About Site Protection and Disaster Recovery for VMware Cloud Foundation

The Site Protection and Disaster Recovery for VMware Cloud Foundation validated solution provides instructions for adapting a dual-instance software-defined data center (SDDC), deployed on top of VMware Cloud Foundation™, to provide disaster recovery of the SDDC management components. Use VMware Site Recovery Manager™ and VMware vSphere^® Replication™ to perform site protection and disaster recovery of VMware Workspace ONE^® Access™, VMware Aria^® Automation™, VMware Aria^® Operations™, and VMware Aria Suite Lifecycle.

A VMware by Broadcom validated solution is a well-architected and validated implementation, built and tested by VMware to help customers deliver common business use cases. VMware validated solutions are operational, cost-effective, performant, reliable and secure. Each solution contains a detailed design, implementation, and operational guidance.

Automation for This Design in VMware Cloud Foundation

VMware Cloud Foundation™ SDDC Manager^® automates the implementation tasks for some design decisions. For the rest of the design decisions, as noted in the design implications, you must perform the implementation steps manually.

To provide a fast and efficient path to automating the Site Protection and Disaster Recovery for VMware Cloud Foundation implementation, this document provides Microsoft PowerShell cmdlets using an open-source module as code-based alternatives to completing certain procedures in each SDDC component's user interface.

For additional information, see PowerShell Module for VMware Validated Solutions.

Intended Audience

The Site Protection and Disaster Recovery for VMware Cloud Foundation validated solution documentation is intended for cloud architects, infrastructure administrators, and cloud administrators who are familiar with and want to use VMware software to deploy in a short time site protection and disaster recovery solution on VMware Cloud Foundation.

Support Matrix

This Site Protection and Disaster Recovery for VMware Cloud Foundation validated solution is compatible with certain versions of the VMware products that are used for implementing the solution.

Table 1. Software Components in Site Protection and Disaster Recovery for VMware Cloud Foundation

VMware Cloud Foundation Version	Product Group	Component Versions
5.2.0	Products part of VMware Cloud Foundation	See VMware Cloud Foundation 5.2.0 Release Notes.
	Solution-added products	Site Recovery Manager 9.0
		vSphere Replication 9.0
5.1.1	Products part of VMware Cloud Foundation	See VMware Cloud Foundation 5.1.1 Release Notes.
	Solution-added products	Site Recovery Manager 9.0
		vSphere Replication 9.0
5.1.0	Products part of VMware Cloud Foundation	See VMware Cloud Foundation 5.1.0 Release Notes.
	Solution-added products	Site Recovery Manager 9.0
		vSphere Replication 9.0

Table 2. End of General Support Software Components in Site Protection and DIsaster Recovery for VMware Cloud Foundation

VMware Cloud Foundation Version	Product Group	Component Versions
5.0	Products part of VMware Cloud Foundation	See VMware Cloud Foundation 5.0 Release Notes. VMware Aria Suite Lifecycle 8.10.0 (EOGS)
	Solution-added products	Site Recovery Manager 8.7
		vSphere Replication 8.7
4.5.2	Products part of VMware Cloud Foundation	See VMware Cloud Foundation 4.5.2 Release Notes. VMware Aria Suite Lifecycle 8.10.0 (EOGS)
	Solution-added products	Site Recovery Manager 8.7
		vSphere Replication 8.7
4.5.1	Products part of VMware Cloud Foundation	See VMware Cloud Foundation 4.5.1 Release Notes. VMware vRealize Suite Lifecycle Manager 8.8.2 (EOGS)
	Solution-added products	Site Recovery Manager 8.6
		vSphere Replication 8.6
4.5.0	Products part of VMware Cloud Foundation	See VMware Cloud Foundation 4.5.0 Release Notes. VMware vRealize Suite Lifecycle Manager 8.8.2 (EOGS)
	Solution-added products	Site Recovery Manager 8.6
		vSphere Replication 8.6
4.4.1	Products part of VMware Cloud Foundation	See VMware Cloud Foundation 4.4.1 Release Notes. VMware vRealize Suite Lifecycle Manager 8.6.2 (EOGS)
	Solution-added products	Site Recovery Manager 8.6
		vSphere Replication 8.6
4.4.0	Products part of VMware Cloud Foundation	See VMware Cloud Foundation 4.4.0 Release Notes. VMware vRealize Suite Lifecycle Manager 8.6.2 (EOGS)
	Solution-added products	Site Recovery Manager 8.6
		vSphere Replication 8.6
4.3.1	Products part of VMware Cloud Foundation	See VMware Cloud Foundation 4.3.1 Release Notes.
	Solution-added products	Site Recovery Manager 8.4 (EOGS)
		vSphere Replication 8.4 (EOGS)
4.3.0	Products part of VMware Cloud Foundation	See VMware Cloud Foundation 4.3.0 Release Notes.
	Solution-added products	Site Recovery Manager 8.4 (EOGS)
		vSphere Replication 8.4 (EOGS)

Note:

The software component versions in this table are in End of General Support (EOGS) phase and are no longer generally supported by VMware. At the time of initial release and during the General Support phase, the software component versions in this solution are actively implemented, tested, and validated by VMware and VMware partners. See VMware Lifecycle Policies.

Before You Apply This Guidance

To design and implement the Site Protection and Disaster Recovery for VMware Cloud Foundation validated solution, your environment must have a certain configuration.

Table 3. Supported VMware Cloud Foundation Deployment

Workload Domain / Component	Deployment Details
Two VMware Cloud Foundation instances with configured management domains	Automated deployment using VMware Cloud Builder™ See the following VMware Cloud Foundation documentation: For information on designing the management domain, see VMware Cloud Foundation Design Guide. For information on deploying the management domain, see Getting Started with VMware Cloud Foundation and VMware Cloud Foundation Deployment Guide. For information on operating the management domain, see VMware Cloud Foundation Administration Guide and VMware Cloud Foundation Operations Guide.
NSX Federation	Manual deployment of an NSX Global Manager cluster in each VMware Cloud Foundation instance. The NSX Global Manager in the first instance is set as Active and in the second instance - as Standby. Manual deployment of overlay-backed segments in VMware NSX for traffic in the same VMware Cloud Foundation instance and between VMware Cloud Foundation instances. For information on the configuration and the design of NSX Federation in VMware Cloud Foundation, see Working with NSX Federation in VMware Cloud Foundation and NSX Design for VMware Cloud Foundation
(Optional) One or more virtual infrastructure workload domains in each VMware Cloud Foundation instance	Automated deployment by using VMware Cloud Foundation™ SDDC Manager™ See VMware Cloud Foundation documentation: For information on designing a VI workload domain, see VMware Cloud Foundation Design Guide. For information on deploying the VI workload domains, see Getting Started with VMware Cloud Foundation and VMware Cloud Foundation Administration Guide. For information on operating the VI Workload domain, see VMware Cloud Foundation Operations Guide.
VMware Aria Suite Lifecycle and clustered Workspace ONE Access	Automated deployment of VMware Aria Suite Lifecycle by using SDDC Manager. Automated deployment of the clustered Workspace ONE Access instance by using VMware Aria Suite Lifecycle. See the following VMware Cloud Foundation Documentation: For information on designing VMware Aria Suite Lifecycle and the clustered Workspace ONE Access, see Design for VMware Aria Suite Lifecycle and Access Management. For information on deploying VMware Aria Suite Lifecycle and the clustered Workspace ONE Access instance, see Getting Started with VMware Cloud Foundation and VMware Cloud Foundation Operations and Administration Guide.
One or both of the following solutions: VMware Aria Automation VMware Aria Operations	Manual or PowerShell automated deployment. See the Private Cloud Automation for VMware Cloud Foundation validated solution. Manual or PowerShell automated deployment. See the Intelligent Operations Management for VMware Cloud Foundation validated solution.

Supportability

The Site Protection and Disaster Recovery for VMware Cloud Foundation validated solution uses NSX Federation. Additional or third-party integrations that are not compatible with NSX Global Manager functionalities are outside of the scope of this solution and are not supported.

Overview of Site Protection and Disaster Recovery for VMware Cloud Foundation

By applying the Site Protection and Disaster Recovery for VMware Cloud Foundation validated solution, you implement disaster recovery for the management components of VMware Cloud Foundation between a protected and a failover instance of VMware Cloud Foundation.

Table 4. Implementation Overview of Site Protection and Disaster Recovery for VMware Cloud Foundation

Stage	Steps
1. Plan and prepare the VMware Cloud Foundation environment	Work with the technology team of your organization on configuring the physical servers, network, and storage in the data center. Collect the environment details and write them down in the VMware Cloud Foundation Planning and Preparation Workbook.
2. Prepare your environment for the implementations of vSphere Replication and Site Recovery Manager	Prepare load balancing services for the VMware Aria Suite components and the clustered Workspace ONE Access instance in the recovery VMware Cloud Foundation instance. Reconfigure the DNS, domain search, and NTP settings on multiple SDDC management components.
3. Implement the disaster recovery solutions in the protected and the recovery VMware Cloud Foundation instances	Implement vSphere Replication for the Management Domain Implementation of Site Recovery Manager for the Management Domain Configure Failover of the SDDC Management Components for the Management Domain. Configure site protection and disaster recovery Components for Virtual Infrastructure Workload Domains.

Frequently Asked Questions

For additional questions, see VMware Validated Solutions Frequently Asked Questions.

Update History

The Site Protection and Disaster Recovery for VMware Cloud Foundation validated solution is updated when necessary.

Revision	Description
23 JUL 2024	This validated solution now supports VMware Cloud Foundation 5.2.0. This validated solution now provides a single procedure for PowerShell automation. See Automated PowerShell Implementation of Site Protection and Disaster Recovery Using PowerShell Automation This validated solution now uses the PowerValidatedSolutions PowerShell module to generate a Microsoft CA signed certificates. See Replace the Certificate of vSphere Replication for Site Protection and Disaster Recovery for VMware Cloud Foundation Replace the Certificate of Site Recovery Manager for Site Protection and Disaster Recovery for VMware Cloud Foundation The PowerValidatedSolutions PowerShell module is now version 2.11.0.
28 MAY 2024	This validated solution now supports Site Recovery Manager 9.0 and vSphere Replication 9.0. The PowerValidatedSolutions PowerShell module is now version 2.10.0.
26 MAR 2024	This validated solution now supports VMware Cloud Foundation 5.1.1. The PowerValidatedSolutions PowerShell module is now version 2.9.0, adding support for the following procedures: Configure Replication, Create a Protection Group and a Recovery Plan for VMware Aria Suite Lifecycle and Clustered Workspace ONE Access for Site Protection and Disaster Recovery for VMware Cloud Foundation Customize the Recovery Plan for VMware Aria Suite Lifecycle and the Clustered Workspace ONE Access for Site Protection and Disaster Recovery for VMware Cloud Foundation Configure Replication, Create a Protection Group and a Recovery Plan for VMware Aria Operations Analytics Cluster for Site Protection and Disaster Recovery for VMware Cloud Foundation Customize the Recovery Plan for VMware Aria Operationsfor Site Protection and Disaster Recovery for VMware Cloud Foundation Configure Replication, Create a Protection Group and a Recovery Plan for VMware Aria Automationfor Site Protection and Disaster Recovery for VMware Cloud Foundation Customize the Recovery Plan for VMware Aria Automationfor Site Protection and Disaster Recovery for VMware Cloud Foundation The VMware.PowerCLI PowerShell module is now version 13.2.1.
30 JAN 2024	This validated solution now includes guidance on password policy management and configuration. See the following: Password Management Design for Site Protection and Disaster Recovery for VMware Cloud Foundation Appendix: Default Password Policy Settings for vSphere Replication and Site Recovery Manager for VMware Cloud Foundation Configuring Password Policies for Site Protection and Disaster Recovery for VMware Cloud Foundation This validated solution now provides guidance on upgrading the VMware Aria Operations for Logs agent. See Upgrade and Configure the VMware Aria Operations for Logs Agent on the Site Recovery Manager and vSphere Replication Appliances for Site Protection and Disaster Recovery for VMware Cloud Foundation. The PowerValidatedSolutions PowerShell module is now version 2.8.0.
07 NOV 2023	This validated solution now supports VMware Cloud Foundation 5.1.0. The PowerValidatedSolutions PowerShell module is now version 2.7.0. The PowerVCF PowerShell module is now version 2.4.0. The following solution-added product names are changing: VMware vRealize Suite Lifecycle Manager is now VMware Aria Suite Lifecycle VMware vRealize Log Insight is now VMware Aria Operations for Logs VMware vRealize Operations is now VMware Aria Operations VMware vRealize Automation is now VMware Aria Automation For more information on the VMware Aria rebranding, see Multi-Cloud Management and VMware Aria.
29 AUG 2023	This validated solution now supports VMware Cloud Foundation 4.5.2. The VMware.PowerCLI PowerShell module is now version 13.1.0. The ImportExcel PowerShell module is now version 7.8.5. The PowerValidatedSolutions PowerShell module is now version 2.6.0.
25 JUL 2023	This validated solution now supports VMware Cloud Foundation 5.0. The PowerValidatedSolutions PowerShell module is now version 2.5.0.
30 MAY 2023	This validated solution now supports VMware Cloud Foundation 4.5.1. The PowerValidatedSolutions PowerShell module is now version 2.3.0.
25 APR 2023	The VMware.PowerCLI PowerShell module is now version 13.0.0. The VMware.vSphere.SsoAdmin PowerShell module is now version 1.3.9. The ImportExcel PowerShell module is now version 7.8.4. The PowerVCF PowerShell module is now version 2.3.0 The PowerValidatedSolutions PowerShell module is now version 2.2.0.
28 MAR 2023	The PowerValidatedSolutions PowerShell module is now version 2.1.0.
28 FEB 2023	The PowerValidatedSolutions PowerShell module is now version 2.0.1.
31 JAN 2023	The PowerValidatedSolutions PowerShell module is now version 2.0.0. The following sections now contain information about NSX Federation: Before You Apply This Guidance Architecture Logical Network Design for Multiple VMware Cloud Foundation Instance Deployment with Overlay Networking
29 NOV 2022	This validated solution now supports Site Recovery Manager 8.6 and vSphere Replication 8.6. The VMware.PowerCLI PowerShell module is now version 12.7.0. The VMware.vSphere.SsoAdmin PowerShell module is now version 1.3.8. The PowerValidatedSolutions PowerShell module is now version 1.10.0, providing updates both in the implementation and the operational PowerShell procedures.
25 OCT 2022	This validated solution now supports VMware Cloud Foundation 4.5.0. The PowerValidatedSolutions PowerShell module is now version 1.9.0, adding support for the following procedures: Add Site Recovery Manager Adapter Instances to VMware Aria Operationsfor Site Protection and Disaster Recovery for VMware Cloud Foundation Add vSphere Replication Adapter Instances to VMware Aria Operationsfor Site Protection and Disaster Recovery for VMware Cloud Foundation Create Notifications in VMware Aria Operations for Site Protection and Disaster Recovery for VMware Cloud Foundation.
27 SEP 2022	The PowerValidatedSolutions PowerShell module is now version 1.8.0, adding support for the following procedures: Create vSphere Single Sign-On Users for Integration with VMware Aria Operations for Site Protection and Disaster Recovery for VMware Cloud Foundation Configure Service Account Permissions in vSphere for Integration with VMware Aria Operations for Protection and Disaster Recovery for VMware Cloud Foundation Install the VMware Aria Operations Management Packs for vSphere Replication and Site Recovery Manager for Site Protection and Disaster Recovery for VMware Cloud Foundation This validated solution now has design decisions on network segments, IP addressing scheme, name resolution, and time synchronization. See Network Design for Site Protection and Disaster Recovery for VMware Cloud Foundation.
31 MAY 2022	This validated solution now supports VMware Cloud Foundation 4.4.1. This validated solution now containts guidance on life cycle management. See Life Cycle Management for Site Protection and Disaster Recovery for VMware Cloud Foundation The PowerVCF PowerShell module is now version 2.2.0. The PowerValidatedSolutions PowerShell module is now version 1.7.0, adding support for the following implementation procedures. Add a Network Adapter and Configure Static Routes for vSphere Replication for Site Protection and Disaster Recovery for VMware Cloud Foundation Create a VMkernel Adapter on the ESXi Hosts for vSphere Replication Traffic for Site Protection and Disaster Recovery for VMware Cloud Foundation Configure ESXi Host Static Routes for vSphere Replication for Site Protection and Disaster Recovery for VMware Cloud Foundation
28 APR 2022	The PowerValidatedSolutions PowerShell module is now version 1.6.0, adding support for the following implementation procedures. Reconfigure DNS and Domain Search on the VMware Aria Automation Nodes for Site Protection and Disaster Recovery for VMware Cloud Foundation Reconfigure NTP on VMware Aria Automation for Site Protection and Disaster Recovery for VMware Cloud Foundation Create a Port Group for vSphere Replication Traffic for Site Protection and Disaster Recovery for VMware Cloud Foundation Create a Site Pair Between the Protected and Recovery VMware Cloud Foundation Instances Configure Mappings between the Protected and the Recovery VMware Cloud Foundation Instances
29 MAR 2022	The PowerValidatedSolutions PowerShell module is now version 1.5.0, adding support for the following implementation procedures. Upgrade and Configure the VMware Aria Operations for Logs Agent on the Site Recovery Manager and vSphere Replication Appliances for Site Protection and Disaster Recovery for VMware Cloud Foundation Create a VMware Aria Operations for Logs Photon OS Agent Group for Site Recovery Manager and the vSphere Replication for Site Protection and Disaster Recovery for VMware Cloud Foundation Reconfigure DNS and Domain Search on the VMware Aria Suite Lifecycle Appliance for Site Protection and Disaster Recovery for VMware Cloud Foundation Reconfigure NTP on the VMware Aria Suite Lifecycle Appliance for Site Protection and Disaster Recovery for VMware Cloud Foundation Reconfigure DNS and Domain Search on the Clustered Workspace ONE Access Nodes for Site Protection and Disaster Recovery for VMware Cloud Foundation Reconfigure NTP on the Clustered Workspace ONE Access Nodes for Site Protection and Disaster Recovery for VMware Cloud Foundation Reconfigure DNS and Domain Search on the VMware Aria Operations Analytics Cluster Nodes for Site Protection and Disaster Recovery for VMware Cloud Foundation Reconfigure NTP on the VMware Aria Operations Analytics Cluster Nodes for Site Protection and Disaster Recovery for VMware Cloud Foundation Removing the procedure Configure the vRealize Log Insight Agent on the Site Recovery Manager and vSphere Replication Appliances. This design now includes a design decision SPR-SRM-LOG-002 for configuring the vRealize Log Insight agent to transmit logs from the Site Recovery Manager instance by using the vRealize Log Insight ingestion API. See Logging for Site Protection and Disaster Recovery for VMware Cloud Foundation. This design now includes a design decision SPR-SRM-LOG-004 for configuring the vRealize Log Insight agent to transmit logs from the vSphere Replication instance by using the vRealize Log Insight ingestion API. See Logging for Site Protection and Disaster Recovery for VMware Cloud Foundation. This design now includes a design decision SPR-SRM-LOG-005 for configuring a dedicated Photon OS agent group for the Site Recovery Manager and vSphere Replication appliances. See Logging for Site Protection and Disaster Recovery for VMware Cloud Foundation.
22 FEB 2022	This validated solution now supports VMware Cloud Foundation 4.4.0. This validated solution now requires installation of the ImportExcel PowerShell module. The PowerValidatedSolutions PowerShell module is now version 1.4.0. The VMware.PowerCLI PowerShell module is now version 12.4.1.
25 JAN 2022	This validated solution now supports VxRail. The VMware.vSphere.SsoAdmin PowerShell module is now version 1.3.7. The PowerValidatedSolutions PowerShell module is now version 1.3.0, adding support for the following implementation procedures. Create Anti-Affinity Rules for the Placeholder Virtual Machines in the Recovery VMware Cloud Foundation Instance Create Virtual Machine Groups and Restart Order in the Recovery VMware Cloud Foundation Instance
30 NOV 2021	The PowerVCF PowerShell module is now version 2.1.7. The PowerValidatedSolutions PowerShell module is now version 1.2.0. The operational guidance now includes shutdown and startup procedures for the solution components. See Shutdown and Startup of Site Protection and Disaster Recovery for VMware Cloud Foundation.
5 OCT 2021	Initial release.