After you bring up an additional VMware Cloud Foundation instance in your environment, perform the necessary configuration tasks to activate Cloud-Based Workload Protection for VMware Cloud Foundation in the additional VMware Cloud Foundation instance.

Reuse the previous implementation procedures to configure the additional VMware Cloud Foundation instance according to your values in the VMware Cloud Foundation Planning and Preparation Workbook.

Steps

Description

1. Define a Custom Role in vSphere for Cloud-Based Workload Protection for VMware Cloud Foundation

To limit the privileges and scope for the VMware Live Cyber Recovery integration with vSphere, you create a custom role in vSphere with the required privileges.

2. Configure Service Account Permissions for vSphere Integration for Cloud-Based Workload Protection for VMware Cloud Foundation

To provide the necessary privileges to the service accounts for the VMware Live Cyber Recovery service to vSphere integration, you assign the custom role to the integration service accounts in vCenter Server.

3. Create Virtual Machine and Template Folder for the Connector Appliances for Cloud-Based Workload Protection for VMware Cloud Foundation

You create a virtual machine folder on the management domain vCenter Server to manage the VMware Live Cyber Recovery Connector appliance.

4. Create a Virtual Machine and Template Folder and a Resource Pool for the HCX Appliances for Cloud-Based Workload Protection for VMware Cloud Foundation

To group the automatically deployed VMware HCX appliances for the Service Mesh, you create a virtual machine folder and a resource pool on the VI workload domain vCenter Server.

5. Deploy the HCX Connector Appliance for Cloud-Based Workload Protection for VMware Cloud Foundation

To provide connectivity to the VMware HCX Cloud service, you deploy an HCX Connector appliance in the VMware Cloud Foundation instance.

6. Pair On-Premises vSphere Environment with HCX Cloud for Cloud-Based Workload Protection for VMware Cloud Foundation

A site pair establishes the connection needed for management, authentication, and orchestration of HCX services across a source and a destination environment.

7. Create Network Profiles in HCX for Cloud-Based Workload Protection for VMware Cloud Foundation

You create a network profile for each network you intend to use with the HCX services.

8. Create a Compute Profile in HCX for Cloud-Based Workload Protection for VMware Cloud Foundation

You create a compute profile which contains the compute, storage, and network settings that VMware HCX uses on the on-premises site to deploy the interconnect-dedicated virtual appliances when a Service Mesh is added.

9.Create a Service Mesh in HCX for Cloud-Based Workload Protection for VMware Cloud Foundation

You create a Service Mesh between the VMware Cloud Foundation instance and the HCX Cloud by using valid compute profiles created on both sites.

10. Create a Protected Site for Cloud-Based Workload Protection for VMware Cloud Foundation

After you deploy a cloud file system for storing virtual machine snapshots, you create a protected site.

11. Deploy the VMware Live Cyber Recovery Connector Appliances for Cloud-Based Workload Protection for VMware Cloud Foundation

To provide connectivity to the VMware Live Cyber Recovery service, you deploy a VMware Live Cyber Recovery Connector appliance in the VMware Cloud Foundation instance.

12. Configure a vSphere DRS Anti-Affinity Rule for the Cyber Recovery Connector Appliances for Cloud-Based Workload Protection for VMware Cloud Foundation

If you deploy multiple VMware Live Cyber Recovery Connector appliances, you must keep them on separate hosts and configure a vSphere DRS to run the virtual machines on different hosts in the default management vSphere cluster.

13. Add the Connector Appliances to the First Availability Zone VM Group for Cloud-Based Workload Protection for VMware Cloud Foundation

If you configured the management domain with two availability zones, to provide failover to the second availability zone, move the VMware Live Cyber Recovery and HCX Connector appliances to the VM group for the first availability zone.

14. Register a VI Workload Domain vCenter Server for Cloud-Based Workload Protection for VMware Cloud Foundation

Register the VI workload domain vCenter Server, using its IP address, with the VMware Live Cyber Recovery service through the VMware Live Cyber Recovery Connector appliance.