Clustered Workspace ONE Access Implementation

Identity and access management services for the vRealize Suite of products is provided by Workspace ONE Access. You use vRealize Suite Lifecycle Manager to deploy a 3-node clustered Workspace ONE Access instance. You then perform the necessary post-deployment configurations and customization.

Prerequisites

• Download download the installation binary directly from vRealize Suite Lifecycle Manager. See "Configure Product Binaries" in the vRealize Suite Lifecycle Manager Installation, Upgrade, and Management Guide for the version of vRealize Suite Lifecycle Manager listed in the VMware Cloud Foundation BOM.

• Allocate 5 IP addresses from the cross-instance NSX segment and prepare both forward (A) and reverse (PTR) DNS records.

  • 3 IP addresses for the clustered Workspace ONE Access

  • An IP address for embedded Postgres database for Workspace ONE Access instance

  • An IP address for the NSX-T Data Center external load balancer virtual server for clustered Workspace ONE Access instance.

• Ensure you have enough storage capacity:

  • Required storage per node: 100 GB

  • Virtual disk provisioning: Thin

• Verify that the management domain vCenter Server is operational.

• Verify that the cross-instance NSX segment is available

• Verify that the NSX Manager is operational.

• Verify the Prerequisite Checklist sheet in the Planning and Preparation Workbook.

• Verify that required Active Directory bind service account is created.

  Verify that required Active Directory security groups are created.

• Download the CertGenVVS tool and generate the signed certificate for the clustered Workspace ONE Access instance. See KB 85527.