You can unlink a cloud SDDC from Hybrid Linked Mode when you no longer want linking between your cloud SDDC and a particular on-premises data center..
For example, you might want to link an on-premises data center to your SDDC in order to migrate virtual machines to the SDDC, and then unlink the on-premises data center. If you plan to decomission a linked on-premises data center, unlink it before doing so.
Note: Unlinking an on-premises data center from the cloud SDDC does not remove the associated identity source or permissions that you added before linking the domain. Users can still use their on-premises credentials to authenticate to your SDDC, and retain the permissions granted to them. However, they are not able to view the on-premises inventory after unlinking the domain. When you unlink a cloud SDDC from the
VMware Cloud Gateway, users can't use their on-premises credentials to log into the cloud SDDC any longer.
Unlinking also leaves tags and categories in place, because VMs in your cloud SDDC might still be using those tags.
Prerequisites
Ensure that you have network connectivity between your SDDC management gateway and your SSO Domain.
Procedure
- Log into the appropriate system.
- If you linked your cloud SDDC and your on-premises data center from the VMware Cloud Gateway, log into the VMware Cloud Gateway UI.
- If you linked your cloud SDDC and your on-premises data center from the cloud vCenter, log in to the vSphere Client for your SDDC.
- Browse to the Linked Domains page.
- Select to display the Administration page.
- Under Hybrid Cloud, select Linked Domains.
- Under the name of the linked domain, click Unlink.
A dialog box appears asking you to confirm the unlinking. Note that all currently active sessions are logged out when you unlink a domain.
- Click OK.
When the unlinking is complete, you are prompted to log out.
- Click OK to log out.
Results
The SSO domain is unlinked. If you want to continue using Hybrid Linked Mode, you can link to another SSO domain or relink to the same domain.
Note: After you unlink from the cloud SDDC, new connections to the cloud SDDC
vSphere Client cannot view or interact with previously-linked on-premises resources. Currently active sessions in the cloud SDDC
vSphere Client continue to be able to view and interact with resources in the previously linked on-premises
vCenter instances until the users of those sessions log out of the cloud SDDC
vSphere Client or the sessions expire. If necessary, log in to each of the previously-linked on-premises
vCenter instances, and forcibly terminate these sessions.
After you unlink from the VMware Cloud Gateway, new connections to the VMware Cloud Gateway cannot view or interact with previously-linked cloud resources. Currently active sessions in the VMware Cloud Gateway continue to be able to view and interact with resources in the cloud SDDC until the users of those sessions log out or the sessions expire. If necessary, log in to the VMware Cloud Gateway and forcibly terminate these sessions.