Enabling Advanced Mode in Tanzu Operations Manager

The Tanzu Operations Manager disables certain fields after you have performed the initial installation. The reason for this is to protect you from changing fields that have a high likelihood of breaking your installation. Most of the time, this is a good thing, and you shouldn’t need to edit these fields.

Here are some sample fields that get locked:

From the the Ops Manager Director Tile, go to Assign AZs and Networks.
From the Elastic Runtime tile, select Assign AZs and Networks, then select Place Singleton Jobs & Balance other jobs.

Enabling Advanced Mode

To make changes to a locked field, you can enable advanced mode in the Operations Manager. There are two ways to do this: using curl and using UAAC. See the section below for detailed instructions.

Curl

Get an access token with User Account and Authentication (UAA). You can do that with this command.
```
curl -s -k -H 'Accept: application/json;charset=utf-8' -d 
'grant_type=password' -d 'username=<your-username>' -d 
'password=<your-pass>' -u 
'opsman:' https://<fqdn for your om>/uaa/oauth/token
```
The output of this will be a simple JSON dictionary and will have six keys. Look for the key named access token. Copy the value to your clipboard.

Run one of the following commands to enable, disable, or check the status of advanced mode.

To enable advanced mode, run this command.

curl -s -k -H 'Accept: application/json;charset=utf-8' -H "Content-Type: application/json" -H 'Authorization: bearer <access-token>' https://<fqdn for your om>/api/v0/staged/infrastructure/locked -X PUT --data '{"locked" : "false"}'

To check if the advanced mode is enabled, run this command:
```
curl -s -k -H 'Accept: application/json;charset=utf-8' -H 'Authorization: bearer <access-token>' https://<fqdn for your om>/api/v0/staged/infrastructure/locked
```
The output will indicate true if Operations Manager is locked and advanced mode is disabled or it will indicate false Operations Manager is not locked and advanced mode is enabled.

To disable advanced mode, run this command:

curl -s -k -H 'Accept: application/json;charset=utf-8' -H "Content-Type: application/json" -H 'Authorization: bearer <access-token>' https://<fqdn for your om>/api/v0/staged/infrastructure/locked -X PUT --data '{"locked" : "true"}'

UAAC

When you have the UAA Command Line Interface (UAAC) utility installed, you can also use that to enable and disable advanced mode. The process is similar.

Target UAA on Operations Manager. Run the following:

uaac target https://<fqdn for your om>/uaa
uaac token owner get

When prompted, enter the client name as “opsman”, leave the client secret blank, enter your username and password (the same as what you use to log on to the Operations Manager UI).

Now you can enable, disable, and check the status of advanced mode with the following commands. To enable advanced mode, run the following:

uaac curl https://<fqdn for your om>/api/v0/staged/infrastructure/locked -X PUT --data '{"locked" : "false"}' -H "Content-Type: application/json"

To check the status of advanced mode, run the following:

uaac curl https://<fqdn for your om>/api/v0/staged/infrastructure/locked

To disable advanced mode, run the following:

uaac curl https://<fqdn for your om>/api/v0/staged/infrastructure/locked -X PUT --data '{"locked" : "true"}' -H "Content-Type: application/json"

Impact

Using Operations Manager while it is in advanced mode disables some of the protections that Operations Manager provides for you. This will allow you to make changes that could potentially be dangerous to your installation of Tanzu Application Service.

VMware does not recommend enabling advanced mode unless you have been directed to do so by Tanzu Support. Even then, please proceed with caution when advanced mode is enabled and disable advanced mode once you have completed the change that you set out to make.