vRealize Orchestrator is composed of three distinct layers: an orchestration platform that provides the common features required for an orchestration tool, a plug-in architecture to integrate control of subsystems, and a library of workflows. vRealize Orchestrator is an open platform that can be extended with new plug-ins and content, and can be integrated into larger architectures through a REST API.

vRealize Orchestrator includes several key features that help with running and managing workflows.

Persistence
A production-grade PostgreSQL database is used to store relevant information, such as processes, workflow states, and the vRealize Orchestrator configuration.
Central management
vRealize Orchestrator provides a central tool to manage your processes. The application server-based platform, with full version history, can store scripts and process-related primitives in the same storage location. This way, you can avoid scripts without versioning and proper change control on your servers.
Check-pointing
Every step of a workflow is saved in the database, which prevents data-loss if you must restart the server. This feature is especially useful for long-running processes.
Control Center
Control Center is a Web-based portal that increases the administrative efficiency of vRealize Orchestrator instances by providing a centralized administrative interface for runtime operations, workflow monitoring, and correlation between the workflow runs and system resources.
Versioning
All vRealize Orchestrator platform objects have an associated version history. Version history is useful for basic change management when distributing processes to project stages or locations.
Git integration
With the vRealize Orchestrator Client, you can integrate a Git repository to further improve version and source control of your vRealize Orchestrator content. With Git, you can manage workflow development across multiple vRealize Orchestrator instances. See Using Git with the vRealize Orchestrator Client in the Using the VMware vRealize Orchestrator Client guide.
Scripting engine
The Mozilla Rhino JavaScript engine provides a way to create building blocks for the vRealize Orchestrator Client platform. The scripting engine is enhanced with basic version control, variable type checking, name space management, and exception handling. The engine can be used in the following building blocks:
  • Actions
  • Workflows
  • Policies
Workflow engine
The workflow engine allows you to automate business processes. It uses the following objects to create a step-by-step process automation in workflows:
  • Workflows and actions that vRealize Orchestrator Client provides.
  • Custom building blocks created by the customer.
  • Objects that plug-ins add to vRealize Orchestrator Client.
Users, other workflows, schedules, or policies can start workflows.
Policy engine
You can use the policy engine to monitor and generate events to react to changing conditions in the vRealize Orchestrator Client server or a plugged-in technology. Policies can aggregate events from the platform or the plug-ins, which helps you to handle changing conditions on any of the integrated technologies.
vRealize Orchestrator Client
Create, run, edit, and monitor workflows with the vRealize Orchestrator Client. You can also use the vRealize Orchestrator Client to manage action, configuration, policy, and resource elements. See Using the vRealize Orchestrator Client.
Development and resources
The vRealize Orchestrator landing page provides quick access to resources to help you develop your own plug-ins, for use in vRealize Orchestrator. You will also find information about using the vRealize Orchestrator REST API to send requests to the vRealize Orchestrator server.
Security
vRealize Orchestrator provides the following advanced security functions:
  • Public Key Infrastructure (PKI) to sign and encrypt content imported and exported between servers.
  • Digital Rights Management (DRM) to control how exported content can be viewed, edited, and redistributed.
  • Transport Layer Security (TLS) to provide encrypted communications between the vRealize Orchestrator Client, vRealize Orchestrator server, and HTTPS access to the Web front end.
  • Advanced access rights management to provide control over access to processes and the objects manipulated by these processes.
Encryption
vRealize Orchestrator uses a FIPS-compliant Advanced Encryption Standard (AES) with a 256-bit cipher key for encryption of strings. The cipher key is randomly generated and is unique across appliances that are not part of a cluster. All nodes in a cluster share a cipher key.