If you want to configure Orchestrator to work with the VMware vCenter Server Appliance, and want to run workflows by using the vSphere Web Client, you must configure the Orchestrator server to work with vCenter Single Sign-On, which is prebuilt in the appliance.


Ensure that the clocks of the Orchestrator server machine and the vCenter Server Appliance are synchronized. Otherwise you might receive cryptic vCenter Single Sign-On errors.

This workflow describes the process to change the self-signed certificate.

  1. Download and deploy the VMware vCenter Server Appliance.

    See vSphere Installation and Setup for instructions.

  2. Import the SSL and vCenter Single Sign-On certificates of the vCenter Server instance running in the vCenter Server Appliance into Orchestrator.

    You import certificates from the Orchestrator configuration interface. For more information about importing certificates, see Import the vCenter Server SSL Certificate and Import the vCenter Single Sign-On SSL Certificate.

    • For importing the SSL certificate of the vCenter Server instance running in the appliance, in the Import from URL text box, type your_vcenter_server_appliance_ip_address:vcenter_server_api_port.

    • For importing the vCenter Single Sign-On certificate, in the Import from URL text box, type your_vcenter_server_appliance_ip_address:single_sign_on_port.

  3. In the Orchestrator configuration interface, click Authentication and select SSO Authentication.

  4. Register Orchestrator to work with vCenter Single Sign-On:

    1. In the Host text box, type your_vcenter_server_appliance_ip_address:443

    2. In the Admin user name and the Admin password text boxes, type the credentials of the root user of the vCenter Server Appliance.

    3. Click Register Orchestrator.

    4. Complete the registration by selecting the Orchestrator administrator domain and group from the drop-down menu.