This guide describes how you can install VMware Tanzu Operations Manager on vSphere.

If you experience a problem while using the following steps, see the TAS for VMs documentation or the Known Issues sections of the following topics:

Requirements

This section describes the resource requirements for installing Tanzu Operations Manager.

If you are using the Cisco Nexus 1000v Switch, see the Using the Cisco Nexus 1000v Switch with Tanzu Operations Manager.

When you install Tanzu Operations Manager on a vSphere environment with multiple ESXi hosts, you must use network-attached or shared storage devices. Local storage devices do not support sharing across multiple ESXi hosts.

Version requirements

Tanzu Operations Manager can be installed on vSphere, and the BOSH Director tile in Tanzu Operations Manager can be configured on vSphere.
The following versions of vSphere are supported.

The BOSH Director tile within Tanzu Operations Manager can optionally be configured with the following versions of NSX-T.

Supported versions
vSphere v8.0
v7.0
v6.7
v6.5
NSX-T (optional) v4.0
v3.1
v3.0

Resource requirements

You can install Tanzu Operations Manager with one of two runtimes. For more information about the requirements for each runtime, see the following:

Firewall port requirements

Tanzu Operations Manager requires that the NSX firewall routes are not blocked. By default, all communication between Tanzu Operations Manager VMs and vCenter or ESXi hosts route through the NSX firewall are blocked. For more information on which ports to enable, see VMware ports and protocols for vSphere.

vSphere service account requirements

Tanzu Operations Manager requires read/write permissions to the data center level of the vSphere Inventory Hierarchy to successfully install. VMware recommends defining a custom role for the service account that has all privileges for all objects in the data center, including propagating privileges to children.

Because Tanzu Operations Manager passes all required credentials through to BOSH, you only need one service account with the required vSphere privileges to complete the installation. Setting up separate service accounts for Tanzu Operations Manager and BOSH is not necessary or recommended.

For more information about service account requirements, see the following topics:

You can also apply the default VMware Administrator System Role to the service account to achieve the appropriate permission level.

vSphere security documents

The following links contain best practices for securing and managing a vSphere installation:

Installation procedure

Complete the following procedures to install Tanzu Operations Manager on vSphere:

  1. Deploying Tanzu Operations Manager to vSphere

  2. Configuring BOSH Director on vSphere

Additional configuration

See the following topics for additional configuration options:

Next steps

After you complete the previous procedures, configure a runtime.

For information about installing and configuring a runtime, see the following:

check-circle-line exclamation-circle-line close-line
Scroll to top icon