To prepare the vRealize Appliance for use, a system administrator configures the host settings, generates an SSL certificate, and provides SSO connection information.


  1. Navigate to the vRealize Automation management console by using its fully qualified domain name,
  2. Continue past the certificate warning.
  3. Log in with user name root and the password you specified when you deployed vRealize Appliance.
  4. Select vRA Settings > Host Settings



    Resolve Automatically

    Select Resolve Automatically to specify the name of the current host for the vRealize Automation appliance.

    Update Host

    For new hosts, select Update Host. Enter the fully qualified domain name of the vRealize Automation appliance,, in the Update Host text box.


    Configure SSO settings as described later in this procedure whenever you use Update Host to change a host name.

  5. Select the certificate type from the Certificate Action menu.

    If you are using a PEM-encoded certificate, for example for a distributed environment, select Import.

    Certificates that you import must be trusted and applicable to all instances of vRealize Appliance by using Subject Alternative Name (SAN) certificates.


    If you use certificate chains, specify the certificates in the following order:

    1. Client-server certificate signed by the intermediate CA certificate

    2. One or more intermediate certificates

    3. A root CA certificate



    Keep Existing

    Leave the current SSL configuration. To cancel your changes, select this option.

    Generate Certificate

    1. The value displayed in the Common Name text box is the Host Name as it appears on the upper part of the page. If additional instances of the vRealize Appliance available, their FQDNs are included in the SAN attribute of the certificate.

    2. Enter your organization name, such as your company name, in the Organization text box.

    3. Enter your organizational unit, such as your department name or location, in the Organizational Unit text box.

    4. Enter a two-letter ISO 3166 country code, such as US, in the Country text box.


    1. Copy the certificate values from BEGIN PRIVATE KEY to END PRIVATE KEY, including the header and footer, and paste them in the RSA Private Key text box.

    2. Copy the certificate values from BEGIN CERTIFICATE to END CERTIFICATE, including the header and footer, and paste them in the Certificate Chain text box. For multiple certificate values, include a BEGIN CERTIFICATE header and END CERTIFICATE footer for each certificate.


      For chained certificates, additional attributes may be available.

    3. (Optional) If your certificate uses a pass phrase to encrypt the certificate key, copy the pass phrase and paste it in the Passphrase text box.

  6. Click Save Generated Certificate if you have selected the follow the Generated Certificate option.
  7. Follow the on-screen prompts if you have selected the Keep Existing option.
  8. Enter a new license key for vRealize Code Stream.
  9. Click Submit Key and click Next.
  10. Click the Telemetry tab to choose whether to join the VMware Customer Experience Improvement Program (CEIP).

    Details regarding the data collected through CEIP and the purposes for which it is used by VMware are given at the Trust & Assurance Center.

  11. (Optional) Select Join the VMware Customer Experience Improvement Program to participate in the program and click Next.
  12. Click Next, and click Finish.