You can upgrade a vRealize Automation Identity Appliance with vCenter Platform Services Controller (PSC), a component of vSphere 6.x. To do this, you must register the new SSO with vRealize Appliance, add identity stores, and create a new solution user.

About this task

You can upgrade to PSC as part of your product upgrade or as an independent product component.


  • Backup and create a snapshot of your Identity Appliance.

  • Save information for identity stores for all tenants. You must recreate this information in the new SSO appliance.

  • Install vCenter PSC.

    • Download the vCenter Server (VCSA) for Linux and Windows Deploys from the VMware download site.

    • Follow the deployment procedures in the VMware vCenter Server 6.0 Deployment Guide searchable at

  • If you are upgrading to PSC as part of a complete product upgrade, upgrade your vRealize Automation deployment before beginning the following procedure.


  1. Navigate to the vRealize Appliance management console by using its fully qualified domain name,
  2. Log in with user name root and the password you specified when you deployed vRealize Appliance.
  3. Click the vRA Settings tab and click SSO from the menu bar.
  4. Change the value in the SSO Port text box to 443.
  5. Enter the default administrator name administrator@vsphere.local in the SSO Admin User text box.
  6. Enter the SSO administrator password in the SSO Admin Password text box. The password must match the password you specified in the SSO settings for the Identity Appliance.
  7. Click Save Settings.
  8. If you are prompted with a warning about an untrusted host, click OK to proceed and to restart vRealize Appliance services.
  9. Wait for all services to restart before using vRealize Automation.
    1. Click the Services tab.
    2. Monitor the Registered Services listing. You can click Refresh to see the latest information.
  10. Add identity stores to the new appliance.
    1. Log out of the vRealize Appliance management console.
    2. Go to your default tenant at https://vCAC FQDN/vcac and log in as administrator@vsphere.local.
    3. Open the tenant.
    4. Click Update.
    5. Open each configured tenant and add the identity stores you configured prior to the upgrade and saved earlier,
    6. Click Add.
    7. Click Update.
    8. Reopen the tenant and confirm that settings for the tenant and the IaaS administrators display correctly.
    9. Add identity stores for all tenants.
  11. Go to the IaaS machine where Model Manager Data was installed and imported from and create a new data file.
    1. Open a Windows command prompt as an administrator.
    2. Go to C:\Program Files (x86)\VMware\vCAC\Server\Model Manager Data\Cafe\.
    3. Rename the file to vcac-config.old.
    4. Run the following command to create the updated data file: Vcac-Config.exe GetServerCertificates -url https://(vCAC FQDN) --FileName

      For example:

       Vcac-Config.exe GetServerCertificates -url https://vcac.vcloud.local 
  12. Create a new solution user. A solution user represents the IaaS service and is used for authentication between Windows and virtual appliances. Use a command of the following form: Vcac-Config.exe RegisterSolutionUser -url https://(vCAC FQDN) --Tenant vsphere.local -cu administrator@vsphere.local -cp password --FileName -v

    For example:

    Vcac-Config.exe RegisterSolutionUser -url https://vcac.vcloud.local 
    --Tenant vsphere.local -cu administrator@vsphere.local -cp Passw0rd123 
    --FileName -v
  13. Move the solution user into the IaaS database with a command of the following form: Vcac-Config.exe MoveRegistrationDataToDB --FileName -s "SQL Server FQDN" -d "Database_name" -v

    For example:

    Vcac-Config.exe MoveRegistrationDataToDB --FileName 
    -s "sql.vcloud.local" -d "vCAC" -v
  14. Restart IIS or open an elevated command prompt window and type iisreset.
  15. From the IaaS Windows machine, select Start > Administrative Tools > Services.
  16. Restart machines for all IaaS Services in the recommended order.

    All IaaS services must be restarted for the solution user change to take effect.

    1. VMware vCloud Automation Center Service (manager service)
    2. VMware DEM-Orchestrator
    3. VMware DEM-Worker
    4. VMware vRealize Automation Agents


You have created a new PSC SSO appliance with required vRealize Automation information.