In the Operator portal, you can create customers and configure the customer settings.
Only Operator Super Users and Operator Standard Admins can create a new customer.
Note: As an Operator Super User, you can temporarily deactivate creating new customers by setting the system property
session.options.disableCreateEnterprise to True. You can use this option when
SD-WAN Orchestrator exceeds the usage capacity.
In the Operator portal, navigate to Manage Customers.
- In the Customers page, click New Customer or click .
- In the New Customer dialog, enter the details shown in the image. You can also choose the Clone from Customer option to clone the configurations from an existing customer. See the tables below for a description of the options in the New Customer dialog. For more information, see Clone a Customer.
Customer Information for New Customer Dialog
| Option | Description |
|---|---|
| Company Name | Enter your company name |
| Account Number | Enter a unique identifier for the customer |
| Domain | Enter the domain name of your company |
| VeloCloud Support Access | This option is selected by default and grants access to the VMware Support to view, configure, and troubleshoot the Edges connected to the customer. For security reasons, the Support cannot access or view the user identifiable information. |
| VeloCloud User Management Access | Select the checkbox to enable the VMware Support to assist in user management. The user management includes options to create users, reset password, and configure other settings. In this case, the Support has access to user identifiable information. |
| Street Address, City, State, Country, ZIP/Postcode | Enter relevant address details in the respective fields. |
Administrative Account for New Customer Dialog
| Option | Description |
|---|---|
| Username | Enter the username in the [email protected] format. |
| Password | Enter a password for the Administrator.
Note: Starting from the 4.5 release, the use of the special character "<" in the password is no longer supported. In cases where users have already used "<" in their passwords in previous releases, they must remove it to save any changes on the page.
|
| Confirm | Re-enter the password. |
| First Name, Last Name, Phone, Mobile Phone | Enter the details like name and phone number in the appropriate fields. |
| Contact Email | Enter the Email address. The alerts on service status are sent to this Email address. |
Customer Configuration for New Customer Dialog
As an Operator User, you can manage the software images assigned to an enterprise directly by assigning an
Operator Profile to an enterprise or allow an Enterprise Super User to manage the available list of software images for an enterprise by enabling
Manage Software Image.
Note: The 5.0.0 release introduces two options Operators can use to manage images (Platform Firmware for Edge 6X0 devices and Factory Default image for all devices). Modem Firmware management functionality is available for LTE SD-WAN Edge devices in the 5.0.0 release, but Modem Firmware bundles will be available in a future announcement. For more information about Platform Firmware (for Edge 6X0 devices), see
Firmware and Software Images with New Orchestrator UI and
Manage Operator Profiles.
| Option | Description |
|---|---|
| Manage Software Image | Select the checkbox if you want to allow an Enterprise Super user to manage the software images available for the enterprise. |
| Software/Firmware Images | Click Add and in the Select Software Images pop-up window, select and assign the software/firmware images from the available list for the enterprise and select an image to be used as default.
Note: The 5.0.0 release enables Operators to upload, modify, or delete Firmware Platform images for 6X0 Edge devices and Factory images for all physical SD-WAN Edge devices from the new Orchestrator UI. Operators can upload, modify, or delete software/firmware images for all Edge devices both from the Classic Orchestrator UI and the new Orchestrator UI.
Modem Firmware functionality is not supported in the 5.0.0 release. For more information about Platform Firmware (for Edge 6X0 devices), see Firmware and Software Images with New Orchestrator UI and Manage Operator Profiles.
Note: This field appears when you enable
Manage Software Image.
After adding the images, you can modify the assigned list of software/firmware images to the enterprise by clicking Modify under Customer Configuration area.
Note: You can remove an assigned image from an Enterprise only if the image is not currently used by any Edge within the enterprise.
|
| Operator Profile | Select an Operator profile to be associated with the customer from the available list. This field will not be available if Manage Software Image is enabled. For more information on Operator profiles, see Manage Operator Profiles. |
Service Configuration
You can choose the services that the customer can access along with the roles and permissions available for the selected service.
Note: This section is available only when the system property
session.options.enableServiceLicenses is set as
True.
- SD-WAN - The customer can access the SD-WAN services. When you select this service, the following options are available:
Option Description Default Edge Authentication Choose the default option to authenticate the Edges associated to the customer, from the drop-down list.
- Certificate Not Required: Edge uses a pre-shared key mode of authentication.
- Certificate Acquire: This option is selected by default and instructs the Edge to acquire a certificate from the certificate authority of the SD-WAN Orchestrator, by generating a key pair and sending a certificate signing request to the Orchestrator. Once acquired, the Edge uses the certificate for authentication to the SD-WAN Orchestrator and for establishment of VCMP tunnels.
Note: After acquiring the certificate, the option can be updated to Certificate Required.
- Certificate Required: Edge uses the PKI certificate. Operators can change the certificate renewal time window for Edges using the system property
edge.certificate.renewal.window.
Edge Licensing Click Add and in the Select Edge Licenses pop-up window, select and assign the edge licenses from the available list for the enterprise. After adding the licenses, you can click Modify under Customer Configuration area to add or remove the licenses. Note: The license types can be used on multiple Edges. It is recommended to provide your customers with access to all types of licenses to match their edition and region.For more information, see Edge Licensing.
- Edge Network Intelligence – You can select this option only when SD-WAN is selected. When you select tis service, the Edge Network Intelligence Configuration is available. Enter the maximum number of Edges that can be provisioned as Analytics Edge in the Nodes field. By default, Unlimited is selected.
Note: This option is available only when the Analytics feature is enabled on your SD-WAN Orchestrator.
For more information, see Activate VMware Edge Network Intelligence on a VMware SD-WAN Orchestrator.
- Cloud Web Security – You can enable this service only when a SASE PoP Gateway Pool is selected. Cloud Web Security is a cloud hosted service that protects users and infrastructure accessing SaaS and Internet applications. For more information, see the VMware Cloud Web Security Configuration Guide.
- Secure Access – You can enable this service only when a SASE PoP Gateway Pool is selected. Secure Access solution combines the VMware SD-WAN and Workspace ONE services to provide a consistent, optimal, and secure cloud application access through a network of worldwide managed service nodes. For more information, see the VMware Secure Access Configuration Guide.
,
Configure the following in the General Configuration section:
| Option | Description |
|---|---|
| Domain | Enter the domain name to be used to enable Single Sign-On (SSO) Authentication for the Orchestrator. This is also required to activate Edge Network Intelligence for the customer. |
| Gateway Pool | Select an existing Gateway pool from the drop-down list. For more information on Gateway pools, see Manage Gateway Pools. |
Click Create.
The new customer name is displayed in the Customers page. You can click on the customer name to navigate to the Enterprise portal and add configurations to the customer.
For more information, see Configure Customers and the Enterprise Administration section of VMware SD-WAN Administration Guide available at https://docs.vmware.com/en/VMware-SD-WAN/index.html.
