To implement the Intelligent Operations Management for VMware Cloud Foundation validated solution, you must ensure version compatibility between your VMware Cloud Foundation and your VMware Aria Suite Lifecycle instances. Depending on the version of VMware Cloud Foundation you are using, this may require the installation of certain VMware Aria Suite Lifecycle Product Support Packs (PSPACK) or an upgrade to VMware Aria Suite Lifecycle.
To deploy the validated version of VMware Aria Operations, follow only the specified procedures in the table below based on your version of VMware Cloud Foundation.
- VMware Cloud Foundation 5.2.0
-
Table 1. VMware Aria Suite Lifecycle Deployment for VMware Cloud Foundation 5.2.0 Document
Procedure
Description
VMware Cloud Foundation Administration Guide
In a connected environment, download the VMware Aria Suite Lifecycle 8.18.0-24029603 bundle using SDDC Manager.
In a disconnected environment, download the VMware Aria Suite Lifecycle 8.18.0-24029603 bundle using the Bundle Transfer Utility.
Deploy VMware Aria Suite Lifecycle using SDDC Manager.
3. Replace the Certificate of the VMware Aria Suite Lifecycle Instance
Replace the VMware Aria Suite Lifecycle certificate with a Certificate Authority signed version.
Intelligent Operations Management for VMware Cloud Foundation
4. Create a vSphere Content Library for Intelligent Operations Management for VMware Cloud Foundation
Create a vSphere Content Library to host the VMware Aria Operations OVA file.
VMware Cloud Foundation Administration Guide
5. Configure Data Center and vCenter Server in VMware Aria Suite Lifecycle
Add a cross-instance data center and the associated management domain vCenter Server to VMware Aria Suite Lifecycle.
6. Import the Workspace ONE Access Certificate to VMware Aria Suite Lifecycle
Import the Workspace ONE Access certificate that you generated with the CertGenVVS utility.
7. Add Workspace ONE Access Passwords to VMware Aria Suite Lifecycle
To enable life cycle management and configuration management, you set the passwords for the VMware Aria Suite Lifecycle cross-instance environment administrator account and for the Workspace ONE Access administrator and configuration administrator accounts.
8. Deploy Clustered Workspace ONE Access Instance Using VMware Aria Suite Lifecycle
To provide identity and access management services to the cross-instance SDDC components, you create a global environment in VMware Aria Suite Lifecycle in which you deploy a 3-node clustered Workspace ONE Access instance.
Configure an anti-affinity rule to run the virtual machines on different hosts in the default management vSphere cluster.
Configure NTP using the Workspace ONE Access appliance configuration interface.
11. Configure the Domain and Domain Search Parameters on Workspace ONE Access
Configure the domain name and domain search parameters on Workspace ONE Access.
To enable identity and access management in the SDDC, you integrate your Active Directory with Workspace ONE Access and configure attributes to synchronize users and groups.
13. Add the Clustered Workspace ONE Access Cluster Nodes as Identity Provider Connectors
To provide high availability for the identity and access management services of a clustered Workspace ONE Access instance, you add the cluster nodes as directory connectors.
14. Assign Roles to Active Directory Groups for Workspace ONE Access
Workspace ONE Access uses role-based access control to manage delegation of roles. You assign the Super Admin, Directory Admin, and ReadOnly roles to Active Directory groups to manage access to Workspace ONE Access.
15. Assign Roles to Active Directory Groups for VMware Aria Suite Lifecycle
To enable identity and access management for VMware Aria Suite Lifecycle, you integrate the component with the clustered Workspace ONE Access instance.
- VMware Cloud Foundation 5.1.1
-
Table 2. VMware Aria Suite Lifecycle Deployment and Update for VMware Cloud Foundation 5.1.1 Document
Procedure
Description
VMware Cloud Foundation Administration Guide
In a connected environment, download the VMware Aria Suite Lifecycle 8.16.0-23377566 bundle using SDDC Manager.
In a disconnected environment, download the VMware Aria Suite Lifecycle 8.16.0-23377566 bundle using the Bundle Transfer Utility.
Deploy VMware Aria Suite Lifecycle using SDDC Manager.
3. Replace the Certificate of the VMware Aria Suite Lifecycle Instance
Replace the VMware Aria Suite Lifecycle certificate with a Certificate Authority signed version.
Intelligent Operations Management for VMware Cloud Foundation
Update the Product Support Pack to PSPACK4 in VMware Aria Suite Lifecycle.
5. Create a vSphere Content Library for Intelligent Operations Management for VMware Cloud Foundation
Create a vSphere Content Library to host the VMware Aria Suite Lifecycle Upgrade ISO file.
Download the VMware Aria Suite Lifecycle 8.18.0 upgrade ISO from VMware Downloads and upload it to the vSphere Content Library.
Attach the Upgrade ISO and perform an upgrade of VMware Aria Suite Lifecycle to 8.18.0.
Remove all VMware Aria Suite Lifecycle snapshots created during the update process.
VMware Cloud Foundation Administration Guide
9. Configure Data Center and vCenter Server in VMware Aria Suite Lifecycle
Add a cross-instance data center and the associated management domain vCenter Server to VMware Aria Suite Lifecycle.
10. Import the Workspace ONE Access Certificate to VMware Aria Suite Lifecycle
Import the Workspace ONE Access certificate that you generated with the CertGenVVS utility.
11. Add Workspace ONE Access Passwords to VMware Aria Suite Lifecycle
To enable life cycle management and configuration management, you set the passwords for the VMware Aria Suite Lifecycle cross-instance environment administrator account and for the Workspace ONE Access administrator and configuration administrator accounts.
12. Deploy Clustered Workspace ONE Access Instance Using VMware Aria Suite Lifecycle
To provide identity and access management services to the cross-instance SDDC components, you create a global environment in VMware Aria Suite Lifecycle in which you deploy a 3-node clustered Workspace ONE Access instance.
Configure an anti-affinity rule to run the virtual machines on different hosts in the default management vSphere cluster.
Configure NTP using the Workspace ONE Access appliance configuration interface.
15. Configure the Domain and Domain Search Parameters on Workspace ONE Access
Configure the domain name and domain search parameters on Workspace ONE Access.
To enable identity and access management in the SDDC, you integrate your Active Directory with Workspace ONE Access and configure attributes to synchronize users and groups.
17. Add the Clustered Workspace ONE Access Cluster Nodes as Identity Provider Connectors
To provide high availability for the identity and access management services of a clustered Workspace ONE Access instance, you add the cluster nodes as directory connectors.
18. Assign Roles to Active Directory Groups for Workspace ONE Access
Workspace ONE Access uses role-based access control to manage delegation of roles. You assign the Super Admin, Directory Admin, and ReadOnly roles to Active Directory groups to manage access to Workspace ONE Access.
19. Assign Roles to Active Directory Groups for VMware Aria Suite Lifecycle
To enable identity and access management for VMware Aria Suite Lifecycle, you integrate the component with the clustered Workspace ONE Access instance.
- VMware Cloud Foundation 5.1.0
-
Table 3. VMware Aria Suite Lifecycle and Workspace ONE Access Deployment for VMware Cloud Foundation 5.1.0 Document
Procedure
Description
VMware Cloud Foundation Administration Guide
- In a connected environment, download the VMware Aria Suite Lifecycle 8.14.0-22630472 bundle using SDDC Manager.
- In a disconnected environment, download the VMware Aria Suite Lifecycle 8.14.0-22630472 bundle using the Bundle Transfer Utility.
Deploy VMware Aria Suite Lifecycle using SDDC Manager.
3. Replace the Certificate of the VMware Aria Suite Lifecycle Instance
Replace the VMware Aria Suite Lifecycle certificate with a Certificate Authority signed version.
Intelligent Operations Management for VMware Cloud Foundation
Update the Product Support Pack to PSPACK9 in VMware Aria Suite Lifecycle.
5. Create a vSphere Content Library for Intelligent Operations Management for VMware Cloud Foundation
Create a vSphere Content Library to host the VMware Aria Suite Lifecycle Upgrade ISO file.
Download the VMware Aria Suite Lifecycle 8.18.0 upgrade ISO from VMware Customer Connect and upload it to the vSphere Content Library.
Attach the Upgrade ISO and perform an upgrade of VMware Aria Suite Lifecycle to 8.18.0.
Remove all VMware Aria Suite Lifecycle snapshots created during the update process.
VMware Cloud Foundation Administration Guide
9. Configure Data Center and vCenter Server in VMware Aria Suite Lifecycle
Add a cross-instance data center and the associated management domain vCenter Server to VMware Aria Suite Lifecycle.
10. Import the Workspace ONE Access Certificate to VMware Aria Suite Lifecycle
Import the Workspace ONE Access certificate that you generated with the CertGenVVS utility.
11. Add Workspace ONE Access Passwords to VMware Aria Suite Lifecycle
To enable life cycle management and configuration management, you set the passwords for the VMware Aria Suite Lifecycle cross-instance environment administrator account and for the Workspace ONE Access administrator and configuration administrator accounts.
12. Deploy Clustered Workspace ONE Access Instance Using VMware Aria Suite Lifecycle
To provide identity and access management services to the cross-instance SDDC components, you create a global environment in VMware Aria Suite Lifecycle in which you deploy a 3-node clustered Workspace ONE Access instance.
Configure an anti-affinity rule to run the virtual machines on different hosts in the default management vSphere cluster.
Configure NTP using the Workspace ONE Access appliance configuration interface.
15. Configure the Domain and Domain Search Parameters on Workspace ONE Access
Configure the domain name and domain search parameters on Workspace ONE Access.
To enable identity and access management in the SDDC, you integrate your Active Directory with Workspace ONE Access and configure attributes to synchronize users and groups.
17. Add the Clustered Workspace ONE Access Cluster Nodes as Identity Provider Connectors
To provide high availability for the identity and access management services of a clustered Workspace ONE Access instance, you add the cluster nodes as directory connectors.
18. Assign Roles to Active Directory Groups for Workspace ONE Access
Workspace ONE Access uses role-based access control to manage delegation of roles. You assign the Super Admin, Directory Admin, and ReadOnly roles to Active Directory groups to manage access to Workspace ONE Access.
19. Assign Roles to Active Directory Groups for VMware Aria Suite Lifecycle
To enable identity and access management for VMware Aria Suite Lifecycle, you integrate the component with the clustered Workspace ONE Access instance.
What to do next
After you deploy VMware Aria Suite Lifecycle and Workspace ONE Access, continue the implementation of this solution by following the guidance provided in Prepare the VMware Cloud Foundation Instance for Intelligent Operations Management.
