You can increase the HA option in VMware Identity Manager by having one or three nodes to manage VMware Identity Manager.

  • Ensure to take snapshots of VMware Identity Manager nodes before you perform scale-out operations. VMware Identity Manager cluster is always three node including an existing node.
  • Verify that there is a certificate already added in the locker and also perform the replace certificate on the standalone VMware Identity Manager node. The certificate should also have SAN entries of all the three nodes or wild-card certificate.


For a VMware Identity Manager cluster and replace certificate actions, ensure to take a snapshot of the VMware Identity Manager nodes.


  1. Navigate to Environments, on the environment page, click Add Component .
  2. Enter the Infrastructure details and click Next.
  3. Enter the Network details and click Next.
  4. On the Product Properties, the certificate details are auto-populated.
  5. On the components section, click Secondary for the scale-out.
  6. Enter the load balancer Host name.
  7. Enter a delegate IP address.
    Note: The delegate IP address is used internally as a proxy to postgres master and it should be free or an available IP address. This is not same as the one used to load-balance the application.
    1. To add a windows connector to an existing VMware Identity Manager, on the Components, select Windows Connector.
    2. Add Windows VM name as in vCenter, Host Name, User name, and Password.
    3. Provide a user-defined windows connector name.
  8. Click and run the pre-check.
  9. Click Submit.