You can configure the Carbon Black Cloud Workload Appliance to connect to the Carbon Black Cloud with VMware Cloud Services Platform (CSP) identity integration.
Prerequisites
- Verify that the Carbon Black Cloud Workload Appliance VM is powered-on.
- Retrieve the appliance IP address by logging in to the vCenter Server and opening the VM console.
- If necessary, log into the VMware Cloud Services console as an organization owner and create an OAuth app to receive client credentials in the form of a client ID, and client secret key. For more details, see How do I create OAuth 2.0 apps and authenticate applications.
Procedure
- From your browser, log in to the Carbon Black Cloud Workload Appliance at https://<appliance IP address> using the admin credentials.
- Go to the Appliance > Registration page.
- In the Carbon Black Cloud section, click Edit.
- Select a cloud services environment from the CB Cloud Environment drop-down menu.
The CSP registration page displays.
![Showing appliance registration in CSP environment.](images/GUID-7CC78C47-173D-46D7-B6D3-8C89552A3D7A-low.png)
- Populate the fields required for registering your appliance.
- Enter a unique name for the appliance in your Carbon Black Cloud organization.
Important: The appliance name must be unique for your
Carbon Black Cloud organization. One
Appliance name is associated with one
Carbon Black Cloud organization. You cannot use the same appliance name with a different set of API keys or use a different appliance name for the same set of API keys.
- To populate the client ID and client secret fields, generate them from the VMware Cloud services console.
- Log in to the VMware Cloud services console and click Create App in the tab.
- Select the Server to server app option and click Continue.
- Populate the App Name field with a unique and meaningful name for the OAuth app.
- Select the Organization Owner role under Organization Roles section.
- In the Service Roles section, select the CSR role from both CBC Gov West Int and CBC Staging - VDP options.
- Click Create. The console displays the App ID and App Secret credentials that you can either copy, or download in a JSON file.
Use the App ID to populate the Client ID field and App Secret to populate the Client secret key field
- Click Continue and then add the OAuth app to the CBC Confer organization.
- To populate the
Connector ID
field, generate it from the Carbon Black Cloud console.
- In the VMware Cloud services console, select the Services page, and click the CBC Gov West Int under My Services section.
The Carbon Black Cloud console opens.
- From the left navigation pane, click and click Add API Key.
- Select the OAuth app you created and click Save.
The console displays the generated API ID and API Secret Key credentials. The API ID is the Connector ID
.
- To populate the
Org Key
, log in to the Carbon Black Cloud console and click .
- To apply the changes, click Save.
A green check mark establishes the appliance registration and its connection with the
vCenter Server, and the
Carbon Black Cloud in the cloud services environment.