You can use the Client Integration Plug-In to migrate an external vCenter Single Sign-On instance to a Platform Services Controller appliance.
Before you begin
If you plan to deploy the new Platform Services Controller on an ESXi host, verify that the ESXi host is not in lockdown or maintenance mode
If you plan to deploy the Platform Services Controller on a DRS cluster of a vCenter Server inventory, verify that the cluster contains at least one ESXi host that is not in lockdown or maintenance mode.
If you plan to assign a static IP address in the temporary network settings of the appliance, verify that you have configured the forward and reverse DNS records for the IP address.
If you plan to assign a DHCP IP address in the temporary network settings of the new appliance, verify that the ESXi host on which you want to deploy the new appliance is in the same network as the ESXi host on which the existing vCenter Server runs.
If you plan to assign a DHCP IPv4 address in the temporary network settings of the new appliance, verify that the ESXi host on which you want to deploy the new appliance is connected to at least one network that is associated with a port group which accepts MAC address changes. Consider the default security policy of a distributed virtual switch, which is to reject MAC address changes. For information about how to configure the security policy for a switch or port group, see vSphere Networking.
- In the software installer directory, double-click vcsa-setup.html.
- Wait up to three seconds for the browser to detect the Client Integration Plug-in and allow the plug-in to run on the browser when prompted.
- On the Home page, click Migrate.
- Review the Introduction page to understand the migration process and click Next.
- Read and accept the license agreement, and click Next.
- Connect to the target server on which you want to deploy the Platform Services Controller.
You can connect to an ESXi host on which to deploy the appliance.
Enter the FQDN or IP address of the ESXi host.
Enter the HTTPS port of the ESXi host.
Enter the user name and password of a user with administrative privileges on the ESXi host, for example, the root user.
Verify that the certificate warning displays the SHA1 thumbprint of the SSL certificate that is installed on the target ESXi host, and click Yes to accept the certificate thumbprint.
You can connect to a vCenter Server instance and browse the inventory to select an ESXi host or DRS cluster on which to deploy the appliance.
Enter the FQDN or IP address of the vCenter Server instance.
Enter the HTTPS port of the vCenter Server instance.
Enter the user name and password of user with vCenter Single Sign-On administrative privileges on the vCenter Server instance, for example, the firstname.lastname@example.org user.
Verify that the certificate warning displays the SHA1 thumbprint of the SSL certificate that is installed on the target vCenter Server instance, and click Yes to accept the certificate thumbprint.
Select the data center or data center folder that contains the ESXi host or DRS cluster on which you want to deploy the appliance, and click NextNote:
You must select a data center or data center folder that contains at least one ESXi host that is not in lockdown or maintenance mode.
Select the ESXi host or DRS cluster on which you want to deploy the appliance, and click Next
- (Optional) : Acknowledge the warning message, if any, by clicking Yes.
- On the Set up virtual machine page, enter the Platform Services Controller name, set the password for the root user, and click Next.
The password must contain at least eight characters, a number, uppercase and lowercase letters, and a special character, for example, an exclamation mark (!), hash key (#), at sign (@), or brackets (()).
- (Optional) : Select the Enable SSH check box to enable SSH connection to the vCenter Server Appliance.
- On the Connect to source page, enter the details for the source vCenter Single Sign-On instance, and click Next.
- Enter the IP address or FQDN.
- Enter the user name and password of a user who has administrative privileges on the vCenter Single Sign-On instance, for example, the email@example.com user.
- Enter the Migration Assistant Port you received in the Migration Assistant instructions.
- (Optional) : Acknowledge the warning message, if any, by clicking Yes.
- If the source vCenter Single Sign-On is a member of an Active Directory domain, provide the credentials to join the target Platform Services Controller to the domain.
- On the Select appliance size page of the wizard, click Next.
The target Platform Services Controller appliance is deployed with 2 CPUs, 2 GB of memory and 30 GB of disk space.
- From the list of available datastores, select the location where all the virtual machine configuration files and virtual disks will be stored and, optionally, enable thin provisioning by selecting Enable Thin Disk Mode.
- On the Set up temporary network page, set up the network settings.
The IP address or the FQDN of the appliance is used as a system name. It is recommended to use an FQDN. However, if you want to use an IP address, use static IP address allocation for the appliance, because IP addresses allocated by DHCP might change.
Choose a network
Select the network to which to connect the new appliance temporarily.
Verify that the temporary network provides connectivity between the source vCenter Server and the target vCenter Server Appliance.
The networks displayed in the drop-down menu depend on the network settings of the target server. If you are deploying the appliance directly on an ESXi host, non-ephemeral distributed virtual port groups are not supported and are not displayed in the drop-down menu.Important:
If you want to assign a temporary IPv4 address with DHCP allocation, you must select a network that is associated with a port group which accepts MAC address changes.
Select how to allocate the IP address of the appliance.
You are prompted to enter the IP address and network settings.
A DHCP server is used to allocate the IP address. Select this option only if a DHCP server is available in your environment.
If you use an IP address as a system name, you cannot change the IP address and update the DNS settings after deployment.
- Review the VMware Customer Experience Improvement Program (CEIP) page and choose if you want to join the program.
For information about the CEIP, see the Configuring Customer Experience Improvement Program section in vCenter Server and Host Management.
- On the Ready to complete page, review the settings for the vCenter Single Sign-On migration and click Finish to complete the process.
The source vCenter Single Sign-On is migrated from Windows to an appliance. The old vCenter Single Sign-On on Windows is powered off and the new appliance starts.
What to do next
Verify that your migration to an appliance was successful. For verification steps, see Verify Your vCenter Server Appliance Migration Is Successful.
For the new Platform Services Controller appliance to replicate infrastructure data with other Platform Services Controller instances, you must migrate or upgrade all joined vCenter Single Sign-On instances within the vCenter Single Sign-On domain to the same version.
After you migrate all joined vCenter Single Sign-On instances, you can migrate the vCenter Server instances within the vCenter Single Sign-On domain. For information on migrating vCenter Server instances to appliances, see