Book Image

Learning VMware vRealize Automation

By : SRIRAM RAJENDRAN, Sriram Rajendran
Book Image

Learning VMware vRealize Automation

By: SRIRAM RAJENDRAN, Sriram Rajendran

Overview of this book

With the growing interest in Software Defined Data Centers (SDDC), vRealize Automation offers data center users an organized service catalog and governance for administrators. This way, end users gain autonomy while the IT department stays in control, making sure security and compliance requirements are met. Learning what each component does and how they dovetail with each other will bolster your understanding of vRealize Automation. The book starts off with an introduction to the distributed architecture that has been tested and installed in large scale deployments. Implementing and configuring distributed architecture with custom certificates is unarguably a demanding task, and it will be covered next. After this, we will progress with the installation. A vRealize Automation blueprint can be prepared in multiple ways; we will focus solely on vSphere endpoint blueprint. After this, we will discuss the high availability configuration via NSX loadbalancer for vRealize Orchestrator. Finally, we end with Advanced Service Designer, which provides service architects with the ability to create advanced services and publish them as catalog items.
Table of Contents (15 chapters)
Learning VMware vRealize Automation
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

Certificates


SSL certificates are commonly used for a secure handshake between different services. In vRA, all communications between the client browser and services (identity management, CAFÉ, and IaaS) and between services are over TLS/SSL. However, I wanted to highlight that vRA components work with different SSL certificate file formats. Here is a list of the common formats used in a vRA solution:

  • PEM: short for Privacy Enhanced Mail

  • P7B: Public Key Cryptography Standard (PKCS) Format #7

  • PFX: Public Key Cryptography Standard (PKCS) Format #12

  • CSR: short for Certificate Signing Request (.CER or .CRT files can be in either PEM or DER format):

The certificate generation process

Given that certificate generation is a protracted process, we have detailed the high-level steps involved in creating the certificates. The extensive list of steps for creating the certificates will be covered later in this chapter:

Step 1: