You can manage vCenter Single Sign-On and the Licensing service from the vSphere Web Client.

Use the Platform Services Controller Web interface or CLIs instead of the vSphere Web Client to manage the following services.

  • Certificates

  • VMware Endpoint Certificate Store (VECS)

  • Two-factor authentication such as Common Access Card authentication

  • Login banner


  1. Log in to a vCenter Server associated with the Platform Services Controller as a user with administrator privileges in the local vCenter Single Sign-On domain (vsphere.local by default).
  2. Select Administration and click the item that you want to manage.



    Single Sign-On

    Configure vCenter Single Sign-On.

    • Set policies.

    • Manage identity sources.

    • Manage the STS Signing certificate.

    • Manage SAML service providers.

    • Manage users and groups.


    Configure licensing.