Orchestrator consists of a server component and a client component. You can install the Orchestrator components on the machine on which vCenter Server is installed or on a separate machine. You can also download and deploy the Orchestrator Appliance. To improve performance, install the Orchestrator server component on a separate machine.

You can install the Orchestrator configuration server on 64-bit Windows machines only. The Orchestrator client can run on 64-bit Windows, Linux, and Mac machines.

To install Orchestrator, you must be either a local administrator or a domain user that is a member of the administrators group.

You can install and upgrade Orchestrator standalone or during the vCenter Server installation or upgrade. When you install vCenter Server, Orchestrator is silently installed on your system as an additional component. To use Orchestrator, you must verify that the Orchestrator Server service has started and then start the Orchestrator client. Any user from the vCenter Server administrator group that you have provided during the vCenter Server installation, is an Orchestrator administrator.

If you need to change the default Orchestrator configuration settings, you can start the Orchestrator Configuration service and change the settings by using the Orchestrator configuration interface. You can also run the Orchestrator configuration workflows by using either the Orchestrator client or the REST API.

For information about the vCenter Server software and hardware requirements, prerequisites, and installation steps, see vSphere Installation and Setup.

For information about upgrading vCenter Server, see vSphere Upgrade.

After you upgrade vCenter Server and Orchestrator, you must reimport the SSL certificate for the licensed vCenter Server and start the Orchestrator server. For more information about importing the vCenter Server SSL certificate, see Import the vCenter Server SSL Certificate.


Each installation of the Orchestrator server has a unique certificate. To run remote workflows from one Orchestrator server over another Orchestrator server, ensure that you either replace the SSL keystore, or maintain separate SSL keypairs and use the trust manager. See Enable Orchestrator for Remote Workflow Execution.