Deploy the Cross-Region Workspace ONE Access Cluster Using vRealize Suite Lifecycle Manager in Region A

To provide identity and access management services to the cross-region SDDC components, you create a cross-region environment in vRealize Suite Lifecycle Manager in which you deploy the three nodes of the cross-region Workspace ONE Access cluster.

During the deployment by using vRealize Suite Lifecycle Manager, you configure the cross-region Workspace ONE Access instance to synchronize group members to the directory when adding a group.

Procedure

1. In a Web browser, log in to vRealize Suite Lifecycle Manager by using the administration interface.

   Setting	Value
   URL	https://vrslcm01svr01.rainpole.local
   User name	admin@local
   Password	vrslcm_admin_password

2. On the My services page, click Lifecycle operations.
3. On the Dashboard page, click Create environment.
4. Configure these settings and click Next.

   Setting	Value
   Environment name	globalenvironment
   Administrator email	wsa01svr01_configadmin_email
   Default password	global-env-admin
   Data center	cross-region-dc
   JSON configuration	Deselected
   Join the VMware customer experience improvement program	Selected

5. On the Select product page, select the check box for VMware Identity Manager, configure these settings, and click Next.

   Setting	Value
   Installation type	New Install
   Version	3.3.2
   Deployment type	Cluster

6. On the Accept license agreements page, accept the license agreement and click Next.
7. On the Certificate page, from the Select certificate drop-down menu, select wsa01svr01-certificate, and click Next.
8. On the Infrastructure page, configure these settings and click Next.

   Setting	Value
   vCenter Server	sfo01m01vc01.sfo01.rainpole.local
   Cluster	sfo01-m01dc#sfo01-m01-mgmt01
   Folder	sfo01-m01fd-wsa
   Resource pool	sfo01-m01-sddc-mgmt
   Network	Distributed port group that ends with Mgmt-xRegion01-VXLAN
   Datastore	sfo01-m01-vsan01
   Disk mode	Thin
   Use content library	Deselected

9. On the Network page, configure these settings and Next.

   Setting	Value
   Default gateway	192.168.11.1
   Netmask	255.255.255.0
   Domain name	rainpole.local
   Domain Search Path	rainpole.local
   DNS Servers	Click Edit server selection, select 172.16.11.4 and 172.16.11.5, and click Next and Finish.
   Time Sync Mode	Use NTP Server
   NTP Servers	Click Edit server selection, select ntp.sfo01.rainpole.local, click Next and Finish.

10. On the Products page, configure the deployment properties for the cross-region Workspace ONE Access instance and click Next.
    1. In the Product properties section, configure the following.

       Setting	Value
       Certificate	wsa01svr01-certificate
       Admin password	wsa01svr01-admin
       Default configuration admin user name	configadmin
       Default configuration admin password	wsa01svr01-configadmin
       Sync group members	Selected

    2. In the Cluster VIP FQDN section, configure these settings.

       Setting	Value
       FQDN	wsa01svr01.rainpole.local
       Database IP Address	192.168.11.64

    3. In the Components section, configure the primary cluster node.

       Setting	Value
       VM Name	wsa01svr01a
       FQDN	wsa01svr01a.rainpole.local
       IP Address	192.168.11.61

    4. In the Components section, configure the second cluster node.

       Setting	Value
       VM name	wsa01svr01b
       FQDN	wsa01svr01b.rainpole.local
       IP address	192.168.11.62

    5. In the Components section, configure the third cluster node.

       Setting	Value
       VM name	wsa01svr01c
       FQDN	wsa01svr01c.rainpole.local
       IP address	192.168.11.63

11. On the Manual validation page, review the manual checks, select I have taken care of the manual steps above and ready to proceed, and click Run precheck.
12. Review the validation report and, after a successful validation, click Next.
13. On the Summary page, review the deployment specification, disable Run prechecks on submit, and click Submit.