSL. However, I wanted to highlight that vRA components work with different SSL certificate file formats. Here is a list of the common formats used in a vRA solution:

  • PEM: short for Privacy Enhanced Mail
  • P7B: Public Key Cryptography Standard (PKCS) Format #7
  • PFX: Public Key Cryptography Standard (PKCS) Format #12
  • CSR: short for Certificate Signing Request (.CER or .CRT files can be in either PEM or DER format):
    Certificates

The certificate generation process

Given that certificate generation is a protracted process, we have detailed the high-level steps involved in creating the certificates. The extensive list of steps for creating the certificates will be covered later in this chapter:

Step 1:

Identity management for authentication and authorization by vRA components

This is one of the critical components used by vRealize automation for authentication and authorization. Since we chose to use the NSX load balancer service in our design, our preference was to go with the ID appliance from the list of supported options at the time of writing this book. Let's comprehend the argument behind our choice:

Identity management for authentication and authorization by vRA components

The identity (ID) appliance

The major benefit of running the vRealize identity appliance is that it is released as part of the vRealize Automation product. This is important because if new features are released in vRealize Automation that have dependencies on specific support from the SSO server, the identity appliance will be updated with the needed support. This will allow you to upgrade when a new version is released without having to worry about external dependencies.

It is recommended that the ID appliance be used in small deployments (10,000 managed machines and 500 catalog...

Configuring the external vPostgres DB in HA for the vRealize Automation CAFÉ appliance

It is recommended that you use an external instance of the vPostgres database for the CAFÉ appliance in a high availability (HA) environment. However, since the release of VMware vRealize Automation standalone, VMware vFabric Postgres is the end of availability and is no longer available as a standalone product. To address customers' needs, VMware developed a way to utilize the database instance located in the VMware vRealize Automation appliance in HA mode without having to incur additional licensing.

The following steps are clearly documented at http://kb.vmware.com/kb/2108923. We will follow exactly the same steps given here, with some screenshots for ease of understanding.

Prerequisites

Allocate the hostname and IP address, and create DNS records (A and PTR) for the virtual IP of the vPostgres DB and two vPostgres DB nodes:

  1. Create the NSX load balancer configurations for the vPostgres database...

Getting started


From an architecture standpoint, deployment modes can be of two types—simple and distributed.

Simple deployment architecture

As the name suggests, a simple installation deploys a single instance of each virtual appliance and installs all IaaS components, including the SQL database, in a single virtual machine. It is highly suited for development or proof-of-concept environments. Importantly, this deployment lacks high availability.

Distributed deployment architecture

A distributed installation allows the separation of components that are best suited to the organization's needs and ideally used in production environments, and provides options for high availability. We have three distinct deployment modes: small, medium, and large. To learn more about these deployment modes, refer to http://www.vmware.com/files/pdf/products/vCloud/VMware-vCloud-Automation-Center-61-Reference-Architecture.pdf.

Planning and preparation

Here are some of the key tasks to do before we start the actual...

Overview of the installation flow


I have put together a flowchart in the hope that it helps you recognize the high-level steps involved in building a distributed and highly available vRealize Automation infrastructure.

The following steps are detailed in a logical sequence that takes dependencies into account:

Certificates


SSL certificates are commonly used for a secure handshake between different services. In vRA, all communications between the client browser and services (identity management, CAFÉ, and IaaS) and between services are over TLS/SSL. However, I wanted to highlight that vRA components work with different SSL certificate file formats. Here is a list of the common formats used in a vRA solution:

  • PEM: short for Privacy Enhanced Mail

  • P7B: Public Key Cryptography Standard (PKCS) Format #7

  • PFX: Public Key Cryptography Standard (PKCS) Format #12

  • CSR: short for Certificate Signing Request (.CER or .CRT files can be in either PEM or DER format):

The certificate generation process

Given that certificate generation is a protracted process, we have detailed the high-level steps involved in creating the certificates. The extensive list of steps for creating the certificates will be covered later in this chapter:

Step 1:

Identity management for authentication and authorization by vRA components


This is one of the critical components used by vRealize automation for authentication and authorization. Since we chose to use the NSX load balancer service in our design, our preference was to go with the ID appliance from the list of supported options at the time of writing this book. Let's comprehend the argument behind our choice:

The identity (ID) appliance

The major benefit of running the vRealize identity appliance is that it is released as part of the vRealize Automation product. This is important because if new features are released in vRealize Automation that have dependencies on specific support from the SSO server, the identity appliance will be updated with the needed support. This will allow you to upgrade when a new version is released without having to worry about external dependencies.

It is recommended that the ID appliance be used in small deployments (10,000 managed machines and 500 catalog items...

Configuring the external vPostgres DB in HA for the vRealize Automation CAFÉ appliance


It is recommended that you use an external instance of the vPostgres database for the CAFÉ appliance in a high availability (HA) environment. However, since the release of VMware vRealize Automation standalone, VMware vFabric Postgres is the end of availability and is no longer available as a standalone product. To address customers' needs, VMware developed a way to utilize the database instance located in the VMware vRealize Automation appliance in HA mode without having to incur additional licensing.

The following steps are clearly documented at http://kb.vmware.com/kb/2108923. We will follow exactly the same steps given here, with some screenshots for ease of understanding.

Prerequisites

Allocate the hostname and IP address, and create DNS records (A and PTR) for the virtual IP of the vPostgres DB and two vPostgres DB nodes:

  1. Create the NSX load balancer configurations for the vPostgres database.

  2. Freshly...

Configuring the CAFÉ appliance in HA


Now that we have completed the installation of the vPostgres database and identity appliance, let's start the installation of the CAFÉ appliance. In this section, let's look at the recipe of configuring two CAFÉ nodes in cluster mode.

Prerequisites

Allocate the hostname and IP address, and create DNS records (A and PTR) for the CAFÉ virtual IP in the load balancer and two CAFÉ nodes (CAFE1 and CAFE2):

  1. Create NSX load balancer configurations for CAFÉ.

  2. Freshly deploy two VMware vRealize Automation 6.2 appliances without any configurations (again, I'm not going to walk through OVA deployment in this book).

  3. Power on and perform the following checks in both the CAFÉ appliances:

    • Connect to the VAMI page of the virtual appliance: https://<IP_address-or_FQDN-of-CAFE(1/2)-appliance|:5480.

    • Navigate to Network | Address.

      Check whether the hostname and DNS entries are accurate.

      The IP settings should be set to static.

    • Navigate to Admin- | Admin, and check whether SSH is...

IaaS installation


Infrastructure as a Service (IaaS) enables the rapid modeling and provisioning of servers and desktops across virtual and physical, private and public, or hybrid cloud infrastructures. Access to the infrastructure features is provided by the IaaS component. The installation of all IaaS components takes place on a Windows machine (physical or virtual).

The IaaS component of vRealize Automation includes multiple parts:

  • MS SQL database

  • IaaS Web Server

  • IaaS Manager Service

  • Distributed Execution Managers (Orchestrator and Workers)

  • Proxy Agents

A list of supported OSes and databases for installing IaaS components can be found at https://www.vmware.com/pdf/vrealize-automation-62-support-matrix.pdf.

The following configuration will be used in this setup:

  • All IaaS components will be installed in a virtual machine

  • Windows OS—Windows 2012 Standard

  • Database—SQL Server 2008 R2 RTM (10.50.1600.1) Enterprise Edition (x64)

The following are just recommendations for virtual machine configuration; feel...

Overview of the IaaS installation flow (only the first nodes)


In this chapter, we will install the first node for all the IaaS components and perform a functional test to affirm that the installation thus far is upright. Based on the results, we will proceed to install the second nodes for high availability in the distributed architecture. I created the below flow chart which typically illustrates the installation process.

Installing PFX certificate to IIS Web Server

Uploading the PFX certificate to the IIS web server is a requirement since IaaS components (Model Manager WEB and Manager Service) use the IIS web server during installation. In this example, the WEB2 node is used. The following are the steps for installing a PFX certificate on the IIS web server:

  1. Log in to the Node (WEB or MGR) before starting the installation as a Domain Administrator or service account user with sufficient privileges.

  2. Go to Server Manager | Tools | IIS Manager and select WEB2 (if you have logged in to the WEB1...

IaaS WEB installation


In this section, we will take a look at how to install and configure the first WEB node, which is called the Model Manager Web, also known as repository node:

  1. Log in to the WEB1 machine using the domain user or service account user created for the installation:

  2. Connect to one of the CAFÉ nodes and download the IaaS installer from https://CAFE1.PKCT.LOCAL:5480/i

  3. Do not change the name of this file—the name reflects the CAFÉ node from where it is downloaded:

  4. Right-click on the downloaded file and select Run as Administrator to begin installation.

  5. Enter the credentials for the CAFÉ1 appliance, check Accept Certificate as shown in the following screenshot, and click on Next:

  6. Select Custom Install and then choose IaaS Server in Component Selection.

  7. Database configuration:

    Note

    Ensure that MSDTC is enabled in the Database Machine used by IaaS components (DO NOT SKIP):

    Go to Control Panel | Administrative Tools | Component Services.

    Expand Component Services | Computers | My Computer...

Left arrow icon Right arrow icon

Key benefits

  • Learn to install the vRealize Automation product in a distributed architecture using a load balancer
  • Plan backup and recovery strategies for every vRealize automation component
  • Use vRealize Automation to manage applications and improve operational efficiency using this simple and intuitive guide

Description

With the growing interest in Software Defined Data Centers (SDDC), vRealize Automation offers data center users an organized service catalog and governance for administrators. This way, end users gain autonomy while the IT department stays in control, making sure security and compliance requirements are met. Learning what each component does and how they dovetail with each other will bolster your understanding of vRealize Automation. The book starts off with an introduction to the distributed architecture that has been tested and installed in large scale deployments. Implementing and configuring distributed architecture with custom certificates is unarguably a demanding task, and it will be covered next. After this, we will progress with the installation. A vRealize Automation blueprint can be prepared in multiple ways; we will focus solely on vSphere endpoint blueprint. After this, we will discuss the high availability configuration via NSX loadbalancer for vRealize Orchestrator. Finally, we end with Advanced Service Designer, which provides service architects with the ability to create advanced services and publish them as catalog items.

Who is this book for?

This book is for anyone who wants to start their journey with vRealize Automation. It is your one-stop instruction guide to installing and configuring a distributed setup using NSX load balancer. Regardless of whether or not you have used vRealize Automation before, following the steps provided in each chapter will get you started with the product.

What you will learn

  • Understand the basic building blocks of vRealize Automation before embarking on the journey of installation
  • Familiarize yourself with the requirements and steps that need to be performed during the first phase of the distributed installation
  • Carry out a functional validation of the first phase of installation before completing the installation
  • Build a blueprint for vSphere endpoint, an essential step for a successful deployment of a service catalog
  • Create, configure, and deploy tenants, endpoints, blueprints, and the service catalog
  • Get to grips with the failover process for all components in vRealize Automation
  • Learn to configure the NSX loadbalancer for vRealize Orchestrator for high availability
  • Leverage ASD to develop XaaS (Anything as a Service) in vRealize Automation to deliver valuable competence

Product Details

Country selected
Publication date, Length, Edition, Language, ISBN-13
Publication date : Feb 03, 2016
Length: 230 pages
Edition : 1st
Language : English
ISBN-13 : 9781785884788
Vendor :
VMware
Tools :

What do you get with eBook?

Product feature icon Instant access to your Digital eBook purchase
Product feature icon Download this book in EPUB and PDF formats
Product feature icon Access this title in our online reader with advanced features
Product feature icon DRM FREE - Read whenever, wherever and however you want
OR
Modal Close icon
Payment Processing...
tick Completed

Billing Address

Product Details

Publication date : Feb 03, 2016
Length: 230 pages
Edition : 1st
Language : English
ISBN-13 : 9781785884788
Vendor :
VMware
Tools :

Packt Subscriptions

See our plans and pricing
Modal Close icon
$19.99 billed monthly
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Simple pricing, no contract
$199.99 billed annually
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Choose a DRM-free eBook or Video every month to keep
Feature tick icon PLUS own as many other DRM-free eBooks or Videos as you like for just $5 each
Feature tick icon Exclusive print discounts
$279.99 billed in 18 months
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Choose a DRM-free eBook or Video every month to keep
Feature tick icon PLUS own as many other DRM-free eBooks or Videos as you like for just $5 each
Feature tick icon Exclusive print discounts

Frequently bought together


Stars icon
Total $ 146.97
Learning VMware vRealize Automation
$48.99
VMware vRealize Orchestrator Essentials
$48.99
VMware vRealize Operations Essentials
$48.99
Total $ 146.97 Stars icon

Table of Contents

9 Chapters
1. vRealize Automation and the Deconstruction of Components Chevron down icon Chevron up icon
2. Distributed Installation Using Custom Certificates Chevron down icon Chevron up icon
3. Functional Validation – Phase 1 and Installing Secondary Nodes Chevron down icon Chevron up icon
4. Configuring a Guest OS for vRealize Automation vSphere Blueprints Chevron down icon Chevron up icon
5. Functional Validation – Phase 2 and Zero to VM Provisioning Chevron down icon Chevron up icon
6. Testing Failover Scenarios for vRealize Automation Components Chevron down icon Chevron up icon
7. vRealize Orchestrator in High Availability via the NSX Load Balancer Chevron down icon Chevron up icon
8. The Power of Advanced Service Designer (ASD) Chevron down icon Chevron up icon
Index Chevron down icon Chevron up icon

Customer reviews

Rating distribution
Full star icon Full star icon Half star icon Empty star icon Empty star icon 2.7
(3 Ratings)
5 star 0%
4 star 33.3%
3 star 33.3%
2 star 0%
1 star 33.3%
Amazon Customer Feb 09, 2016
Full star icon Full star icon Full star icon Full star icon Empty star icon 4
I was the technical reviewer of this book and I really enjoyed while perform the review of this book. Sriram Rajendran has done a great job in explaining the concepts of the vRA and the do’s and don’ts while designing and implementing vRealize Automation.The book is for anyone who is interested in learning the concepts of the vRA and planning to perform the deployments. It’s necessary to have basic system administration and virtualization skills particularity on the VMware vSphere.The book consists of 8 chapters, the first chapters gives a good overview of the vRA and the components which are part of the vRA suite. Chapter 2 – 5 takes you through installation & configuration of the vRA with the required functional testing to be done for a successful deployment. Chapter 6 helps to understand the failover testing which are performed as part of the User Acceptance testing of the vRealize Automation.Since the book is focused on the distributed install, load balancer is required for certain components of the vRA. VMware NSX load balancer is used as load balacer through this book for configuration. However do note this book covers only the basic configuration of the LB on NSX, it is assume NSX has been setup and fully functional for the vRA.The books ends with explaining the benefits of Advanced Service Designer (ASD), and how to achieve XaaS using the ASD.I would recommend this book for anyone interested in learning about automation and Orchestration.
Amazon Verified review Amazon
Bengt Grønås Apr 16, 2017
Full star icon Full star icon Full star icon Empty star icon Empty star icon 3
Vra6, basic for understanding vra. Very well written, simple to understand. Very pedagogically and comprehesive for you to understand the basics
Amazon Verified review Amazon
John Warner Sep 25, 2017
Full star icon Empty star icon Empty star icon Empty star icon Empty star icon 1
It's ok as an installation guide but is *extremely* shallow on blueprints. Not really worth buying.
Amazon Verified review Amazon
Get free access to Packt library with over 7500+ books and video courses for 7 days!
Start Free Trial

FAQs

How do I buy and download an eBook? Chevron down icon Chevron up icon

Where there is an eBook version of a title available, you can buy it from the book details for that title. Add either the standalone eBook or the eBook and print book bundle to your shopping cart. Your eBook will show in your cart as a product on its own. After completing checkout and payment in the normal way, you will receive your receipt on the screen containing a link to a personalised PDF download file. This link will remain active for 30 days. You can download backup copies of the file by logging in to your account at any time.

If you already have Adobe reader installed, then clicking on the link will download and open the PDF file directly. If you don't, then save the PDF file on your machine and download the Reader to view it.

Please Note: Packt eBooks are non-returnable and non-refundable.

Packt eBook and Licensing When you buy an eBook from Packt Publishing, completing your purchase means you accept the terms of our licence agreement. Please read the full text of the agreement. In it we have tried to balance the need for the ebook to be usable for you the reader with our needs to protect the rights of us as Publishers and of our authors. In summary, the agreement says:

  • You may make copies of your eBook for your own use onto any machine
  • You may not pass copies of the eBook on to anyone else
How can I make a purchase on your website? Chevron down icon Chevron up icon

If you want to purchase a video course, eBook or Bundle (Print+eBook) please follow below steps:

  1. Register on our website using your email address and the password.
  2. Search for the title by name or ISBN using the search option.
  3. Select the title you want to purchase.
  4. Choose the format you wish to purchase the title in; if you order the Print Book, you get a free eBook copy of the same title. 
  5. Proceed with the checkout process (payment to be made using Credit Card, Debit Cart, or PayPal)
Where can I access support around an eBook? Chevron down icon Chevron up icon
  • If you experience a problem with using or installing Adobe Reader, the contact Adobe directly.
  • To view the errata for the book, see www.packtpub.com/support and view the pages for the title you have.
  • To view your account details or to download a new copy of the book go to www.packtpub.com/account
  • To contact us directly if a problem is not resolved, use www.packtpub.com/contact-us
What eBook formats do Packt support? Chevron down icon Chevron up icon

Our eBooks are currently available in a variety of formats such as PDF and ePubs. In the future, this may well change with trends and development in technology, but please note that our PDFs are not Adobe eBook Reader format, which has greater restrictions on security.

You will need to use Adobe Reader v9 or later in order to read Packt's PDF eBooks.

What are the benefits of eBooks? Chevron down icon Chevron up icon
  • You can get the information you need immediately
  • You can easily take them with you on a laptop
  • You can download them an unlimited number of times
  • You can print them out
  • They are copy-paste enabled
  • They are searchable
  • There is no password protection
  • They are lower price than print
  • They save resources and space
What is an eBook? Chevron down icon Chevron up icon

Packt eBooks are a complete electronic version of the print edition, available in PDF and ePub formats. Every piece of content down to the page numbering is the same. Because we save the costs of printing and shipping the book to you, we are able to offer eBooks at a lower cost than print editions.

When you have purchased an eBook, simply login to your account and click on the link in Your Download Area. We recommend you saving the file to your hard drive before opening it.

For optimal viewing of our eBooks, we recommend you download and install the free Adobe Reader version 9.