To implement the Intelligent Operations Management for VMware Cloud Foundation validated solution, you must ensure version compatibility between your VMware Cloud Foundation and your VMware Aria Suite Lifecycle instances. Depending on the version of VMware Cloud Foundation you are using, this may require the installation of certain VMware Aria Suite Lifecycle Product Support Packs (PSPACK) or an upgrade to VMware Aria Suite Lifecycle.

To deploy the validated version of VMware Aria Operations, follow only the specified procedures in the table below based on your version of VMware Cloud Foundation.

VMware Cloud Foundation 5.1.0
Table 1. VMware Aria Suite Lifecycle and Workspace ONE Access Deployment for VMware Cloud Foundation 5.1.0

Document

Procedure

Description

VMware Cloud Foundation Administration Guide

1. Download an Install Bundle

  • In a connected environment, download the VMware Aria Suite Lifecycle 8.14.0-22630472 bundle using SDDC Manager.
  • In a disconnected environment, download the VMware Aria Suite Lifecycle 8.14.0-22630472 bundle using the Bundle Transfer Utility.

2. Deploy VMware Aria Suite Lifecycle

Deploy VMware Aria Suite Lifecycle using SDDC Manager.

3. Replace the Certificate of the VMware Aria Suite Lifecycle Instance

Replace the VMware Aria Suite Lifecycle certificate with a Certificate Authority signed version.

4. Configure Data Center and vCenter Server in VMware Aria Suite Lifecycle

Add a cross-instance data center and the associated management domain vCenter Server to VMware Aria Suite Lifecycle.

5. Import the Workspace ONE Access Certificate to VMware Aria Suite Lifecycle

Import the Workspace ONE Access certificate that you generated with the CertGenVVS utility.

6. Add Workspace ONE Access Passwords to VMware Aria Suite Lifecycle

To enable life cycle management and configuration management, you set the passwords for the VMware Aria Suite Lifecycle cross-instance environment administrator account and for the Workspace ONE Access administrator and configuration administrator accounts.

7. Deploy Clustered Workspace ONE Access Instance Using VMware Aria Suite Lifecycle

To provide identity and access management services to the cross-instance SDDC components, you create a global environment in VMware Aria Suite Lifecycle in which you deploy a 3-node clustered Workspace ONE Access instance.

8. Configure an Anti-Affinity Rule and a Virtual Machine Group for a Clustered Workspace ONE Access Instance

Configure an anti-affinity rule to run the virtual machines on different hosts in the default management vSphere cluster.

9. Configure NTP on Workspace ONE Access

Configure NTP using the Workspace ONE Access appliance configuration interface.

10. Configure the Domain and Domain Search Parameters on Workspace ONE Access

Configure the domain name and domain search parameters on Workspace ONE Access.

11. Configure an Identity Source for Workspace ONE Access

To enable identity and access management in the SDDC, you integrate your Active Directory with Workspace ONE Access and configure attributes to synchronize users and groups.

12. Add the Clustered Workspace ONE Access Cluster Nodes as Identity Provider Connectors

To provide high availability for the identity and access management services of a clustered Workspace ONE Access instance, you add the cluster nodes as directory connectors.

13. Assign Roles to Active Directory Groups for Workspace ONE Access

Workspace ONE Access uses role-based access control to manage delegation of roles. You assign the Super Admin, Directory Admin, and ReadOnly roles to Active Directory groups to manage access to Workspace ONE Access.

14. Assign Roles to Active Directory Groups for VMware Aria Suite Lifecycle

To enable identity and access management for VMware Aria Suite Lifecycle, you integrate the component with the clustered Workspace ONE Access instance.

VMware Cloud Foundation 5.0
Table 2. VMware Aria Suite Lifecycle and Workspace ONE Access Deployment for VMware Cloud Foundation 5.0
Document Procedure Description

VMware Cloud Foundation Administration Guide

1. Download an Install Bundle

  • In a connected environment, download the VMware Aria Suite Lifecycle 8.10.0-21950667 bundle using SDDC Manager.
  • In a disconnected environment, download the VMware Aria Suite Lifecycle 8.10.0-21950667 bundle using the Bundle Transfer Utility.

2. Deploy VMware Aria Suite Lifecycle

Deploy VMware Aria Suite Lifecycle using SDDC Manager.

3. Replace the Certificate of the VMware Aria Suite Lifecycle Instance

Replace the VMware Aria Suite Lifecycle certificate with a Certificate Authority signed version.

Intelligent Operations Management for VMware Cloud Foundation

4. Apply a Product Support Pack to VMware Aria Suite Lifecycle for Intelligent Operations Management for VMware Cloud Foundation

Update the Product Support Pack to PSPACK17 in VMware Aria Suite Lifecycle.

5. Create a vSphere Content Library for Intelligent Operations Management for VMware Cloud Foundation

Create a vSphere Content Library to host the VMware Aria Suite Lifecycle Upgrade ISO file.

6. Obtain and Upload VMware Aria Suite Lifecycle Upgrade ISO to vSphere Content Library for Intelligent Operations Management for VMware Cloud Foundation

Download the VMware Aria Suite Lifecycle 8.14.0 upgrade ISO from VMware Customer Connect and upload it to the vSphere Content Library.

7. Upgrade VMware Aria Suite Lifecycle for Intelligent Operations Management for VMware Cloud Foundation

Attach the Upgrade ISO and perform an upgrade of VMware Aria Suite Lifecycle to 8.14.0.

8. Delete Snapshots of VMware Aria Suite Lifecycle for Intelligent Operations Management for VMware Cloud Foundation

Remove all VMware Aria Suite Lifecycle snapshots created during the update process.

VMware Cloud Foundation Administration Guide

9. Configure Data Center and vCenter Server in VMware Aria Suite Lifecycle Add a cross-instance data center and the associated management domain vCenter Server to VMware Aria Suite Lifecycle.
10. Import the Workspace ONE Access Certificate to VMware Aria Suite Lifecycle Import the Workspace ONE Access certificate that you generated with the CertGenVVS utility.
11. Add Workspace ONE Access Passwords to VMware Aria Suite Lifecycle To enable life cycle management and configuration management, you set the passwords for the VMware Aria Suite Lifecycle cross-instance environment administrator account and for the Workspace ONE Access administrator and configuration administrator accounts.
12. Deploy Clustered Workspace ONE Access Instance Using VMware Aria Suite Lifecycle

To provide identity and access management services to the cross-instance SDDC components, you create a global environment in VMware Aria Suite Lifecycle in which you deploy a 3-node clustered Workspace ONE Access instance.

13. Configure an Anti-Affinity Rule and a Virtual Machine Group for a Clustered Workspace ONE Access Instance Configure an anti-affinity rule to run the virtual machines on different hosts in the default management vSphere cluster.
14. Configure NTP on Workspace ONE Access Configure NTP using the Workspace ONE Access appliance configuration interface.
15. Configure the Domain and Domain Search Parameters on Workspace ONE Access Configure the domain name and domain search parameters on Workspace ONE Access.
16. Configure an Identity Source for Workspace ONE Access To enable identity and access management in the SDDC, you integrate your Active Directory with Workspace ONE Access and configure attributes to synchronize users and groups.
17. Add the Clustered Workspace ONE Access Cluster Nodes as Identity Provider Connectors To provide high availability for the identity and access management services of a clustered Workspace ONE Access instance, you add the cluster nodes as directory connectors.
18. Assign Roles to Active Directory Groups for Workspace ONE Access Workspace ONE Access uses role-based access control to manage delegation of roles. You assign the Super Admin, Directory Admin, and ReadOnly roles to Active Directory groups to manage access to Workspace ONE Access.
19. Assign Roles to Active Directory Groups for VMware Aria Suite Lifecycle To enable identity and access management for VMware Aria Suite Lifecycle, you integrate the component with the clustered Workspace ONE Access instance.
VMware Cloud Foundation 4.5.2
Table 3. VMware Aria Suite Lifecycle and Workspace ONE Access Deployment for VMware Cloud Foundation 4.5.2

Document

Procedure

Description

VMware Cloud Foundation Administration Guide

1. Download an Install Bundle

  • In a connected environment, download the VMware Aria Suite Lifecycle 8.10.0-21950667 bundle using SDDC Manager.
  • In a disconnected environment, download the VMware Aria Suite Lifecycle 8.10.0-21950667 bundle using the Bundle Transfer Utility.

2. Deploy VMware Aria Suite Lifecycle

Deploy VMware Aria Suite Lifecycle using SDDC Manager.

3. Replace the Certificate of the VMware Aria Suite Lifecycle Instance

Replace the VMware Aria Suite Lifecycle certificate with a Certificate Authority signed version.

Intelligent Operations Management for VMware Cloud Foundation

4. Apply a Product Support Pack to VMware Aria Suite Lifecycle for Intelligent Operations Management for VMware Cloud Foundation

Update the Product Support Pack to PSPACK17 in VMware Aria Suite Lifecycle.

5. Create a vSphere Content Library for Intelligent Operations Management for VMware Cloud Foundation

Create a vSphere Content Library to host the VMware Aria Suite Lifecycle Upgrade ISO file.

6. Obtain and Upload VMware Aria Suite Lifecycle Upgrade ISO to vSphere Content Library for Intelligent Operations Management for VMware Cloud Foundation

Download the VMware Aria Suite Lifecycle 8.14.0 upgrade ISO from VMware Customer Connect and upload it to the vSphere Content Library.

7. Upgrade VMware Aria Suite Lifecycle for Intelligent Operations Management for VMware Cloud Foundation

Attach the Upgrade ISO and perform an upgrade of VMware Aria Suite Lifecycle to 8.14.0.

8. Delete Snapshots of VMware Aria Suite Lifecycle for Intelligent Operations Management for VMware Cloud Foundation

Remove all VMware Aria Suite Lifecycle snapshots created during the update process.

VMware Cloud Foundation Administration Guide

9. Configure Data Center and vCenter Server in VMware Aria Suite Lifecycle

Add a cross-instance data center and the associated management domain vCenter Server to VMware Aria Suite Lifecycle.

10. Import the Workspace ONE Access Certificate to VMware Aria Suite Lifecycle

Import the Workspace ONE Access certificate that you generated with the CertGenVVS utility.

11. Add Workspace ONE Access Passwords to VMware Aria Suite Lifecycle

To enable life cycle management and configuration management, you set the passwords for the VMware Aria Suite Lifecycle cross-instance environment administrator account and for the Workspace ONE Access administrator and configuration administrator accounts.

12. Deploy Clustered Workspace ONE Access Instance Using VMware Aria Suite Lifecycle

To provide identity and access management services to the cross-instance SDDC components, you create a global environment in VMware Aria Suite Lifecycle in which you deploy a 3-node clustered Workspace ONE Access instance.

13. Configure an Anti-Affinity Rule and a Virtual Machine Group for a Clustered Workspace ONE Access Instance

Configure an anti-affinity rule to run the virtual machines on different hosts in the default management vSphere cluster.

14. Configure NTP on Workspace ONE Access Configure NTP using the Workspace ONE Access appliance configuration interface.
15. Configure the Domain and Domain Search Parameters on Workspace ONE Access Configure the domain name and domain search parameters on Workspace ONE Access.
16. Configure an Identity Source for Workspace ONE Access To enable identity and access management in the SDDC, you integrate your Active Directory with Workspace ONE Access and configure attributes to synchronize users and groups.
17. Add the Clustered Workspace ONE Access Cluster Nodes as Identity Provider Connectors To provide high availability for the identity and access management services of a clustered Workspace ONE Access instance, you add the cluster nodes as directory connectors.
18. Assign Roles to Active Directory Groups for Workspace ONE Access Workspace ONE Access uses role-based access control to manage delegation of roles. You assign the Super Admin, Directory Admin, and ReadOnly roles to Active Directory groups to manage access to Workspace ONE Access.
19. Assign Roles to Active Directory Groups for VMware Aria Suite Lifecycle To enable identity and access management for VMware Aria Suite Lifecycle, you integrate the component with the clustered Workspace ONE Access instance.

What to do next

After you deploy VMware Aria Suite Lifecycle and Workspace ONE Access, continue the implementation of this solution by following the guidance provided in Prepare the VMware Cloud Foundation Instance for Intelligent Operations Management.