This guide describes how you can install VMware Tanzu Operations Manager on vSphere.
If you experience a problem while using the following steps, see the TAS for VMs documentation or the Known Issues sections of the following topics:
VMware Tanzu Application Service for VMs v2.10 Release Notes in the TAS for VMs documentation
Isolation Segment v2.10 Release Notes in the TAS for VMs documentation
VMware Tanzu Application Service for VMs [Windows] v2.10 Release Notes in the TAS for VMs [Windows] documentation
Release Notes in the TKGI documentation
This section describes the resource requirements for installing Tanzu Operations Manager.
n If you are using the Cisco Nexus 1000v Switch, see the Using the Cisco Nexus 1000v Switch with Tanzu Operations Manager for more information.
When you install Tanzu Operations Manager on a vSphere environment with multiple ESXi hosts, you must use network-attached or shared storage devices. Local storage devices do not support sharing across multiple ESXi hosts.
Tanzu Operations Manager can be installed on and the BOSH Director tile within Tanzu Operations Manager can be configured with the following versions of vSphere:
The BOSH Director tile within Tanzu Operations Manager can optionally be configured with the following versions of NSX-T:
You can install Tanzu Operations Manager with one of two runtimes. For more information about the requirements for each runtime, see the following:
Tanzu Operations Manager requires that the NSX firewall routes are not blocked. By default, all communication between Tanzu Operations Manager VMs and vCenter or ESXi hosts route through the NSX firewall and are blocked. For more information on which ports to enable, see VMware ports and protocols for vSphere.
Tanzu Operations Manager requires read/write permissions to the data center level of the vSphere Inventory Hierarchy to successfully install. VMware recommends defining a custom role for the service account that has all privileges for all objects in the data center, including propagating privileges to children.
Because Tanzu Operations Manager passes all required credentials through to BOSH, you only need one service account with the required vSphere privileges to complete the installation. Setting up separate service accounts for Tanzu Operations Manager and BOSH is not necessary or recommended.
For more information about service account requirements, see the following topics:
TAS for VMs: vSphere service account requirements
TKGI: Create the BOSH/Tanzu Operations Manager service account in Preparing vSphere Before Deploying TKGI
You can also apply the default VMware Administrator System Role to the service account to achieve the appropriate permission level.
The following links contain best practices for securing and managing a vSphere installation:
This section describes the steps for installing Tanzu Operations Manager.
Complete the following procedures to install Tanzu Operations Manager on vSphere:
See the following topics for additional configuration options:
After completing the procedures above, configure a runtime.
For information about installing and configuring a runtime, see the following:
TAS for VMs:
You must install the NSX-T tile before you install or Upgrade the TAS for VMs tile.