The Identity Appliance is a preconfigured virtual appliance that provides single sign-on capabilities. You download the Identity Appliance and deploy it into vCenter Server or ESX/ESXi inventory.

About this task

Exact steps for this procedure vary depending on whether you use the native or Web vSphere client. Also, specific steps can vary depending on the your data center configuration.


  • Download the Identity Appliance from the VMware Web site.

  • Log in to the vSphere client as a user with system administrator privileges.


  1. In the vSphere client, select File > Deploy OVF Template.
  2. Browse to the Identity Appliance file with the .ova or .ovf extension and click Open.
  3. Click Next.
  4. Click Next on the OVF Template Details page.
  5. Accept the license agreement and click Next.
  6. Type a unique virtual appliance name according to the IT naming convention of your organization in the Name text box, select the datacenter and location to which you want to deploy the virtual appliance, and click Next.
  7. Follow the prompts until the Disk Format page appears.
  8. Verify on the Disk Format page that enough space exists to deploy the virtual appliance and click Next.
  9. Follow the prompts to the Properties page.

    The options that appear depend on your vSphere configuration.

  10. Configure the values on the Properties page.
    1. Type the root password to use when you log in to the virtual appliance console in the Enter password and Confirm password text boxes.
    2. Type the fully qualified domain name of the virtual machine in the Hostname text box, even if you are using DHCP.
    3. Configure the networking properties.
    4. Select or uncheck the SSH service checkbox to choose whether SSH service is enabled for the appliance.

      This value is used to set the initial status of the SSH service in the appliance. You can change this setting from the appliance management console when you configure the appliance.

  11. Click Next.
  12. If the Power on after deployment option is available on the Ready to Complete page, select it and click Finish.
  13. Restart the machine.
  14. Verify that the fully qualified domain name can be resolved against the IP address of the Identity Appliance by opening a command prompt and pinging the FQDN.