VMware vRealize Automation: Install, Configure,...

VMware® Education ServicesVMware, Inc.

www.vmware.com/education

VMware vRealize Automation: Install, Configure, ManageLab ManualvRealize 7.6

www.vmware.com/education

VMware vRealize Automation: Install, Configure, ManageLab ManualvRealize 7.6Part Number EDU-EN-VRAICM76-LAB (6/2019)

Copyright © 2019 VMware, Inc. All rights reserved. This manual and its accompanying materials are protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents. VMware, Project Photon OS™, VMware Go™, VMware Horizon® View™, VMware Identity Manager™, VMware NSX®, VMware NSX® Data Center, VMware NSX® Data Center for vSphere®, VMware NSX® for vSphere®, VMware Photon™, VMware Service Catalog™, VMware Service Manager™, VMware vCloud®, VMware vCloud® Automation Center™, VMware vCloud® Automation Center™ for Desktop, VMware vCloud® Automation Center™ for Server, VMware Verify™, VMware View®, VMware vRealize®, VMware vRealize® Automation™, VMware vRealize® Operations Manager™, VMware vRealize® Operations Manager™ for Horizon®, VMware vRealize® Operations™, VMware vRealize® Operations™ Advanced, VMware vRealize® Operations™ Enterprise, VMware vRealize® Operations™ Standard, VMware vRealize® Orchestrator™, VMware vSphere®, and VMware vSphere® Client™ are registered trademark or trademarks of VMware, Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may be trademarks of their respective companies.

The training material is provided “as is,” and all express or implied conditions, representations, and warranties, including any implied warranty of merchantability, fitness for a particular purpose or noninfringement, are disclaimed, even if VMware, Inc., has been advised of the possibility of such claims. This training material is designed to support an instructor-led training course and is intended to be used for reference purposes in conjunction with the instructor-led training course. The training material is not a standalone training tool. Use of the training material for self-study without class attendance is not recommended.

These materials and the computer programs to which it relates are the property of, and embody trade secrets and confidential information proprietary to, VMware, Inc., and may not be reproduced, copied, disclosed, transferred, adapted or modified without the express written approval of VMware, Inc.

i

C O N T E N T S

Lab 1 Requesting a Service ............................................................... 1

Task 1: Log In to vRealize Automation ......................................................................... 1 Task 2: Request a Service ........................................................................................... 2 Task 3: Track Your Request ......................................................................................... 2 Task 4: Examine Your Virtual Machine ........................................................................ 3 Task 5: Destroy Your Virtual Machine .......................................................................... 3 Task 6: Track Your Request ......................................................................................... 3

Lab 2 Exploring the vRealize Automation Architecture .................. 5

Task 1: Examine vRealize Automation VAMI Console ................................................. 5 Task 2: Examine the Components of the vRealize Automation Appliance .................. 6 Task 3: Examine the Components of the IaaS Server ................................................. 7

Lab 3 Creating the FIN Tenant ........................................................... 9

Task 1: Create a Tenant and Assign Permission to a Local User ................................ 9 Task 2: Apply the Custom Tenant Branding to the FIN Tenant ................................. 11

Lab 4 Integrating the FIN Tenant with Active Directory ................ 13

Task 1: Integrate the FIN Tenant with Active Directory .............................................. 13 Task 2: Manage Directory Synchronization Settings .................................................. 15

Lab 5 Assigning User Roles ............................................................ 17

Task 1: Assign the IaaS Administrator Role ............................................................... 17 Task 2: Assign Tenant Roles ...................................................................................... 18 Task 3: Assign Architect Roles ................................................................................... 19

Lab 6 Creating an Endpoint and a Fabric Group ........................... 23

Task 1: Create a vSphere Endpoint ........................................................................... 23 Task 2: Create an NSX Data Center for vSphere Endpoint ....................................... 24 Task 3: Create a Fabric Group ................................................................................... 25

Lab 7 Creating Machine Prefixes and Business Groups ............... 27

Task 1: Create Machine Prefixes ............................................................................... 27 Task 2: Create Business Groups ................................................................................ 28

Lab 8 Creating Reservations ........................................................... 31

Task 1: Create a Network Profile ................................................................................ 31 Task 2: Create Reservations ...................................................................................... 32

ii Contents

Lab 9 Creating a Single Machine Blueprint .................................... 35

Task 1: Create a Single Machine Blueprint ................................................................ 35 Task 2: Publish the Single Machine Blueprint ............................................................ 37

Lab 10 Using vRealize CloudClient to Export a Blueprint ............. 39

Task 1: Use vRealize CloudClient to Export a Blueprint ............................................ 39 Task 2: Review the Exported YAML File .................................................................... 40

Lab 11 Adding Published Items to the Service Catalog ................ 41

Task 1: Create a Service ............................................................................................ 41 Task 2: Add Catalog Items to the Service .................................................................. 42 Task 3: Create and Configure an Entitlement ............................................................ 42 Task 4: Verify Access to Catalog Items ...................................................................... 44

Lab 12 Deploying and Managing Catalog Items ............................ 47

Task 1: Request a Single Machine Blueprint ............................................................. 47 Task 2: Modify Virtual Machine Resource Settings .................................................... 49 Task 3: Create and Delete Snapshots........................................................................ 50 Task 4: Clean Up to Save Lab Resources ................................................................. 51

Lab 13 Designing an Application Blueprint .................................... 53

Task 1: Prepare the CentOS Reference Machine ...................................................... 53 Task 2: Create a Software Component ...................................................................... 57 Task 3: Update Your Inventory ................................................................................... 58 Task 4: Design an Application Blueprint ..................................................................... 59 Task 5: Add the Application Blueprint to a Service .................................................... 61 Task 6: Request an Application Blueprint and Validate the Application ..................... 62 Task 7: Clean Up to Save Lab Resources ................................................................. 63

Lab 14 Deploying a Blueprint That Uses a Custom Property from the Property Dictionary .................................................................... 65

Task 1: Add a Custom Property from the Property Dictionary to a Blueprint ............. 65 Task 2: Add Your Blueprint to a Service and an Entitlement ..................................... 66 Task 3: Test Your Blueprint and Custom Properties .................................................. 67 Task 4: Clean Up to Save Lab Resources ................................................................. 67

Lab 15 Creating Custom Properties ................................................ 69

Task 1: Create a Custom Property for Network Selection.......................................... 69 Task 2: Create a Custom Property for Disk Format Selection ................................... 71

Lab 16 Creating a Property Group .................................................. 73

Contents iii

Task 1: Create a Custom Property Group .................................................................. 73

Lab 17 Deploying a Blueprint That Uses Custom Properties ....... 77

Task 1: Add Custom Properties to a Blueprint ........................................................... 77 Task 2: Add Your Blueprint to a Service and an Entitlement ..................................... 78 Task 3: Test Your Blueprint and Custom Properties .................................................. 79 Task 4: Clean Up to Save Lab Resources ................................................................. 80

Lab 18 Modifying a Blueprint to Include Component Profiles ...... 81

Task 1: Define Size Component Profiles .................................................................... 81 Task 2: Define Image Component Profiles ................................................................. 82 Task 3: Copy and Modify a Blueprint .......................................................................... 83 Task 4: Add Your Blueprint to a Service and an Entitlement ..................................... 85 Task 5: Test Your Blueprint and Component Profiles ................................................ 85 Task 6: Clean Up to Save Lab Resources ................................................................. 86

Lab 19 Using vRealize Automation Custom Forms ....................... 87

Task 1: Create a Blueprint .......................................................................................... 87 Task 2: Create a Custom Form .................................................................................. 89 Task 3: Modify the Custom Form to Manage Networking .......................................... 90 Task 4: Add Your Blueprint and the New Custom Form to a Service ........................ 92 Task 5: Test Your New Custom Form ........................................................................ 92 Task 6: Deactivate a Custom Form ............................................................................ 93

Lab 20 Integrating NSX Data Center for vSphere .......................... 95

Task 1: Create Routed Network Profiles .................................................................... 95 Task 2: Use NSX Network Components to Design a Multitier Blueprint .................... 98 Task 3: Add the NSX Blueprint to a Service ............................................................. 103 Task 4: Deploy the Multitier Blueprint and Review Components ............................. 103 Task 5: Clean Up to Save Lab Resources ............................................................... 104

Lab 21 (Optional) Adding the NAT Network to a Blueprint ......... 105

Task 1: Create a NAT Network Profile ..................................................................... 105 Task 2: Modify the Blueprint ..................................................................................... 106 Task 3: Add the NAT Blueprint to a Service ............................................................. 107 Task 4: Deploy the NAT Blueprint ............................................................................ 108 Task 5: Clean Up to Save Lab Resources ............................................................... 109

Lab 22 Controlling the Life Cycle of a Machine ........................... 111

Task 1: Copy and Modify a Blueprint ........................................................................ 111 Task 2: Add Your Blueprint to a Service................................................................... 113 Task 3: Create a Subscription .................................................................................. 113 Task 4: Select a Workflow for your Subscription ...................................................... 116

iv Contents

Task 5: Test Your Subscription ................................................................................ 117 Task 6: Clean Up to Save Lab Resources ............................................................... 118

Lab 23 Creating a XaaS Blueprint with Actions ........................... 119

Task 1: Create an Active Directory Endpoint ........................................................... 119 Task 2: Configure an Active Directory User as a Custom Resource ....................... 120 Task 3: Create a XaaS Blueprint .............................................................................. 121 Task 4: Create Resource Actions ............................................................................. 124 Task 5: Create a Service and an Entitlement ........................................................... 124 Task 6: Test Your XaaS Service .............................................................................. 125 Task 7: Perform a Day-2 Operation .......................................................................... 126 Task 8: Verify Your XaaS Deployments ................................................................... 128

Lab 24 (Optional) Creating a XaaS Blueprint to Create an NSX Group ............................................................................................... 131

Task 1: Create a XaaS Blueprint .............................................................................. 131 Task 2: Add Your Blueprint to a Service and an Entitlement ................................... 132 Task 3: Test Your XaaS Service .............................................................................. 132 Task 4: Verify Your XaaS Deployments ................................................................... 133

Lab 25 Creating Approval Policies ................................................ 135

Task 1: Create an Approval Policy ........................................................................... 135 Task 2: Add Your Policy to an Entitlement ............................................................... 136 Task 3: Test Your New Policy .................................................................................. 137 Task 4: Process an Approval Policy ......................................................................... 138 Task 5: Verify That the Request Is Approved ........................................................... 140 Task 6: Clean Up Lab Resources ............................................................................. 140

Lab 26 Monitoring Resources ....................................................... 141

Task 1: Analyze Resource Utilization ....................................................................... 141 Task 2: Analyze IP Resources Allocated in Network Profiles .................................. 142 Task 3: Examine Events and Logs ........................................................................... 142 Task 4: Examine System Event Logs ....................................................................... 144

Lab 27 Reclaiming Resources ....................................................... 145

Task 1: Find Machines to Reclaim ........................................................................... 145 Task 2: Respond to Reclamation Requests ............................................................. 147 Task 3: Examine User Responses to Reclamation Requests .................................. 148 Task 4: Modify the Machine Lease Period ............................................................... 148 Task 5: Destroy Machines ........................................................................................ 149

Lab 28 Using Health Checks .......................................................... 151

Task 1: Create a Health Service Check ................................................................... 151

Contents v

Task 2: Run a Health Service Check ........................................................................ 153

Lab 29 Integrating vRealize Operations Manager ........................ 155

Task 1: Configure the Management Pack in vRealize Operations Manager for vRealize Automation ................................................................................................... 155

Task 2: Configure the Metrics Provider in vRealize Automation .............................. 157 Task 3: Deploy Test Machines ................................................................................. 158 Task 4: Verify Current Placement ............................................................................. 158 Task 5: Configure Placement Options ...................................................................... 159 Task 6: Verify That vRealize Operations Manager Is Managing Resources............ 161 Task 7: Examine Your Consolidation ....................................................................... 161 Task 8: Clean Up Lab Resources ............................................................................. 162

vi Contents

1

Lab 1 Requesting a Service

Objective: Request a service from vRealize Automation

In this lab, you perform the following tasks:

1. Log In to vRealize Automation

2. Request a Service

3. Track Your Request

4. Examine Your Virtual Machine

5. Destroy Your Virtual Machine

6. Track Your Request

Task 1: Log In to vRealize Automation You log in to the vRealize Automation console.

1. Open the Chrome web browser.

2. Select SA-vRA-01 ENG Tenant from the vRealize Automation favorites menu.

3. On the login screen, click Change to a different domain.

4. Select the vclass.local domain and click Next.

5. Log in with VMW-User01 as the user name and VMware1! as the password.

2 Lab 1 Requesting a Service

Task 2: Request a Service You request a service from vRealize Automation. vRealize Automation deploys a Photon OS VM.

1. Click the Catalog tab.

2. Click REQUEST next to the VMW-PhotonOS item.

3. Enter a description, for example, Test Deployment.

The description can help you track the purpose of this request.

4. Enter a reason for the request.

This reason is a justification that would explain to an administrator why you need a web server. Most requests are automatically approved and do not require manual intervention from administrators.

5. Click SUBMIT.

Task 3: Track Your Request You track the requested service from vRealize Automation.

1. Click the Deployments tab.

An initial status of In Progress should appear.

2. Select the VMW-PhotonOS request.

3. Click the History tab.

4. Click the Events tab.

5. Expand the Provisioning section from the tasks menu.

6. Review the components of the provisioning task.

7. Open a new tab in Chrome.

8. Select vSphere Client from the Infrastructure favorites menu.

9. Log in to the vSphere Client.

• User name: [email protected]

• Password: VMware1!

10. Click Menu and select VMs and Templates.

11. In the Recent Tasks pane, track the progress of the VMWLin virtual machine as it is cloned, customized, and powered on.

Lab 1 Requesting a Service 3

12. Click the vRealize Automation tab in the Chrome browser to return to your vRealize Automation console.

13. Click Back at the top-left corner.

Wait for the provisioning to complete. This step might take up to 7 minutes.

Task 4: Examine Your Virtual Machine Your virtual machine is an item in vRealize Automation. After a request is complete, you have a new item in your console.


Your request appears in the Deployments list. The name of the item begins with the text string VMW-PhotonOS, followed by an eight-digit number.

2. Click VMW-PhotonOS and record the components included with your item. __________

3. Click the VMWLin virtual machine on the components tab and record the name of the virtual machine that was deployed. __________

4. Click the Network tab and record the IP address of this virtual machine. __________

5. Click the History tab and record the time when this time was requested. __________

Task 5: Destroy Your Virtual Machine You use vRealize Automation to destroy your virtual machine. When an item is no longer needed, you can destroy it. Destroying unneeded items saves resources.


2. Click Actions against the PhotonOS deployment.

3. Click Destroy.

4. Click SUBMIT.

Task 6: Track Your Request You track the requested action from vRealize Automation. Actions such as Destroy are requests and can be tracked like all other requests.

1. Track the request to destroy your virtual machine in the vSphere Client and in the vRealize Automation console.

4 Lab 1 Requesting a Service

2. When your virtual machine is powered off and deleted log out of the vRealize Automation console at the top-right corner.

5

Lab 2 Exploring the vRealize Automation Architecture

Objective: Explore the architecture of a minimal vRealize Automation deployment


1. Examine vRealize Automation VAMI Console

2. Examine the Components of the vRealize Automation Appliance

3. Examine the Components of the IaaS Server

Task 1: Examine vRealize Automation VAMI Console You log in to the vRealize Automation appliance and verify the service state.


2. Select vRA-Appliance-01-VAMI-Console from the vRealize Automation favorites menu.

3. Log in with root as the user name and VMware1! as the password.

4. Click the Services tab.

5. Verify that all the services are in the REGISTERED state.

The status of the release-management service is UNAVAILABLE. This service is related to vRealize Code Stream, which is not installed in the lab.

6. Click the Cluster tab.

6 Lab 2 Exploring the vRealize Automation Architecture

7. Expand the sa-vra-01.vclass.local host.

An embedded instance of vRealize Orchestrator is running in the vRealize Automation appliance.

8. Expand the sa-iaas-01.vclass.local host and record the names of components that are in the started state. __________

The Database Tools and Model Manager Data components are in the Available state:

• Database Tools: Interacts with the SQL server and creates an empty vRealize Automation database.

• Model Manager Data: Installs all IaaS models (business logic) and workflows. It also sends this information to IaaS database tables.

Task 2: Examine the Components of the vRealize Automation Appliance You log in to the vRealize Automation appliance and review the components.

1. Click the MTPuTTY icon on the toolbar of the Student-A desktop.

2. Right-click SA-vRA-01 and click Connect.

You are connected to the vRealize Automation appliance through SSH.

3. Run the ls -l /etc/vcac/webapps command to list the vRealize Automation core services.

4. Run the service vpostgres status command to check the status of the vPostgres database service.

5. Run the service vco-server status command to check the status of the vRealize Orchestrator service.

6. Run the service rabbitmq-server status command to check the status of RabbitMQ.

7. Run the exit command to log out of the vRealize Automation appliance.

8. Close the MTPuTTY application.

Lab 2 Exploring the vRealize Automation Architecture 7

Task 3: Examine the Components of the IaaS Server You log in to the IaaS server and review the components.

1. Click the Remote Desktop Connection Manager icon on the toolbar of the Student-A desktop.

2. Right-click SA-IaaS-01 and click Connect Server.

You are connected to the Windows IaaS server.

3. Start IIS Manager from the toolbar.

4. Navigate to SA-IAAS-01 > Sites > Default Web Site and record the three IaaS websites. __________

5. Close IIS Manager.

6. Start Service Manager from the toolbar.

7. Select VMware vCloud Automation Center Service.

VMware vCloud Automation Center Service represents the IaaS Manager component.

8. Select the VMware DEM-Orchestrator - SA-IaaS-01.vclass.localDEO service. Q1. Which IaaS component does this service represent?

1. DEM Orchestrator.

9. Select the VMware DEM-Worker - DEM service. Q2. Which IaaS component does this service represent?

2. DEM Wor ker.

10. Select the VMware vCloud Automation Center Agent - vCenter service. Q3. Which IaaS component does this service represent?

3. vSphere Proxy Agent.

11. Close Service Manager.

8 Lab 2 Exploring the vRealize Automation Architecture

9

Lab 3 Creating the FIN Tenant

Objective: Create the Finance tenant in vRealize Automation


1. Create a Tenant and Assign Permission to a Local User

2. Apply the Custom Tenant Branding to the FIN Tenant

Task 1: Create a Tenant and Assign Permission to a Local User You log in to the vRealize Automation console as system administrator and create a tenant for the Finance team.


2. Select SA-vRA-02 Default Tenant from the vRealize Automation favorites menu.

3. Log in to the vsphere.local domain.

• User name: administrator


4. Click Tenants in the left pane.

5. Click +New.

6. In the New Tenant wizard, configure settings for the new tenant.

10 Lab 3 Creating the FIN Tenant

Option Action Name Enter FIN.

Description Enter This is Finance tenant in the vclass domain.

URL name Enter FIN.

Contact email Enter [email protected].

7. Click SUBMIT and NEXT.

8. Click +New on the Local users tab.

You are creating a local user in the vsphere.local domain.

9. In the User Details window, configure the user details.

Option Action First name Enter Tenant.

Last name Enter Admin.

Email Enter [email protected].

User name Enter tenantadmin.

Password Enter VMware1!.

Confirm password Enter VMware1!.

10. Click OK.

11. Click NEXT.

12. Enter tenantadmin in the Tenant administrators search box and click the search icon.

13. Verify that the [email protected] user has been assigned the Tenant Administrator role.

Lab 3 Creating the FIN Tenant 11

14. Click FINISH.

15. From the administrator drop-down menu in the top-right corner, select Log Out.

Task 2: Apply the Custom Tenant Branding to the FIN Tenant You log in to the FIN (Finance) tenant as tenant administrator and apply custom branding.

1. Select SA-vRA-02 FIN Tenant from the vRealize Automation favorites menu.

You access the FIN tenant created in the previous task.

2. Log in to the vsphere.local domain as tenant administrator.

• User name: tenantadmin


12 Lab 3 Creating the FIN Tenant

You log in using the local user account in the vsphere.local domain that you created in the previous task.

3. Expand Branding in the left pane and click Application Branding.

4. Deselect the Use default check box.

5. Click Choose File against the company logo.

6. Navigate to C:\Materials\Graphics\Fin.png and click Open.

7. Enter VMware Finance in the Product name text box.

8. Click OK. Q1. Do you see the new branding in the vRealize Automation console?

1. Yes .

9. Click Login Screen Branding in the left pane.

10. Click Upload against the logo.

11. Navigate to C:\Materials\Graphics\Finance-Sign-on.png and click Open.

12. Click Upload against the Image.

13. Navigate to C:\Materials\Graphics\VMware-Image.png and click Open.

14. Click Save.

15. From the tenantadmin drop-down menu in the top-right corner, select Log Out.

16. Click Go back to login page. Q2. Do you see the new icon and image in the login screen?

2. Yes .

13

Lab 4 Integrating the FIN Tenant with Active Directory

Objective: Integrate the FIN tenant with Active Directory and import users


1. Integrate the FIN Tenant with Active Directory

2. Manage Directory Synchronization Settings

Task 1: Integrate the FIN Tenant with Active Directory You log in to the FIN tenant and add a directory to integrate with the vclass.local Active Directory.






4. Expand Directories Management in the left pane and click Directories.

5. Click Add Directory and select Add Active Directory over LDAP/IWA.

6. Enter VCLASS in the Directory Name text box.

14 Lab 4 Integrating the FIN Tenant with Active Directory

7. Click Active Directory (Integrated Windows Authentication).

8. In the Add Directory wizard, configure settings for the domain.

Option Action Domain Name Enter vclass.local.

Domain Admin Username Enter administrator.

Domain Admin Password Enter VMware1!.

Bind User Name Enter administrator.

Bind User Password Enter VMware1!.

9. Click Save and Next.

10. Select vclass.local domain and click Next.

11. On the Map User Attributes page, select name from the displayName drop-down menu.

The displayName directory attribute will be mapped to the name attribute in Active Directory.

12. Click Next.

13. Click the plus (+) icon at the top-right corner.

14. Enter ou=SL,dc=vclass,dc=local as the group DN.

All the groups from Sales Organizational Unit in Active Directory are synchronized to the VMware Identity Manager database.

15. Click Find Groups.

16. Select the Select All check box to select all the groups from Sales OU.

Lab 4 Integrating the FIN Tenant with Active Directory 15

17. Click Next.

IMPORTANT

Do not add users. 18. Click Next.

19. Click Sync Directory.

20. Click the Sync Log link. Q1. How many groups were affected?

1. 15.

Q2. Which user account was removed? 2. Admi nistrator.

21. Click Back to Directories.

Task 2: Manage Directory Synchronization Settings You add users from Billing Organizational Unit and synchronize the users with VMware Identity Manager.

1. Click the VCLASS directory.

2. Click Sync Settings.

3. Change the sync frequency to once per day at 0:00 hours.

4. Click the Groups tab.

5. Click the plus (+) icon at the top-right corner to specify the group DN.

6. Enter ou=BL,dc=vclass,dc=local.

7. Click Find Groups.

16 Lab 4 Integrating the FIN Tenant with Active Directory

8. Select the Select All check box.

9. Click Save and Sync.

10. Review and click Sync Directory.

11. From the tenantadmin drop-down menu in the top-right corner select Log Out.

17

Lab 5 Assigning User Roles

Objective: Assign various roles to Active Directory users in the FIN tenant


1. Assign the IaaS Administrator Role

2. Assign Tenant Roles

3. Assign Architect Roles

Task 1: Assign the IaaS Administrator Role You log in to the default tenant as system administrator to assign the IaaS administrator role. IaaS administrator is a systemwide role and can be assigned only by a system administrator.




• User name: administrator


4. Click Tenants from the left pane.

5. Click the FIN tenant.

6. Click the Administrators tab.

7. Enter SL-IaaS and click the search icon.

18 Lab 5 Assigning User Roles

8. Select [email protected] to assign permission.

[email protected] is a group and not a user.

9. Click FINISH.

10. From the administrator drop-down menu at the top-right corner, select Log Out.


12. Select vclass.local and click Next.

13. Log in to the vclass domain as the IaaS administrator.

• User name: SL-IaaS01


a. Record the options under the Infrastructure tab. __________

14. From the SL-IaaS01 drop-down menu at the top-right corner, select Log Out.

Task 2: Assign Tenant Roles You log in to the FIN tenant as the tenant administrator and assign tenant roles to Active Directory users.

1. Click Change to a different domain.

2. Select vsphere.local and click Next.

3. Log in to the vsphere.local domain as tenant administrator.



4. Click the Administration tab.

Lab 5 Assigning User Roles 19

5. Expand Users and Groups in the left pane and click Directory Users and Groups.

6. Place the cursor in the search box at the top-right corner.

7. Enter SL-TenAdmins and click the search icon.

8. Click the [email protected] group.

9. Under the Add roles to this Group section, assign the Tenant Administrator role.

10. Click FINISH.

11. Enter SL-Cat and click the search icon.

NOTE

As a best practice, you assign all the user roles to a group and not to individual users.


13. Under the Add roles to this Group section, assign the Catalog Administrator role.

14. Click FINISH.

15. Enter SL-Approv and click the search icon.


17. Assign the Approval Administrator role.

18. Click FINISH.

19. From the tenantadmin drop-down menu at the top-right corner, select Log Out.

Task 3: Assign Architect Roles You log in to the FIN tenant as tenant administrator and assign architect roles to Active Directory users.


1. Click Change to a different domain.

2. Select vclass.local and click Next.

3. Log in to the vclass.local domain as tenant administrator.

• User name: SL-TA01


4. Expand Users and Groups in the left pane and click Directory Users and Groups.

5. Place the cursor in the search box at the top-right corner.

6. Enter SL-InfraArch and click the search icon.


8. Scroll down the Add roles to this Group section.

9. Select Infrastructure Architect.

10. Click FINISH.

11. Enter SL-Soft in the search box.


13. Assign the Software Architect role and click FINISH.

14. Enter SL-App in the search box.


16. Assign the Application Architect role and click FINISH.

17. Enter SL-XaaS in the search box.


19. Assign the XaaS Architect role and click FINISH.

20. Log out of the SL-TA01 user account.

21. Log in to the FIN tenant as infrastructure architect.

• User name: SL-InfraArch01

• Password: VMware1! Q1. Which tabs are accessible to the infrastructure architect?

1. Design, Inbox, and Infrastructur e tabs.

Q2. Which options are accessible on the Design tab? 2. Bluepri nts.

22. Log out of the SL-InfraArch01 user account.

23. Log in to the FIN Tenant as software architect.

• User name: SL-Soft01

Lab 5 Assigning User Roles 21

• Password: VMware1! Q3. Which options are accessible on the Design tab?

3. Bluepri nts and Software Components.

24. Log out of the SL-Soft01 user account.


23

Lab 6 Creating an Endpoint and a Fabric Group

Objective: Create a vSphere endpoint and use its compute resources to create a fabric group


1. Create a vSphere Endpoint

2. Create an NSX Data Center for vSphere Endpoint

3. Create a Fabric Group

Task 1: Create a vSphere Endpoint You log in to the FIN tenant as an IaaS administrator to create a vSphere endpoint.



3. Log in to the vclass.local domain.

• User name: SL-IaaS01


4. Click the Infrastructure tab.

5. In the left pane, expand Endpoints and click Endpoints.

6. Click +New and select Virtual > vSphere (vCenter).

24 Lab 6 Creating an Endpoint and a Fabric Group

7. Configure the vSphere endpoint.

Option Action Name Enter sa-vcsa-01.vclass.local.

Description Enter This is vSphere SA datacenter.

Address Enter https://sa-vcsa-01.vclass.local/sdk.

User name Enter [email protected].


8. Click Test Connection.

Verify that the connection is successful.

9. Click OK to save the changes and create the endpoint.

Task 2: Create an NSX Data Center for vSphere Endpoint You create an NSX Data Center for vSphere endpoint and associate it with the vSphere endpoint.

1. In the left pane, expand Endpoints and click Endpoints.

2. Click +New and select Network and Security > NSX.

3. Configure the NSX Data Center for vSphere endpoint.

Lab 6 Creating an Endpoint and a Fabric Group 25

Option Action Name Enter NSX Data Center for

vSphere.

Description Enter This is NSX for vSphere in SA datacenter.

Address Enter https://sa-nsxmgr-01.vclass.local/.

User name Enter admin.


4. Click Test Connection.

a. If presented, accept the thumbprint.

b. Verify that the connection is successful.

5. Click the Associations tab.

6. Click +New and select sa-vcsa-01.vclass.local from the drop-down menu.

7. Click OK to save the association.

8. Click OK to save the changes and create the endpoint.

Task 3: Create a Fabric Group You log in to the FIN tenant as an IaaS administrator and create a fabric group by using compute resources discovered by the vSphere endpoint.

1. In the left pane, expand Endpoints and click Fabric Groups.

2. Click +New.

3. Create a fabric group for the FIN tenant.

26 Lab 6 Creating an Endpoint and a Fabric Group

Option Action Name Enter FIN-FG.

Description Enter Compute Resources from SA Datacenter for Finance Tenant.

Fabric Administrators Enter SL-Fabric, click the search icon, and select the group.

Compute Resources Select SA-Compute-01 and SA-Compute-02.

4. Click OK.

5. Log out of the SL-IaaS01 user account.

27

Lab 7 Creating Machine Prefixes and Business Groups

Objective: Create machine prefixes and use them as default values for new business groups


1. Create Machine Prefixes

2. Create Business Groups

Task 1: Create Machine Prefixes You log in to the FIN tenant as a fabric administrator to create machine prefixes.




• User name: SL-Fabric01



5. In the left pane, expand Administration and click Machine Prefixes.

6. Click +New.

7. Create a machine prefix for the Sales team.

28 Lab 7 Creating Machine Prefixes and Business Groups

Option Action Name Enter SL.

Tenant Select All Tenants.

Number of Digits Enter 3.

Next Number Enter 1.

8. Click the green check mark to save changes. Q1. What will be the name of the first provisioned machine that uses this machine

prefix? 1. SL- 001.

9. Click +New.

10. Create a machine prefix for the Billing team.

Option Action Name Enter BL.

Tenant Select All Tenants.

Number of Digits Enter 2.

Next Number Enter 10.

11. Click the green check mark to save changes. Q2. What will be the name of the first provisioned machine that uses this machine

prefix? 2. BL- 10.

12. Log out of the SL-Fabric01 user account.

Task 2: Create Business Groups You log in as a tenant administrator and create business groups for the Sales and Finance teams.

1. Log in to the FIN tenant by using the vclass.local domain.

• User name: SL-TA01

Lab 7 Creating Machine Prefixes and Business Groups 29



3. In the left pane, expand Users and Groups and click Business Groups.

4. Click +New.

5. Create a business group for the Sales team.

Option Action Name Enter SL-BG.

Description Enter For users from Sales Organizational Unit.

Send capacity alert emails to Enter [email protected].

6. Click NEXT.

7. Assign business group roles to respective users.

Group Manager Role [email protected]

Support Role [email protected]

Shared Access Role [email protected]

User Role [email protected]

8. Click NEXT.

9. From the Default Machine Prefix drop-down menu, select SL.

10. Click FINISH to create the business group.

11. In the left pane, expand Users and Groups and click Business Groups.

12. Click +New.

13. Create a business group for the Billing team.

30 Lab 7 Creating Machine Prefixes and Business Groups

Option Action Name Enter BL-BG.

Description Enter For users from Billing Organizational Unit.

Send capacity alert emails to Enter [email protected].

14. Click NEXT.

15. Assign business group roles to respective users.

Group Manager Role [email protected]

Support Role [email protected]

Shared Access Role [email protected]

User Role [email protected]

16. Click NEXT.

17. From the Default Machine Prefix drop-down menu, select BL.

18. Click FINISH to create the business group.

19. Log out of the SL-TA01 user account.

31

Lab 8 Creating Reservations

Objective: Create reservations to map resources for business groups


1. Create a Network Profile

2. Create Reservations

Task 1: Create a Network Profile You log in to the FIN tenant as a fabric administrator to create a network profile. Creating a network profile is a prerequisite for creating reservations.




• User name: SL-Fabric01



5. In the left pane, expand Reservations and click Network Profiles.

6. Click +New and select External.

7. Configure a network profile on the General tab.

32 Lab 8 Creating Reservations

Option Action Name Enter External-Profile.

Description Enter External profile for SA Datacenter.

Subnet Mask Enter 255.255.255.0.

Gateway Enter 172.20.11.10.

8. Configure the DNS details on the DNS tab.

Option Action Primary DNS Enter 172.20.11.10.

DNS Suffix Enter vclass.local.

9. Configure the network details on the Network Ranges tab.

Option Action Name Enter External Network.

Start IP Enter 172.20.11.210.

End IP Enter 172.20.11.220.

10. Click OK to save the network range.

11. Click OK to create the network profile.

Task 2: Create Reservations You create reservations for the Sales and Billing teams in the FIN tenant.

1. In the left pane, expand Reservations and click Reservations.

2. Click +New and select vSphere (vCenter).

Lab 8 Creating Reservations 33

You are creating a reservation for the Sales team.

3. Configure details on the General tab.

Option Action Name Enter SL-Res.

Business Group Enter SL-BG.

Priority Enter 1.

4. Click the Resources tab.

5. Select the SA Compute-01 (sa-vcsa-01.vclass.local) compute resource.

6. In the Memory section, change the value for This Reservation to 10.

7. In the Storage section, select the SA-Shared-02-MS-Remote check box.

8. Change the values for This Reservation Reserved to 50 and Priority to 1.

9. Click OK to save resources.

10. Click the Network tab.

11. In the Network section, select the pg-SA Production check box.

12. From the network profile drop-down menu, select External Profile.

13. Click OK to create the reservation.

14. Click +New and select vSphere (vCenter).

15. Create a reservation for the Billing team.

34 Lab 8 Creating Reservations

Option Action Name Enter BL-Res.

Business Group Select BL-BG.

Priority Enter 1.

Compute Resource Select SA Compute-02.

Memory Reservation Enter 8 GB.

Datastore Name Select the SA-Shared-02-MS-Remote check box.

Datastore Reservation Enter 50 GB.

Storage Priority Enter 1.

Network Adapter Select pg-SA-Production.

Network Profile Select External Profile.

16. Click OK to create the reservation.

17. Log out of the SL-Fabric01 user account.

18. Close the Chrome browser.

The end-to-end business and infrastructure configuration is complete for a proof-of-concept Finance team.

35

Lab 9 Creating a Single Machine Blueprint

Objective: Create a single machine blueprint from the design canvas


1. Create a Single Machine Blueprint

2. Publish the Single Machine Blueprint

Task 1: Create a Single Machine Blueprint You log in to the ENG tenant as an infrastructure architect and create a single machine blueprint with networking.




• User name: QA-InfraArch01


4. Click the Design tab.

5. Click +New.

6. Add these details to name the blueprint and set the deployment limit.

36 Lab 9 Creating a Single Machine Blueprint

• Name: QA-PhotonOS

• Description: PhotonOS for the QA business group

• Deployment Limit: 2

7. Click OK.

8. Select Machine Types in the left pane.

9. Drag vSphere (vCenter) Machine from the left pane to the design canvas.

10. Set the blueprint properties on the General tab.

Option Action ID Enter PhotonOS.

Reservation Policy Select ENG-RP.

Machine Prefix Select QALin.

Maximum Instances Enter 2.

11. Click the Build Information tab to specify the details about the template that is used to clone.

Option Action Blueprint Type Select Server.

Action Select Clone.

Provisioning Workflow Select CloneWorkflow.

Clone From Select PhotonOS-Template.

Customization Spec Enter Lin-Cust.

Lab 9 Creating a Single Machine Blueprint 37

12. Click the Machine Resources tab.

a. Change the Maximum CPUs value from 1 to 2.

13. Select Network & Security in the left pane.

14. Drag Existing Network from the left pane to the design canvas.

15. Browse the network profile.

a. Select the VMW-Production network profile and click OK.

16. Click the PhotonOS vSphere machine in the design canvas.


18. Click +New.

19. From the Network drop-down menu, select VMWProduction.

20. Click OK.

You do not set an IP address. Q1. Is PhotonOS connected to the network?

1. Yes .

21. Click SAVE.

22. Click FINISH.

Task 2: Publish the Single Machine Blueprint You publish the single machine blueprint.

1. Click the Design tab. Q1. What is the status of the QA-PhotonOS blueprint?

1. Draft.

2. Select the QA-PhotonOS blueprint.

3. Click Publish.

38 Lab 9 Creating a Single Machine Blueprint

Q2. What is the status of the QA-PhotonOS blueprint? 2. Published.

4. Log out of the QA-InfraArch01 user account.

39

Lab 10 Using vRealize CloudClient to Export a Blueprint

Objective: Use vRealize CloudClient to export the machine blueprint and review the exported YAML file


1. Use vRealize CloudClient to Export a Blueprint

2. Review the Exported YAML File

Task 1: Use vRealize CloudClient to Export a Blueprint You use vRealize CloudClient to export a single machine blueprint.

1. Open the Windows Command Prompt from the taskbar.

2. Enter the cd C:\CloudClient\bin command to navigate to vRealize CloudClient.

3. Enter the cloudclient.bat command to start vRealize CloudClient.

4. Enter the command to log in to the vRealize Automation environment. vra login userpass --server https://sa-vra-01.vclass.local --tenant ENG --user vra --password VMware1!

5. Enter Y to accept the vRealize Automation appliance certificate.

6. Enter Y to accept the IaaS certificate.

7. Enter the vra content list command to list all the blueprints in the ENG tenant.

Q1. What is the contentID of the VMW-PhotonOS blueprint?

40 Lab 10 Using vRealize CloudClient to Export a Blueprint

1. VMWPhotonOS.

8. Export the VMW-PhotonOS blueprint. vra content export --content-id VMWPhotonOS --type composite-blueprint --path C:\Materials\Downloads

The status export result must appear as SUCCESS.

9. Enter exit to close the Command Prompt window.

Task 2: Review the Exported YAML File You open the exported blueprint in Notepad++ and review the content.

1. Open Windows File Explorer from the taskbar.

2. Navigate to C:\Materials\Downloads.

3. Right-click the VMWPhotonOS-composite-blueprint.zip file and select Extract Here.

4. Open the composite-blueprint folder.

5. Right-click the VMWPhotonOS.yaml file and select Edit With Notepad++.

6. Review the contents of the VMW-PhotonOS blueprint. Q1. What is the machine prefix used by this blueprint?

1. VMWLin.

Q2. What is the name of template used by this blueprint? 2. PhotonOS-Template.

7. Close the Notepad++ application.

41

Lab 11 Adding Published Items to the Service Catalog

Objective: Add published blueprints to the service catalog and configure entitlements


1. Create a Service

2. Add Catalog Items to the Service

3. Create and Configure an Entitlement

4. Verify Access to Catalog Items

Task 1: Create a Service You log in as a catalog administrator and create and configure a Linux service for existing blueprints.




• User name: QA-Cat01



42 Lab 11 Adding Published Items to the Service Catalog

5. In the left pane, expand Catalog Management and click Services.

6. Click +New.

7. Configure the service.

• Name: Linux-Servers

• Description: Linux Servers for QA business group

• Status: Active

8. Click OK to create the service.

Task 2: Add Catalog Items to the Service You add catalog items to the Linux Servers service.


2. Select the Linux Servers service and click Manage Catalog Items.

3. Click the plus (+) icon.

4. Select the VMW-CentOS-7.5 and VMW-Redhat-7.6 blueprints.

5. Click OK.

6. Click CLOSE.

7. Log out of the QA-Cat01 user account.

Task 3: Create and Configure an Entitlement You create and configure an entitlement for the Linux Servers service that you configured.

1. Log in to the ENG tenant by using the vclass.local domain.

• User name: QA-BG-Mgr01


Only Business Group Managers or Tenant Administrators can create entitlements.


3. In the left pane, expand Catalog Management and click Entitlements.

4. Click +New.

5. Create an entitlement on the General tab.

Lab 11 Adding Published Items to the Service Catalog 43

Option Action Name Enter QA-Entitlement.

Description Enter Allow QA users to access catalog items.

Status Select Active.

Business Group Select QA.

6. Verify that the All Users and Groups check box is selected.

All the users from the QA business group have access to this entitlement.

7. Click NEXT.

8. Click the plus (+) icon for Entitled Services.

a. Select Linux Servers and click OK.

Leave the Entitled Items option blank. It is used to apply a different approval policy to an item that is included in the service.

9. Click the plus (+) icon for Entitled Actions.

a. In the Add Actions dialog box, select the Name check box to select all actions.


10. Click OK.

11. Click FINISH to create the entitlement.

12. Log out of the QA-BG-Mgr01 user account.

Task 4: Verify Access to Catalog Items You log in as the business user of the QA group to verify access to catalog items.

1. Log in to the ENG tenant by using the vclass.local domain.

• User name: QA-User01


2. Click the Filter icon.

Lab 11 Adding Published Items to the Service Catalog 45

Q1. Do you see the Linux-Servers service?

1. Yes .

Q2. What are the catalog items that belong to Linux-Servers service? 2. VMW-C entOS-7.5 and VM W-Redhat-7.6.

3. Log out of the QA-User01 user account.


47

Lab 12 Deploying and Managing Catalog Items

Objective: Deploy a single machine blueprint and manage the catalog item


1. Request a Single Machine Blueprint

2. Modify Virtual Machine Resource Settings

3. Create and Delete Snapshots

4. Clean Up to Save Lab Resources

Task 1: Request a Single Machine Blueprint You log in as a business user to consume services from the service catalog.




• User name: VMW-User01



5. Click REQUEST against the VMW-PhotonOS item.

48 Lab 12 Deploying and Managing Catalog Items

6. Enter For developing QA Application as the reason for request.

7. Click the PhotonOS VM icon in the left pane.

a. Change the value for CPUs from 1 to 2.

8. Click SUBMIT.

9. Click the VMW-PhotonOS item that you requested.


11. Expand the Provisioning section. Q1. Is the Allocate task successful?

1. Yes .

12. Open a new tab in the browser.





15. Review the Recent Tasks pane at the bottom.

a. Verify that the task to power on the VMWLin VM is completed.

16. Switch back to the vRealize Automation console.

This virtual machine provisioning might take up to 7 minutes. Wait for the provisioning to complete.

17. On the Deployments tab, click Back.

Lab 12 Deploying and Managing Catalog Items 49

18. Verify that the VMW-PhotonOS deployment is powered on.

Task 2: Modify Virtual Machine Resource Settings You increase the memory of the provisioned PhotonOS VM.

1. On the Deployments tab, click the requested VMW-PhotonOS item.

2. In the left pane, click the settings icon against the VMWLin VM and select Reconfigure.

3. Click Reconfigure.

4. Change the memory from 1024 to 2048 MB.

5. Click SUBMIT.



Wait for the reconfigure operation to complete. This operation might take up to 5 minutes.

a. If the browser does not refresh automatically, click the refresh icon at the top-right corner.

7. Click the Components tab.

8. Select the VMWLin VM from the left pane. Q1. What is the memory allocated to the VM?

1. 2048 MB.

Task 3: Create and Delete Snapshots You create a snapshot of the provisioned PhotonOS VM and delete the snapshot.

1. Click the settings icon against the VMWLin VM.

2. Click Create Snapshot.

3. Enter Snapshot-01 Before App Upgrade in the Snapshot name text box.

4. Enter QA-User01 Application Upgrade in the Snapshot description text box.

5. Click SUBMIT.


If the browser does not refresh automatically after 1 minute, click the refresh icon at the top-right corner.


8. Select the VMWLin VM and click the Snapshots tab. Q1. Do you see the snapshot here?

1. Yes .

9. Click the settings icon against the VMWLin VM.

10. Click Delete Snapshot.

11. Click the plus(+) icon to select the snapshot.

12. Select the (Current) Snapshot-01 Before App Upgrade check box.

Lab 12 Deploying and Managing Catalog Items 51

13. Click SELECT.

14. Click SUBMIT.


a. Verify that the Delete Snapshot operation is successful.


17. Select the VMWLin VM and click the Snapshots tab. Q2. Do you see the snapshot here?

2. No.

Task 4: Clean Up to Save Lab Resources You destroy your VMW-PhotonOS to free resources.

1. In the vRealize Automation console, click the Deployments tab.

2. Click ACTIONS against the VMW-PhotonOS VM.

3. Click Destroy.

4. Click SUBMIT.

5. Log out of the VMW-User01 user account.


53

Lab 13 Designing an Application Blueprint

Objective: Prepare the CentOS machine with software agents and create an application blueprint


1. Prepare the CentOS Reference Machine

2. Create a Software Component

3. Update Your Inventory

4. Design an Application Blueprint

5. Add the Application Blueprint to a Service

6. Request an Application Blueprint and Validate the Application


Task 1: Prepare the CentOS Reference Machine You log in to the vSphere Client and prepare the CentOS Linux reference machine for software provisioning.





54 Lab 13 Designing an Application Blueprint


4. Click the VMs and Templates view.

5. Expand the Lab-VMs folder.

a. Right-click CentOS-Template and select New VM from This Template.

6. Enter Apache-Web-Server as the virtual machine name and click NEXT.

7. Select the SA-Compute-01 cluster and click NEXT.

8. Select the SA-Shared-02-MS-Remote datastore and click NEXT.

9. Select the Customize the operating system and Power on virtual machine after creation check boxes.

10. Click NEXT.

11. Select the Lin-Cust template and click NEXT.

12. Click FINISH.

Wait for the Apache-Web-Server to clone and power on.

13. Select the Apache-Web-Server VM and click the Summary tab.

Lab 13 Designing an Application Blueprint 55

a. Record the IP address of this VM. __________

NOTE

A different IP address might appear. 14. Open the PuTTY application from the student desktop.

15. Enter the recorded IP address of Apache-Web-Server in the Host Name text box.

16. Click Open and accept the certificate.

17. Log in to Apache-Web-Server.

• User name: root


18. Download the software agents from the vRealize Automation appliance. wget --no-check-certificate https://SA-vRA-01.vclass.local/software/download/prepare_vra_template_linux.tar.gz

19. Extract the content of the Zip file. tar -xzvf prepare_vra_template_linux.tar.gz

20. Change directory. cd prepare_vra_template_linux

21. Install software agents. ./prepare_vra_template.sh

22. Follow the prompts in the interactive installer and accept certificates if presented.


Option Action Cloud Provider Enter vsphere.

vRealize Appliance Enter SA-vRA-01.vclass.local.

Manager Service Server Enter SA-IaaS-01.vclass.local.

Do you accept this for the Manager Service

Enter yes.

Do you accept this for the vRealize Appliance

Enter yes.

Set download timeout (in seconds) for download

Enter 300.

Download and install Java Runtime Environment 1.8.0_201?

Enter Y.

Would you like to start the installation?

Enter Y.

23. Verify that the Installation Completed Successfully. Ready to capture as a template message appears.

24. Enter exit to close the PuTTY session.

25. In the vSphere Client session, right-click the Apache-Web-Server VM and select Power > Shut Down Guest OS.

a. Click YES to confirm the shut down.

26. Right-click the Apache-Web-Server VM and select Template > Convert to Template.

a. Click YES to confirm the conversion.


Task 2: Create a Software Component You log in to the ENG tenant as a software architect and design the software component to install the Apache web component.

1. Open a new tab in Chrome browser.



• User name: QA-Soft01



5. Select Software Components in the left pane.

6. Click +New.

7. Enter Httpd-Service in the Name text box.

8. Select Machine from the Container drop-down menu.

9. Click NEXT.

10. Leave Properties blank and click NEXT.

11. Click Click here to edit for the Install action.

12. Enter the script for the Install action. #!/bin/bash yum install -y httpd

Your script should appear on two lines and look exactly like the script in the screenshot.

13. Click OK.

IMPORTANT

Do not enter a script for the Configure action.


14. Enter the script for the Start action. #!/bin/bash /bin/systemctl start httpd.service

15. Click OK.

16. Enter the script for the Uninstall action. #!/bin/bash yum remove -y httpd

17. Click OK.

When you finish entering all three scripts, your Actions pane should look like the screenshot.

18. Click NEXT.

19. Click FINISH.

20. Select the Httpd-Service software component and click Publish.

21. Log out of the QA-Soft01 user account.

Task 3: Update Your Inventory You run data collection to update the inventory of templates available in vRealize Automation.


• User name: QA-Fabric01




3. In the left pane, expand Compute Resources and click Compute Resources.

4. Point to SA-Compute-01 and select Data Collection.

IMPORTANT

Do not click SA-Compute-01. 5. Click Request now in the Inventory pane.

6. Click Refresh repeatedly until the status changes to Succeeded.

7. Click OK.

8. Log out of the QA-Fabric01 user account.

Task 4: Design an Application Blueprint You log in as an infrastructure architect to design an application blueprint by combining the machine blueprint and the software component.





3. Click +New.

4. Enter QA-Apache-Web-Server in the Name text box and click OK.

5. In the left pane, drag vSphere (vCenter) Machine to the design canvas.

6. Enter Apache-Web-Server in the ID text box.

7. Select the ENG-RP reservation policy from the drop-down menu.

8. Select the QALin machine prefix.

9. Select relevant options on the Build Information tab.





Clone From Select Apache-Web-Server.


10. Select Network and Security in the left pane.

11. Drag Existing Network from the left pane to the design canvas.

12. Browse the network profile.

a. Select the VMW-Production network profile and click OK.

13. Click the Apache-Web-Server vSphere machine in the design canvas.


15. Click +New.

16. From the Network drop-down menu, select VMWProduction.

17. Click OK.

18. Click SAVE.

19. In the left pane, select Software Components.

20. Drag Httpd-Service to the Apache-Web-Server machine.


21. Click SAVE.

22. Click FINISH.

23. Select the QA-Apache-Web-Server blueprint and click Publish.


Task 5: Add the Application Blueprint to a Service You add the published application blueprint to a service and make it available to business users.






4. Select the Web Servers service and click Manage Catalog Items.


6. Select the QA-Apache-Web-Server blueprint.


7. Click OK.

8. Click Close.


Task 6: Request an Application Blueprint and Validate the Application You log in as a business user to request the application blueprint and validate the application.




2. Click REQUEST against QA-Apache-Web-Server.

3. Enter Validate use case of software component as the description.

4. Click SUBMIT.

Wait for the deployment to complete. This deployment might take up to 10 minutes.

5. Click the vSphere Client tab in Chrome.

6. Review the Recent Tasks pane at the bottom.

a. Verify that the task to power on the QA-Lin VM is completed.

7. Switch back to the vRealize Automation console.

a. Verify that the deployment is powered on and available. This step might take up to 10 minutes.

8. Click the deployed QA-Apache-Web-Server item.

9. In the left pane, select the QA-Lin VM.


a. Record the IP address of the QA-Lin VM. __________


a. Use the IP address recorded in the previous step and enter http://<IP_address> as the URL.


The test web page of your new web server appears.

Task 7: Clean Up to Save Lab Resources You destroy your web server to free resources.


2. Click ACTIONS for QA-Apache-Web-Server.

3. Click Destroy.

4. Click SUBMIT.


65

Lab 14 Deploying a Blueprint That Uses a Custom Property from the Property Dictionary

Objective: Use a custom property from the property dictionary when deploying a blueprint


1. Add a Custom Property from the Property Dictionary to a Blueprint

2. Add Your Blueprint to a Service and an Entitlement

3. Test Your Blueprint and Custom Properties


Task 1: Add a Custom Property from the Property Dictionary to a Blueprint You add a custom property group to a blueprint.


2. Use the bookmarks on the favorites bar to navigate to vRealize Automation > Sa-vRA-01 Eng Tenant.

3. Log in to the vclass.local domain with the username RD-InfraArch01 and password VMware1!.

66 Lab 14 Deploying a Blueprint That Uses a Custom Property from the Property Dictionary

The RD-InfraArch01 user has the Infrastructure Administrator role and can modify blueprints.


5. Select the VMW-Webserver blueprint.

6. Click Copy.

7. Enter RD-WebServer-Host in the Name text box.

8. Enter A WebServer with a custom property to set the hostname in the Description text box.

9. Click OK.

10. Select the VMW-WebServer machine in the Design Canvas.

11. Enter RD-Webserver-Host in the ID text box.

12. Click the Properties tab.

13. Click the Custom Properties tab.

14. Click +New.

15. Enter Hostname in the Name text box.

IMPORTANT

Hostname is case-sensitive. Enter it exactly as shown. 16. Select Show in Request and click OK.

17. Click a clear area in the Design Canvas to close the virtual machine panel.

18. Click the VMWWeb network.

19. Click Browse next to Network profile, select RD-Web, and click OK.

20. Click FINISH.

21. Select, but do not open, the RD-WebServer-Host blueprint.

22. Click Publish.

23. Log out of the RD-InfraArch01 user account.

Task 2: Add Your Blueprint to a Service and an Entitlement You add your blueprint to a service and an entitlement.

Lab 14 Deploying a Blueprint That Uses a Custom Property from the Property Dictionary 67


2. Log in to the vclass.local domain with the user name RD-TA01 and password VMware1!.

The RD-TA01 user has the Tenant Administrator role and can modify services and entitlements.

3. Add the RD-WebServer-Host blueprint as a managed catalog item to the Web Servers service.

4. Add the RD-WebServer-Host blueprint as an entitled item in the managed catalog item to the RD-Entitlement entitlement.

Task 3: Test Your Blueprint and Custom Properties You deploy your blueprint to test the custom properties.

1. Click Catalog.

2. Click REQUEST on the RD-WebServer-Host catalog card.

3. In the Reason for request text box, enter Test of Hostname custom property.

4. Click RD-WebServer-Host in the left pane.

A red asterisk next to RD-WebServer-CP indicates that the item requires user input.

5. Enter RD-HostTest in the Machine name text box.

6. Click SUBMIT.

7. Monitor the progress of your deployment until the status is Successful.

The deployment should take approximately 5 minutes.

8. Click your RD-WebServer-Host-<xxxxxxxx> deployment to open the Details pane.

9. Click Components. Q1. What is name of your virtual machine that was deployed?

1. RD-HostTest.

Task 4: Clean Up to Save Lab Resources You destroy your deployment to save lab resources.

1. In the RD-WebServer-CP-<xxxxxxxx> deployment details pane select Destroy from the ACTIONS drop-down menu.

2. Click SUBMIT.

68 Lab 14 Deploying a Blueprint That Uses a Custom Property from the Property Dictionary

3. Click <Back to return to the main Deployments panel.

4. Wait for the Destroy action to complete.

5. Log out of the RD-TA01 user account.

69

Lab 15 Creating Custom Properties

Objective: Create custom properties to control networking and disk format


1. Create a Custom Property for Network Selection

2. Create a Custom Property for Disk Format Selection

Task 1: Create a Custom Property for Network Selection You create a custom property that enables you to select the network that a virtual machine is connected to when it is deployed.




NOTE

The RD-TA01 user account is a tenant administrator and can modify the property dictionary.


5. Click Property Dictionary.

6. Click Property Definitions.

70 Lab 15 Creating Custom Properties

7. Click +New.

8. In the Name text box, enter RD.VirtualMachine.Network0.NetworkProfileName.

IMPORTANT

Enter the name of the property definition exactly as specified. The name of the property definition is used in blueprints and in vRealize Orchestrator workflows.

9. In the Label text box, enter Network Profile.

10. In the Description text box, enter Allow end users to select which network they will connect to their virtual machine.

Do not set a display order.

11. From the Data type drop-down menu, select String.

12. From the Required drop-down menu, select Yes.

13. From the Display as drop-down menu, select Dropdown.

14. Select Static list.

15. Click +New in the Static list pane.

16. In the Name text box, enter RD Data Network.

17. In the Value text box, enter RD-Data.

IMPORTANT

You must enter the value exactly as specified. The text that you enter in the Value text box must match the name of a vRealize Automation network profile. The value is case-sensitive.

18. Click OK.


20. In the Name text box, enter RD Application Network.

21. In the Value text box, enter RD-Application.

22. Click OK.


24. In the Name text box, enter RD Web Network.

25. In the Value text box, enter RD-Web.

26. Click OK.

Lab 15 Creating Custom Properties 71

Your new property definition should match the screenshot.

27. Click OK.

Task 2: Create a Custom Property for Disk Format Selection You create a custom property that enables you to select the disk format of a virtual machine when it is provisioned.

1. Click +New.

2. In the Name text box, enter RD.VirtualMachine.Admin.ThinProvision.

IMPORTANT

Enter the name of the property definition exactly as specified. 3. In the Label text box, enter Thin Provision?.

4. In the Description text box, enter Allow end users to select the disk format of their virtual machine.

Do not set a display order.

5. From the Data type drop-down menu, select Boolean.

6. From the Display as drop-down menu, select Yes/No.

72 Lab 15 Creating Custom Properties

Your new custom property definition should match the screenshot.

7. Click OK.


73

Lab 16 Creating a Property Group

Objective: Create a property group to combine networking and disk format properties


1. Create a Custom Property Group

Task 1: Create a Custom Property Group You create a custom property group that combines network control and disk format custom properties.




NOTE

The RD-TA01 user account is a tenant administrator and can modify the property dictionary.



6. Click Property Groups.

7. Click +New.

74 Lab 16 Creating a Property Group

8. In the Name text box, enter RD.VMProperties.

9. In the Description text box, enter Custom properties for virtual machine configuration.

10. Click +New in the Properties pane.

11. In the Name text box, enter VirtualMachine.Network0.NetworkProfileName.

IMPORTANT

You must enter the name exactly as specified. The text that you enter in the Name text box must match the name of an existing custom property. The name is case-sensitive. Many custom property names also have periods in the names for readability. These periods must be entered exactly as specified.

As you enter text, the names of similar custom properties appear below the Name text box. Only properties defined in your property dictionary appear. This feature helps you enter the name correctly. You can click the correct value and press Enter to load it in to the Name text box.

12. When you finish entering the name, press Enter.

When you press Enter, the cursor moves to the Value text box.

Do not enter a value in the Value text box and do not click OK.

13. Select Show in Request.

14. Click OK.

15. Click +New in the Properties pane.

16. In the Name text box, enter VirtualMachine.Admin.ThinProvision.

IMPORTANT

You must enter the name exactly as specified. As you enter, custom properties will appear. You can select the VirtualMachine.Admin.ThinProvision custom property.

17. Select Show in Request.

18. Click OK.

Lab 16 Creating a Property Group 75

Your new property group should match the screenshot.

19. Click OK.


76 Lab 16 Creating a Property Group

77

Lab 17 Deploying a Blueprint That Uses Custom Properties

Objective: Use a property group with custom properties when deploying a blueprint


1. Add Custom Properties to a Blueprint


3. Test Your Blueprint and Custom Properties


Task 1: Add Custom Properties to a Blueprint You add a custom property group to a blueprint.



3. Log in to the vclass.local domain with the user name RD-InfraArch01 and password VMware1!.



78 Lab 17 Deploying a Blueprint That Uses Custom Properties


6. Click Copy.

7. Enter RD-WebServer-CP in the Name text box.

8. Enter A WebServer with custom properties to control network selection and disk format in the Description text box.

9. Click OK.


11. Enter RD-Webserver-CP in the ID text box.

12. Click the Properties tab.

The Property Groups pane should appear by default

13. In the Property Groups pane, click +Add.

14. Select VMW.VMProperties.

NOTE

VMW.VMProperties was predefined in the course vApp. Do not select the RD.VMProperties group that you might have defined in an earlier lab.

15. Click OK.

16. Click a clear area in the Design Canvas to close the virtual machine panel.

17. Click the VMWWeb network.

18. Click the red X to delete the network and click YES.

19. Click FINISH.

20. Select, but do not open, the RD-WebServer-CP blueprint.

21. Click Publish.





Lab 17 Deploying a Blueprint That Uses Custom Properties 79

The RD-TA01 user has the tenant administrator role and can modify services and entitlements.

3. Add the RD-WebServer-CP blueprint as a managed catalog item to the Web Servers service.

4. Add the RD-WebServer-CP blueprint as an entitled item in the managed catalog item to the RD-Entitlement entitlement.

Task 3: Test Your Blueprint and Custom Properties You deploy your blueprint to test the custom properties.

1. Click Catalog.

2. Click REQUEST on the RD-WebServer-CP catalog card.

3. In the Reason for request text box, enter Test of new custom properties.

4. Click RD-WebServer-CP in the left pane.

A red asterisk next to RD-WebServer-CP indicates that the item requires user input.

5. From the Network Profile drop-down menu, select RD Application Network.

6. From the Thin Provision drop-down menu, select No.

7. Click SUBMIT.


The deployment should take approximately 5 minutes.

9. Click your RD-WebServer-CP-<xxxxxxxx> deployment to open the Details pane.

10. Click Components. Q1. What is name of your virtual machine that was deployed?

1. RDLin< xxx> .

11. Click the RDLin<xxx> virtual machine that was deployed.

12. Click Network.

Your network should be the vxw-dvs-<XX>-virtualwire-<XX>-sid-<XXXX>-RD-Application network.

13. Open a new tab in the Chrome browser and use the bookmarks on the favorites bar to navigate to Infrastructure > vSphere Client.

14. Log in to the vSphere Client with the user name [email protected] and password VMware1!.

15. Verify that your virtual machine has been deployed with a disk that is thick provisioned.

80 Lab 17 Deploying a Blueprint That Uses Custom Properties


1. Return to your vRealize Automation tab in the browser.

You should have the RD-WebServer-CP-<xxxxxxxx> deployment details pane open.

2. From the ACTIONS drop-down menu, select Destroy.

3. Click SUBMIT.


5. Wait for the Destroy action to complete.


81

Lab 18 Modifying a Blueprint to Include Component Profiles

Objective: Modify a blueprint to incorporate component profiles


1. Define Size Component Profiles

2. Define Image Component Profiles

3. Copy and Modify a Blueprint


5. Test Your Blueprint and Component Profiles


Task 1: Define Size Component Profiles You define component profiles for use in blueprints.



3. Log in to the vclass.local domain with the RD-Fabric01 user account and the VMware1! password.

82 Lab 18 Modifying a Blueprint to Include Component Profiles

The RD-Fabric01 user is a fabric group administrator for the ENG-FG fabric group. The fabric group administrator can create size and image component profiles.



6. Click Component Profiles.

7. Click Size.

8. Click the Value Sets tab.

9. Click +New.

10. Enter Small in the Display name text box.

11. In the Storage (GB) text box, enter 5.

12. Verify that Active is selected in the Status drop-down menu.

13. Click Save.

14. Click +New.

15. Enter Medium in the Display name text box.

16. In the Memory (MB) text box, enter 6144.



19. Click Save.

20. Click +New.

21. Enter Large in the Display name text box.

22. In the CPUs text box, enter 2.

23. In the Memory (MB) text box, enter 8192.



26. Click Save.

27. Click Finish.

Task 2: Define Image Component Profiles You define component profiles for use in blueprints.

1. Click Image.

Lab 18 Modifying a Blueprint to Include Component Profiles 83

2. Click the Value Sets tab.

3. Click +New.

4. Enter Centos in the Display name text box.

5. In the Description text box, enter Centos operating system.

6. From the Action drop-down menu, select Clone.

7. From the Clone from drop-down menu, select CentOS-Template (sa-vcsa-01.vclass.local).

8. From the Provisioning workflow drop-down menu, select CloneWorkflow.

9. Enter Lin-Cust in the Customization spec text box.

10. Click Save.

11. Click +New.

12. Enter Photon in the Display name text box.

13. In the Description text box, enter Photon operating system.

14. From the Action drop-down menu, select Clone.

15. From the Clone from drop-down menu, select PhotonOS-Template (sa-vcsa-01.vclass.local).

16. From the Provisioning workflow drop-down menu, select CloneWorkflow.

17. Enter Lin-Cust in the Customization spec text box.


19. Click Save.

20. Click Finish.

21. Log out of the RD-Fabric01 user account.

Task 3: Copy and Modify a Blueprint You copy and modify a blueprint to use as a component profile blueprint.







5. Click Copy.

6. Enter RD-Component-Profile in the Name text box.

7. Enter A WebServer with component profiles to control size in the description text box.

8. Click OK.

9. Select the VMWWEB network, click the red X to delete the network, and click YES.


11. Enter RD-Component-Profile in the ID text box.

12. Click Profiles

13. Click +Add

14. Select Image.

15. Select Size and click OK.

16. Select the Image value set and click Edit Value Sets.

17. Select the Display name check box to select both image value sets.

18. Click Default on the Centos value set and click OK.

19. Select the Size value set and click Edit Value Sets.

20. Select the Display name check box to select all three size value sets.

21. Click Default on the Small value set and click OK.

22. Click Save.

23. Click Finish

24. Select, but do not open, RD-Component-Profile.

25. Click Publish.


Lab 18 Modifying a Blueprint to Include Component Profiles 85




The RD-TA01 user has the tenant administrator role and can modify services and entitlements.

3. Add the RD-Component-Profile blueprint as a managed catalog item to the Web Servers service.

4. Add the RD-Component-Profile blueprint as an entitled item in the managed catalog item to the RD-Entitlement entitlement.

Task 5: Test Your Blueprint and Component Profiles You deploy your blueprint to test the component profiles.

1. Click Catalog.

2. Click REQUEST on the RD-Component-Profile catalog card.

3. In the Reason for request text box, enter Test of new component profiles.

4. Click RD-Component-Profile in the left pane.

5. From the Image drop-down menu, select Centos.

6. From the Size drop-down menu, select Large.

7. Click SUBMIT.


Deployment should take approximately 10 minutes.

9. Click your RD-Component-Profile-<xxxxxxxx> deployment to open the Details pane.

10. Click Components.

11. Click the RDLin<xxx> virtual machine that was deployed.

12. Verify that your virtual machine was deployed with 2 CPUs and 8192 MB of memory.

13. Open a new browser tab.

14. Use the bookmarks to navigate to Infrastructure > vSphere Client.


15. Log in with the [email protected] user account and the VMware1! password.

16. Go to Hosts and Clusters and expand SA Datacenter and SA-Compute-01.

17. Select the RDLin<xxx> virtual machine that you just deployed.

18. On the virtual machine Summary tab, verify that the Guest OS is CentOS 7 (64-bit).

19. Log out of the [email protected] user account and close the vSphere Client browser tab.



You should have the RD-Component_Profile-<xxxxxxxx> deployment details pane open.

2. From the ACTIONS drop-down menu, select Destroy.

3. Click SUBMIT.


5. Verify that the Destroy action completes successfully.


87

Lab 19 Using vRealize Automation Custom Forms

Objective: Use custom forms to deploy machines with properties


1. Create a Blueprint

2. Create a Custom Form

3. Modify the Custom Form to Manage Networking

4. Add Your Blueprint and the New Custom Form to a Service

5. Test Your New Custom Form

6. Deactivate a Custom Form

Task 1: Create a Blueprint 1. Open the Chrome web browser.

2. Use the bookmarks on the favorites bar to navigate to vRealize Automation > SA-vRA01 ENG Tenant.


The RD-InfraArch01 user account has been assigned the Infrastructure Architect role. This role enables this user to modify blueprints, including creating and editing custom forms

4. Click Design.

88 Lab 19 Using vRealize Automation Custom Forms

5. Click +New.

6. Enter RD-CustomForms in the Name text box.

7. Click Properties.

8. Click Custom Properties.

9. Click +New.

10. Select VirtualMachine.Network0.NetworkProfileName from the Name drop-down menu.

11. Enter RD-Data as value and click OK.

12. Click OK to close the blueprint properties and open the blueprint for editing.

13. Click Machine Types under Categories in the left panel.

14. Drag a vSphere (vCenter) Machine into the blueprint.

15. Enter RD-WebServer in the ID text box.

Lab 19 Using vRealize Automation Custom Forms 89

16. Select ENG-RP from the Reservation policy drop-down menu.

17. Enter 100 in the Maximum text box.

18. Click the Build information tab.

19. Change the information.

• Action: Select Clone.

• Clone from: Select CentOS-Template.

• Customization spec: Enter Lin-Cust.

20. Click the Machine Resources tab

21. Enter 20 in the Storage (GB) Maximum text box.

Task 2: Create a Custom Form You create a custom form and set it as the default form.

1. Click EDIT CUSTOM FORM on the bottom left of the screen and click YES to save the blueprint.

2. Click ACTIONS and select Generate form.

Two tabs appear on the top of the form: General and RD-WebServer. If a network exists in the blueprint (for example, RD-Application), a tab appears for the network. Each major component of the blueprint gets a tab. The General tab controls general parameters in the form. The RD-WebServer tab manages the form options for the RD-WebServer virtual machine in the blueprint.

3. Click Network Profile in the center form design pane.

Three vertical dots appear to the right of the correct item.

4. Click the three vertical dots to open a Delete option.

5. Click Delete.

The Network Profile item is deleted from the form.

6. Click Number of Deployments.


A new panel that controls formatting for the number of deployments opens on the right.

7. Click the Constraints tab in the Number of Deployments pane.

8. Select Yes from the Required drop-down menu.

9. Enter 3 in the Maximum value text box.

The Maximum value was 100 based on the blueprint.

10. Click SAVE.

Task 3: Modify the Custom Form to Manage Networking You modify the custom form to manage networking.

1. Click the RD-WebServer tab.

2. Click the x to the right of the tab to delete this RD-WebServer tab from the form and click DELETE.

Your form will only be a 1-page form.

3. Click the General tab.

4. Select the Lease days element and drag it under the Number of Deployments element.

5. In the left Blueprint Elements panel expand General.

6. Select the Network Profile element and drag it under the Reason for request element.


7. Verify that your form looks correct.

8. Select the Network Profile element to open it in the right panel.

9. Click the Values tab.

10. Verify that RD-Data is set as a default value.

If it is not set as a default value, enter RD-Data in the Default value text box.

11. Expand Value options.

12. Edit the text in the Constant text box.

a. Enter RD-Data|RD Data Network, RD-Application|RDApplication Network, RD-Web|RD WebServer Network.

Your constant values should look like the values in the screenshot. You have a number of values, followed by a "|" character, followed by descriptive text. The only thing you changed was the label on RD-Web network. The new label is RD WebServer Network.

13. Click SAVE.


14. Click FINISH.

15. Select, but do not open, the RD-CustomForms blueprint.

16. From the Custom Form drop-down menu, select Activate.

17. Verify that your new RD-CustomForms blueprint is selected and click Publish.


Task 4: Add Your Blueprint and the New Custom Form to a Service You add your blueprint with the new custom form to a service.



The RD-TA01 user account has been assigned the Tenant Administrator role. This role enables this user to modify catalog items and entitlements.

3. Navigate to Administration > Catalog Management > Services.

4. Select, but do not open, App Servers.

5. Click Manage Catalog Items.

6. Click Catalog Items +.

7. Select RD-CustomForms and click OK.

8. Click CLOSE.

Task 5: Test Your New Custom Form You test your new custom form.

1. Click Catalog.

A new catalog card should be visible for RD-CustomForms

2. Click REQUEST in the RD-CustomForms catalog card.

3. Verify that your form appears correctly.


4. Enter Test of Custom Form in the Description text box.

5. Enter 5 in the Number of Deployments text box.

This element turns red and an exclamation mark appears in a circle. If you point to the red exclamation mark, an explanation appears that you have exceeded a constraint value.

a. Change the Number of Deployments value to 1.

6. Select RD WebServer Network from the Network Profile drop-down menu.

7. Click SUBMIT.

Wait for your deployment to complete.

8. Verify that your deployed virtual machine is connected to the RD-Web network.

9. Select Destroy from the ACTIONS drop-down menu on the Deployments page and click SUBMIT.


Task 6: Deactivate a Custom Form You deactivate a custom form in the blueprint.



3. Click Design.


4. Select, but do not open, RD-CustomForms.

5. Select Deactivate from the Custom Form drop-down menu.

6. Click Catalog.

7. Click Request on the RD-CustomForms catalog card.

8. Verify that you see the default form for this blueprint.

9. Click Cancel.


95

Lab 20 Integrating NSX Data Center for vSphere

Objective: Integrate NSX Data Center for vSphere and design a multitier blueprint with NSX network components


1. Create Routed Network Profiles

2. Use NSX Network Components to Design a Multitier Blueprint

3. Add the NSX Blueprint to a Service

4. Deploy the Multitier Blueprint and Review Components


Task 1: Create Routed Network Profiles You log in as a fabric administrator and create routed network profiles for the Web, App, and DB nodes.





96 Lab 20 Integrating NSX Data Center for vSphere



5. From the left pane, expand Reservations and click Network Profiles.

6. Click +New and select Routed.

7. Configure the network profile on the General tab.

Option Action Name Enter Routed-Web.

External Network Profile Select ENG-Transport.

Subnet Mask Select 255.255.255.0.

Range Subnet Mask Select 255.255.255.240.

Base IP Enter 172.16.10.0.

8. Click the Network Ranges tab.

9. Click +Generate Ranges.

Lab 20 Integrating NSX Data Center for vSphere 97

10. Click OK.



Option Action Name Enter Routed-App.







15. Click OK.



Option Action Name Enter Routed-DB.







20. Click OK.



Task 2: Use NSX Network Components to Design a Multitier Blueprint You design a three-tier blueprint including the Web, App, and DB nodes with NSX networking components.





3. Click +New.

4. Create a blueprint.

• Name: NSX-3-Tier

• Description: 3 Tier Blueprint using NSX components

• Minimum Lease Days: 10

• Archive Days: 15

5. Click the NSX Settings tab.

• Transport Zone: Compute (sa-vcsa-01.vclass.local)

• Networking Reservation Policy: NSX-RP

6. Click OK.

7. Select Network and Security in the left pane.

8. From the NSX Data Center for vSphere section, drag On-Demand Routed Network to the design canvas.

9. Click the browse icon next to Parent network profile and select Routed-Web.


10. Drag two more instances of On-Demand Routed Network to the design canvas.

11. Change their parent network profiles to Routed-App and Routed-DB.

12. From the NSX Data Center for vSphere section, drag On-Demand Security Group to the design canvas.

13. Enter Web-SG in the ID text box.

14. Click Add for the Security policies section.

These security policies must be created by the NSX administrator in advance. These policies are discovered during Network and Security data collection.

15. Select Web-Policy and click OK.

16. Drag the second instance of On-Demand Security Group to the design canvas.

• ID: App-SG

• Security Policy: App-Policy

17. Drag the third instance of On-Demand Security Group to the design canvas.

• ID: DB-SG

• Security Policy: DB-Policy

18. Select Machine Types from the left pane.

19. Drag vSphere (vCenter) Machine to the design canvas.


20. Configure settings on the General tab.

• ID: Web

• Machine Prefix: VMWLin

21. Click the Build Information tab and select the relevant options.




Clone From Select CentOS-Template.



23. Click +New.

24. Select the RoutedWeb network and click OK.

25. Click the Security tab.

26. Select Web-SG.

27. Drag the second instance of vSphere (vCenter) Machine to the design canvas.

28. Build the App node.


Option Action ID Enter App.

Machine Prefix Select VMWLin.

Blueprint Type Select Server.





Network Select RoutedApp.

Security Select App-SG.

29. Drag the third instance of vSphere (vCenter) Machine to the design canvas.

30. Build the DB node.


Option Action ID Enter DB.

Machine Prefix Select VMWLin.

Blueprint Type Select Server.





Network Select RoutedDB.

Security Select DB-SG.

Your blueprint should look similar to the screenshot.

31. Click SAVE.

32. Click FINISH.

33. Select the NSX-3-Tier blueprint and click Publish.



Task 3: Add the NSX Blueprint to a Service You add the published NSX blueprint to a service and make it available to business users.






4. Select the Multi-Tier service and click Manage Catalog Items.


6. Select the NSX-3-Tier blueprint.

7. Click OK.

8. Click CLOSE.


Task 4: Deploy the Multitier Blueprint and Review Components You log in as a business user to request the NSX-3-Tier blueprint and review the deployed components.




2. Click REQUEST against the NSX-3-Tier.

3. Enter Validate NSX Components in the Reason for Request text box.

4. Click SUBMIT.

This deployment might take up to 10 minutes.







8. Review the Recent Tasks pane at the bottom and verify that the tasks to power on the VMWLin VMs are completed.

9. Switch back to the vRealize Automation console and verify that the deployment is powered on and available.

10. Click the deployed NSX-3-Tier item. Q1. Do you see the three routed networks?

1. Yes .

Q2. Do you see the three security groups? 2. Yes .

Task 5: Clean Up to Save Lab Resources You destroy your multitier deployment to free resources.


2. Click ACTIONS against the NSX-3-Tier item

3. Click Destroy.

4. Click SUBMIT.

105

Lab 21 (Optional) Adding the NAT Network to a Blueprint

Objective: Use the NAT network profile to create a blueprint


1. Create a NAT Network Profile

2. Modify the Blueprint

3. Add the NSX Blueprint to a Service

4. Deploy the the NAT Blueprint


Task 1: Create a NAT Network Profile You log in as a fabric administrator and create a NAT network profile.







106 Lab 21 (Optional) Adding the NAT Network to a Blueprint

5. From the left pane, expand Reservations and click Network Profiles.

6. Click +New and select NAT.


Option Action Name Enter NAT-Web.


NAT type Select One-to-One.


Gateway Enter 192.168.10.1.

8. Click Network Ranges tab.

9. Click +New.

10. Create the Network Range.

Option Action Name Enter NAT-Web.

Start IP Enter 192.168.10.20.

End IP Enter 192.168.10.30.

11. Click OK.

12. Click OK.


Task 2: Modify the Blueprint You create a blueprint to include the NAT network profile.



Lab 21 (Optional) Adding the NAT Network to a Blueprint 107



3. Select, but do not click, VMW-WebServer.

4. Click Copy.

5. Create a blueprint.

• Name: NAT-Web

• Description: Web server connects to external network using NAT

• Minimum Lease Days: 10

• Archive Days: 15

6. Click the NSX Settings tab.

• Transport Zone: Compute (sa-vcsa-01.vclass.local)

• Networking Reservation Policy: NSX-RP

7. Click OK.

8. Select the VMWWeb network and click the red X to delete the network profile.

9. Select Network & Security from the left pane.

10. From the NSX Data Center for vSphere section, drag On-Demand NAT Network to the design canvas.

11. Click the browse icon next to Parent network profile and select NAT-Web.

12. Select VMW-WebServer VM from the design canvas.

13. Enter NAT-WebServer in the ID field.


15. Click +New.

16. Select the NATWeb network and click OK.

17. Click FINISH.

18. Select the NAT-Web blueprint and click Publish.

19. Select the NSX-3-Tier blueprint and click Publish.


Task 3: Add the NAT Blueprint to a Service You add the published NAT blueprint to a service and make it available to business users.







4. Select Multi-Tier service and click Manage Catalog Items.


6. Select the NAT-Web blueprint.

7. Click OK.

8. Click CLOSE.


Task 4: Deploy the NAT Blueprint You log in as a business user to request the NAT blueprint. You review the deployed components and validate the connectivity.




2. Click REQUEST against the NAT-Web.

3. Enter Validate NAT Profile in the Reason for Request text box.

4. Click SUBMIT.

This deployment might take up to 7 minutes.

5. Verify that the deployment is powered on and available.

6. Click the deployed NAT-Web-XXXXXXXX item. Q1. Do you see the edge services gateway deployed?

1. Yes .

7. Click the Settings icon against VMWLin VM.

8. Click Connect to Remote Console.

9. Select Always allow pop-ups from the top-right corner of the Chrome browser.

Lab 21 (Optional) Adding the NAT Network to a Blueprint 109

10. Click Done.

11. Click the settings icon and select Connect to Remote Console.

A new tab with remote console to VMWLin VM should open with a prompt.

12. Log in to the VMWLin VM.

• User name: root

• Password: VMware1! Q2. Can you ping the external gateway, 172.20.10.10?

2. Yes .

Q3. Can you ping the Internet, 8.8.8.8? 3. Yes .

Task 5: Clean Up to Save Lab Resources You destroy your multitier deployment to free resources.


2. Click ACTIONS against the NAT-Web-XXXXXXXX item

3. Click Destroy.

4. Click SUBMIT.


111

Lab 22 Controlling the Life Cycle of a Machine

Objective: Use an event broker subscription to automatically add a DNS entry when a virtual machine is deployed


1. Copy and Modify a Blueprint

2. Add Your Blueprint to a Service

3. Create a Subscription

4. Select a Workflow for Your Subscription

5. Test Your Subscription


Task 1: Copy and Modify a Blueprint You copy and modify a blueprint to use with an event subscription.


2. Select Sa-vRA-01 - Eng Tenant from the vRealize Automation favorites menu.

3. Log into the vclass.local domain with the user name RD-InfraArch01 and password VMware1!.

112 Lab 22 Controlling the Life Cycle of a Machine

The RD-InfraArch01 user account has the Infrastructure Architect role, which allows this user to create and modify blueprints.


5. Select the VMW-CentOS-7.5 blueprint.

6. Click Copy.

7. Enter RD-WebServer-Add-DNS in the Name text box.

8. Enter A WebServer that will automatically register its name and IP in DNS in the description text box.

9. Click OK.

10. Select the CentOS-7.5 machine in the Design Canvas.

11. Enter RD-WebServer-Add-DNS in the ID text box.

12. Select ENG-RP from the Reservation policy drop-down menu.

13. Select RDLin from the Machine prefix drop-down menu.

14. Click Properties.

15. Click Custom Properties.

16. Click +New.

17. Enter Extensibility.Lifecycle.Properties.VMPSMasterWorkflow32.MachineProvisioned in the Name text box.

IMPORTANT

Enter the name of the property exactly as specified. You can copy and paste the text file available on your student desktop in C:\Materials\Cut-and-paste-scripts\LifecycleEBS.txt.

18. Enter a * value of in the Value text box.

This action passes all of the custom properties in this blueprint to vRealize Orchestrator during the VMPSMasterWorkflow32 workflow Machine Provisioned event.

19. Click OK.

20. Click SAVE and click FINISH.

21. Select, but do not open, RD- WebServer-Add-DNS.

22. Click Publish.


Lab 22 Controlling the Life Cycle of a Machine 113

Task 2: Add Your Blueprint to a Service You add your blueprint to a service.



The RD-TA01 user has the Tenant Administrator role and can modify services and entitlements.

3. Add the RD-WebServer-Add-DNS blueprint as a managed catalog item to the Web Servers service.

Task 3: Create a Subscription You create a subscription to run a vRealize Orchestrator workflow after the virtual machine is provisioned.

1. Click Administration

You do not need to log out and log back in. You should be logged in as RD-TA01, a tenant administrator. The Tenant Administrator role can create and manage subscriptions.

2. Click Events.

3. Click Subscriptions

4. Click +New.

5. Select Machine Provisioning and click NEXT.

6. Select Run based on conditions.

7. Select All of the following from the Clause drop-down menu.

8. Click Clause.

9. Select Data > Lifecycle state > Lifecycle state name from the Clause drop-down menu.


10. Select Equals from the new drop-down menu.

11. Select Constant from the new drop-down menu.


12. Select VMPSMasterWorkflow32.MachineProvisioned from the bottom drop-down menu.

This operation should create a logical condition that is equivalent to Data > Lifecycle state name equals VMPSMasterWorkflow32.MachineProvisioned.

13. Click Add expression.

14. From the Clause drop-down menu, select Data > Lifecycle state > State phase.

15. Select Equals from the drop-down menu.


17. Select POST from the bottom drop-down menu.


18. Click Add expression.

19. Select Data > Blueprint name from the Clause drop-down menu.

20. Select Contains from the new drop-down menu.


22. Enter Add-DNS in the text box.

23. Click NEXT.

Task 4: Select a Workflow for your Subscription You select a workflow and finish your subscription.

1. Select the Orchestrator > vRA ICM Class Workflows > XaaS DNS workflow.

2. Click NEXT.

3. Select Blocking.

4. Enter 5 in the Timeout (min) text box.

5. Click Finish.

6. Select, but do not open, your XaaS DNS subscription.

7. Click Publish.


You have set up an event subscription. This subscription runs only during the POST state phase of the VMPSMasterWorkflow32.MachineProvisioning lifecycle state. This subscription runs immediately after a blueprint has been provisioned, provided the blueprint has Add-DNS in the blueprint name.

The subscription calls a vRealize Orchestrator workflow: the vRA ICM Class Workflows \ XaaS DNS workflow. This workflow receives all properties related to the virtual machine because the blueprint has all the Extensibility.Lifecycle.Properties.VMPSMasterWorkflow32.MachineProvisioned property values sent as custom properties in the blueprint.

The XaaS DNS workflow parses the Payload parameter and gets the host name of the virtual machine and the IP address that it was assigned to. The XaaS DNS workflow uses Microsoft PowerShell to add a DNS entry with this information into the DNS database.

Task 5: Test Your Subscription You test your subscription to see if machines deployed by this service automatically register in DNS.


2. Click Request in the RD-WebServer-Add-DNS card.

3. In the Reason for request text box, enter Test of new subscription.

4. Click SUBMIT.

Wait for the status of your request to change from In Progress to Successful.

Deployment takes about 6 minutes. If your request fails, ask your instructor for help.

5. Record the name of your virtual machine and the IP address in the Deployment pane. __________

6. Open a Remote Desktop Connection Manager to the Domain Controller.

a. Minimize the Chrome browser.

b. Click the Remote Desktop Connection Manager on the toolbar.

c. Double-click the Infrastructure > Domain Controller shortcut in the left panel of Remote Desktop Connection Manager.

7. Click the DNS shortcut on the taskbar.


8. Expand Forward Lookup Zones and vclass.local.

9. Click the Refresh icon.

10. Verify that the name of your deployed virtual machine is listed in the DNS host table with the correct IP address.



2. Select Destroy from the ACTIONS drop-down menu on the RD-WebServer-Add-DNS-<xxxxxxxx> deployment.

3. Click SUBMIT.


119

Lab 23 Creating a XaaS Blueprint with Actions

Objective: Create a XaaS blueprint and actions to extend vRealize Automation into the management of Active Directory


1. Create an Active Directory Endpoint

2. Configure an Active Directory User as a Custom Resource

3. Create a XaaS Blueprint

4. Create Resource Actions

5. Create a Service and an Entitlement

6. Test Your XaaS Service

7. Perform a Day-2 Operation

8. Verify Your XaaS Deployments

Task 1: Create an Active Directory Endpoint You create a vRealize Automation endpoint for Active Directory.

1. Start Chrome and select SA-vRA-01 ENG Tenant from the vRealize Automation favorites menu.

120 Lab 23 Creating a XaaS Blueprint with Actions

2. Log in to the vclass.local domain with the RD-TA01 user account and the VMware1! password.

The RD-TA01 user account is a tenant administrator that can create vRealize Orchestrator configuration endpoints.

3. Click Administration.

4. Expand vRO Configuration and click Endpoints.

5. Click +New.

6. Select Active Directory from the Plug-in drop-down menu and click NEXT.

7. Enter vclass.local in the Name text box.

8. Enter The vclass.local Active Directory in the Description text box and click NEXT.

9. Enter dc.vclass.local in the LDAP Server Host/IP text box.

10. Enter 636 in the Port text box.

11. Enter dc=vclass,dc=local in the Base DN text box.

12. Select Yes from the Use SSL drop-down menu.

13. Enter vclass.local in the Default domain text box.

14. Enter [email protected] in the User name for shared session text box.

15. Enter VMware1! in the Password for shared session text box.

16. Click FINISH.


Task 2: Configure an Active Directory User as a Custom Resource You configure an Active Directory user as a custom resource so that you can manage provisioned items like Active Directory user accounts from vRealize Automation.


2. Log in as the RD-XaaS01 user to the vclass.local domain.

The RD-XaaS01 user has the XaaS Architecture role and can create and manage XaaS blueprints, custom resources, resource mappings, and resource actions.

3. Click Design.

4. Navigate to XaaS > Custom Resources.

Lab 23 Creating a XaaS Blueprint with Actions 121

5. Click +New.

6. Enter AD in the Orchestrator type text box and wait for the list of AD objects to appear.

7. Select AD:User.

8. Enter Active Directory User in the Name text box.

9. Enter Manage Active Directory users in vclass.local in the Description text box and click NEXT.

10. Click Finish.

Task 3: Create a XaaS Blueprint You create a XaaS Blueprint.

1. Click XaaS Blueprints.

2. Click +New.

3. Select the Orchestrator > Library > Microsoft > Active Directory > User > Create a user with a password in an organizational unit workflow.

4. Click NEXT.

5. Enter New AD User in the Name text box and click NEXT.

6. Click the OU container Search text box.


7. Click Details in the right pane.

8. Select Tree from the Type drop-down menu.

9. Click Apply at the bottom of the pane.

10. Click the The domain name in Win2000 form text box.

11. Click the Constraints tab in the right pane.

12. Select Constant from the Value drop-down menu and enter vclass.local in the text box.


13. Click Apply and click NEXT.

14. Select newUser [Active Directory User] from the Provisioned Resource drop-down menu and click NEXT.

15. Select XaaS from the Category drop-down menu.

16. Click FINISH.

17. Select the New AD User blueprint and click Publish.


Task 4: Create Resource Actions You create two resource actions so that you can change a user password and add a user to a user group from vRealize Automation.

1. Click Resource Actions.

2. Click +New.

3. Select the Orchestrator > Library > Microsoft > Active Directory > User > Add a user to a user group workflow and click NEXT.

4. Click NEXT to accept the default Input Resource settings.

5. Click NEXT to accept the default Details settings.

6. Click the Group search text box on the form.

7. Select Tree from the Type drop-down menu in the Details pane.

8. Click Apply.

9. Click FINISH.

10. Select the Add a user to a user group resource action and click Publish.

11. Log out of the RD-Xaas01 user account.

Task 5: Create a Service and an Entitlement You create a service and an entitlement for your XaaS Blueprint.

1. Log in to the vclass.local domain with the RD-TA01 user account and the VMware1! password.

The RD-TA01 user account is a tenant administrator and can create services and entitlements.


3. Go to Catalog Management > Services.

4. Click +New.

5. Enter Active Directory Management in the Name text box.

6. Enter Create an Active Directory User in an OU in the Description text box.

7. Verify that Active is selected in the Status drop-down menu and click OK.

8. Select the Active Directory Management service and click Manage Catalog Items.

9. Click the + icon to add a new catalog item.


10. Select the New AD User blueprint and click OK.

11. Click CLOSE.

12. Click Catalog Items.

13. Click New AD User to edit the item.

14. Click the Browse button, select the C:\Materials\Graphics|\vRA\OperatingSystems\cute_ball_windows.png icon, and click OK.

15. Click OK.

16. Click Entitlements.

17. Click +New.

18. Enter Active Directory in the Name text box,

19. Select Active from the Status drop-down menu.

20. Select RD from the Business Group drop-down menu and click NEXT.

21. Click the + icon to add an entitled service

22. Select Active Directory Management and click OK.

23. Click the + icon to add an entitled item

24. Select New AD User and click OK.

25. Click the + icon to add an entitled action.

26. Select Add a user to a user group (Active Directory user) and click OK.

27. Click FINISH.

Task 6: Test Your XaaS Service You test your XaaS service.

1. Click Catalog.

2. Click REQUEST in the New AD User card.

3. Verify that RD is selected in the Business group drop-down menu.

4. Click +Select in the Organizational Unit container item.

5. Expand ldaps://vclass.local:636>vclass.

6. Select RD and click SELECT.


7. Enter RD-User02 for the user account name.

8. Enter VMware1! for the password and the confirmation of the password.

9. Verify that vclass.local is the domain name.

10. Enter RD-User02 in the display name of the user.

11. Verify that No is selected in the user must change the password at the next login drop-down menu.

12. Click SUBMIT.


Task 7: Perform a Day-2 Operation You use a resource action to perform a Day-2 operation.

1. Select Add a user to a user group from the Actions drop-down menu on the deployment for the RD-User02 user creation.

2. Click +Select and browse to ldaps://vclass.local:636>vclass>RD>RD-ApprovAdmin.


NOTE

The top part of the tree will only show user accounts. To see and select groups like RD-ApprovAdmin use the scroll bar on the right and scroll down.

3. Click SELECT.

4. Click SUBMIT.

Wait for your deployment operation to complete.

5. Select Add a user to a user group from the Actions drop-down menu on the deployment for the RD-User02 user creation.

6. Click +Select and browse to ldaps://vclass.local:636>vclass>RD>RD-Users.

NOTE

The RD-User02 user needs to belong to both RD-Users and RD-ApprovAdmin. So you run the action twice.

7. Click SELECT.

8. Click SUBMIT.


Wait for your deployment operation to complete.

Task 8: Verify Your XaaS Deployments You synchronize your directory and verify the creation of the user and the assignment to a group.


NOTE

You are currently logged in as RD-TA01, a tenant administrator. Tenant administrators have the ability to synchronize directories.

2. Navigate to Directories Management > Directories.

3. Click Sync Now on the vclass.local directory.

Ignore any error messages about missing groups.

4. Click Sync Directory.

5. Close the Import Status: Sync started message.

6. Click Refresh Page until the Sync Now button reappears.


8. Log in to the ENG tenant in the vclass.local domain as RD-User02 with the password VMware1!

Your XaaS service should have created the RD-User02 user account. Your Day-2 action should have added this user account to the RD-Users and the RD-ApprovAdmin groups. The RD-User02 account should be able to log in as a user in the RD business group and should have the Approval Administrator role which will give the user the ability to create approval policies.

9. Navigate to Administration > Approval Policies and verify that you can create approval policies.


10. Click +New.

If you click +New, you become a member of the Approval Administrator group.

11. Click Cancel.

12. Log out of the RD-User02 user account.


131

Lab 24 (Optional) Creating a XaaS Blueprint to Create an NSX Group

Objective: Create a XaaS blueprint that creates NSX security groups


1. Create a XaaS Blueprint


3. Test Your XaaS Service

4. Verify Your XaaS Deployments

This optional lab is designed to test your knowledge. Only basic guidance is provided in this lab.

Task 1: Create a XaaS Blueprint You create a XaaS Blueprint that creates NSX security groups.


2. Log in to the vRealize Automation ENG tenant in the vclass.local directory with the RD-XasS01 user account and VMware1! password.

3. Click Design and click XaaS Blueprints.

4. Click +New.

132 Lab 24 (Optional) Creating a XaaS Blueprint to Create an NSX Group

5. Select the Orchestrator > Library >NSX > NSX workflows > Create security group workflow.

6. Click NEXT.

7. Enter New New NSX Security Group in the Name text box and click NEXT.

8. Click NEXT to finish the blueprint form.

9. Select No provisioning and click Next.

10. Select XaaS from the Category drop-down menu.

11. Click FINISH.

12. Publish your new XaaS blueprint.

13. Log out of the RD-Xaas01 user account.




3. Create an NSX Objects service.

4. Add the new XaaS blueprint as a managed catalog item to the NSX Objects service.

5. Create a XaaS-Entitlements entitlement.

6. Add the new XaaS blueprint as an entitled item in the managed catalog item to the XaaS-Entitlements entitlement.


Task 3: Test Your XaaS Service You test your XaaS service.

1. Use the Chrome browser to log in to the vRealize Automation ENG tenant in the vclass.local directory with the RD-XaaS01 user account and VMware1! password.

2. Click Catalog.

3. Click REQUEST in the New NSX Security Group card.

Lab 24 (Optional) Creating a XaaS Blueprint to Create an NSX Group 133

4. Select the NSX endpoint.

5. Enter NSX-SECGRP in the Security group name text box and click SUBMIT.


6. Log out of the RD-XaaS01 user account.

Task 4: Verify Your XaaS Deployments You verify the creation of the new NSX security group.

1. Use the Chrome browser to log in to the vRealize Automation ENG tenant in the vclass.local directory with the RD-Fabric01 user account and VMware1! password.

2. Run a data collection on the SA-Compute-01 compute resource on the Network & Security Inventory.

Wait for the data collection operation to complete.

3. Log out of the RD-Fabric01 user account.

4. Use the Chrome browser to log in to the vRealize Automation ENG tenant in the vclass.local directory with the RD-InfraArch01 user account and VMware1! password.

5. Create a blueprint named NSX-Sec-Group-Test.

6. Use the blueprint design process to verify that the new NSX security group exists.

7. Click Cancel and do not save your test blueprint.


134 Lab 24 (Optional) Creating a XaaS Blueprint to Create an NSX Group

135

Lab 25 Creating Approval Policies

Objective: Use approval policies to control requests


1. Create an Approval Policy

2. Add Your Policy to an Entitlement

3. Test Your New Policy

4. Process an Approval Policy

5. Verify That the Request Is Approved

6. Clean Up Lab Resources

Task 1: Create an Approval Policy You assign an approval policy administrator to the tenant. The approval policy administrator creates approval policies for use in the tenant when a user requests a virtual machine with more memory.


2. Select SA-vRA-01 Eng Tenant from the vRealize Automation favorites menu.

3. Verify that your domain is set to vclass.local.

4. Log in with the RD-Approv01 user account and the password VMware1!.

The RD-Approv01 user account is assigned the Approval Administrator role and can create and modify approval policies.


136 Lab 25 Creating Approval Policies

6. Click Approval Policies.

7. Click +New.

8. In the New Approval Policy dialog box, scroll down and select Service-Catalog-Catalog Item Request-Virtual Machine and click OK.

9. In the Name text box, enter RD-MoreRAM.

10. In the Description text box, enter Approval needed for virtual machines with more RAM.

11. From the Status drop-down menu, select Active.

12. On the Pre-Approval tab, click the green + icon to the right of Levels.

13. In the Name text box, enter More RAM requested than default of 2048 MB.

14. In the Description text box, enter Any request for a virtual machine with more RAM than 2048 MB requires approval.

15. Under When is approval required?, click Required based on conditions.

16. From the Clause drop-down menu, select Memory (MB).

17. From the drop-down menu that appears to the right of the Memory (MB) text box, select > (greater than sign).

18. From the Value drop-down menu, select Constant.

19. In the Value text box, enter 2048.

20. In the search box under Approvers, enter RD-BG-MGR and select RD-BG-MGR@ vclass.local from the search results.

21. Leave Anyone can approve selected and click OK.

22. Verify that the new level appears in the Pre-Approval pane and click OK.

23. Log out of the RD-Approv01 user account.

Task 2: Add Your Policy to an Entitlement You add your new policy to an entitlement.


2. Log in to the vclass.local domain with the RD-TA01 user account and the password VMware1!.

The RD-TA01 user has the Tenant Administrator role and can create and manage entitlements.


Lab 25 Creating Approval Policies 137

4. In the left pane, click Catalog Management.

5. Click Entitlements.

6. Click RD-Entitlement.

7. Click Items & Approvals.

8. Click Entitled Items +.

9. Select RD-WebServer-Approval and click OK.

10. Select Modify Policy from the RD-WebServer-Approval Approval Policy drop-down menu.

11. Click Show all.

12. From the Apply this policy drop-down menu, select RD-MoreRAM [Service Catalog Catalog Item Request - Virtual Machine].

13. Click OK.

14. Click Finish.


Task 3: Test Your New Policy You request a large VM to test your new policy.

1. Log in to the Eng tenant and the vclass.local domain with the RD-User01 user account and the password VMware1!.

2. In the RD-WebServer-Approval catalog card, click Request.

3. In the Description text box, enter Webserver VM with 4086 MB.

4. In the Reason for request text box, enter Webserver required with larger memory requirements.

5. In the left pane, click the RD-WebServer-1 virtual machine under the RD-WebServer-Approval blueprint.

6. In the Memory (MB) text box, increase the value of memory to 4086.


7. Click Submit.

8. Click Deployments.

9. Verify that a deployment appears with a status of Pending Approval.

10. If Status does not appear as Pending Approval, click Refresh.

11. Click the RD-WebServer-Approval link on the left of the request to open the details.

12. Click History in the Details pane.

13. Verify that Pending Approval is the status.

14. Log out of the RD-User01 account.

15. Expand Pre-Approval and click the i in the circle for information.

Verify that someone from the RD-BG-MGR group must approve your request.

Task 4: Process an Approval Policy You log in as the assigned approver. Then you process and approve a request for a virtual machine with increased memory according to the approval policy. Finally, you log in as the

Lab 25 Creating Approval Policies 139

user who requested the virtual machine with increased memory to verify that the request is approved.

1. Select SA-vRA-01 - Eng Tenant from the vRealize Automation favorites menu.

2. Log in with the RD-BG-MGR01 user account in the vclass.local domain with the password VMware1!.

The RD-BG-MGR01 user is the manager of the RD business group and has been assigned as an approver for this approval policy.

3. Click Inbox.

4. In the Approvals pane, verify that the request appears with the Active status.

5. Click the number of the approval request (approval request number 1).

The number (1 in this case) is a link that opens the request.

6. In the Approvals pane, verify that Requester matches the user that requested the RD_WebServer-1 blueprint.

7. Click Request Information.

8. Click the RD-WebServer-1 virtual machine in the left pane of the Request details dialog box.

Q1. Does the Memory (MB) value match the amount previously requested? 1. Yes .

9. Click Enter Details.

10. In the Justification text box, enter Approved, this machine requires increased memory.

11. Click Approve.

12. Log out of the RD-BG-MGR01 user account.


Task 5: Verify That the Request Is Approved You log in as the user who requested the virtual machine with increased memory to verify that the request is approved.

1. Log in with the RD-User01 user account in the vclass.local domain with the password VMware1!.


3. Click the refresh icon and monitor the status of the request until Status appears as Successful.

This operation might take up to 10 minutes to complete. You might have to click Refresh several times.

4. Click the link for the deployed virtual machine to open the detail panel.

5. Click History.

6. Expand Pre-Approval.

7. On the More RAM requested line, click the i in the circle (information icon) to the right of Approved.

8. Verify that Approver matches the user that you used to approve the request.

Task 6: Clean Up Lab Resources You destroy your deployment to free up resources for future labs.

1. Select Destroy from the ACTIONS drop-down menu on your deployment.

2. Click SUBMIT.


141

Lab 26 Monitoring Resources

Objective: Monitor and analyze resource utilization and examine logs


1. Analyze Resource Utilization

2. Analyze IP Resources Allocated in Network Profiles

3. Examine Events and Logs

4. Examine System Event Logs

Task 1: Analyze Resource Utilization You examine used and available disk space and memory in a reservation as a fabric group administrator.




4. Log in with the VMW-Fabric01 user account and the password VMware1!.

The VMW-Fabric01 user has the fabric administrator role in the ENG-FG fabric group

5. Click Infrastructure.

6. Click Reservations

7. Click Reservations.

142 Lab 26 Monitoring Resources

If resources are not available, requests will fail. To fulfill the request, the assigned reservation must have enough machines, quota, memory, and storage available to process the request.

8. Examine the listed reservations. Q1. How much storage is available in the ENG-RES-VMW-1 and ENG-RES-VMW-2

reservations? 1. Answers var y.

Q2. How much memory is available in the ENG-RES-VMW-1 and ENG-RES-VMW-2 reservations?

2. Answers var y.

Task 2: Analyze IP Resources Allocated in Network Profiles You analyze the amount of unallocated IP addresses in a network profile.

1. Click Network Profiles.

If resources are not available, requests fail. If a machine in a blueprint is connected to a network and a static IP address is required, then the network profile used by the blueprint must have IP addresses available in the IP ranges that have been assigned.

2. Double-click VMW-WEB.

IMPORTANT

This action will open the network profile in editing mode. Do not make changes to the current network profile.

3. Click Network Ranges.

4. Click Network Ranges. Q1. What is the total number of IP addresses defined for the network profile?

1. 41.

Q2. How many IP addresses are currently unallocated? 2. Answers var y, but you might see 38 unall ocated.

5. Log out of the VMW-Fabric01 user account.

Task 3: Examine Events and Logs You examine various types of events and logs.



Lab 26 Monitoring Resources 143

3. Log in with the VMW-IaaS01 user account and the password VMware1!.

The VMW-IaaS01 user account has IaaS administer rights in the ENG tenant.

4. Click Infrastructure.

5. Click Recent Events.

The VMW-IaaS01 account has the IaaS administrator and fabric group administrator roles. These roles (with the Tenant Administrator and Infrastructure Architect roles) allow users to view the Recent Events pane. The events currently in the Recent Events pane are mainly events of information-level severity that were generated by specific requests made by the users in the VMW group user. If you are logged in as a different user who is entitled to view the Recent Events pane, you will see different events.

6. Click Monitoring.

The monitoring panes (Audit Log, DEM Status, Log, and Workflow History) are available only to users who are assigned the IaaS Administrator role.

7. Click Workflow History.

Workflow History includes information from various types of workflows, such as IaaS workflows and vRealize Orchestrator workflows.

8. Select Yes from the Multiple Attempts drop-down menu. Q1. Did any workflows have multiple attempts?

1. Answers var y.

9. Select No from the Multiple Attempts drop-down menu.

10. Select Workflow failed from the Result drop-down menu. Q2. Did any workflows fail?

2. Answers var y.

11. In the left pane, click Log.

The Log Viewer pane includes log information of various types from multiple sources, including Distributed Execution Manager (DEM) workers, agents, vRealize Orchestrator, and various vRealize Automation subsystems. This information is some of the most comprehensive and valuable information for troubleshooting configuration and communications problems in vRealize Automation.

12. In the left pane, click DEM Status.

DEM status includes information on scheduled and currently executing DEM workflows.

13. Click Audit Log.

The audit log in the Audit Log Viewer pane provides details about the status of managed virtual machines and activities performed on these machines during reconfiguration. The log includes information about machine provisioning, reclamation, and reconfigure actions.

14. Log out of the VMW-IaaS01 user account.

144 Lab 26 Monitoring Resources

Task 4: Examine System Event Logs You use the system administrator role to analyze vRealize Automation system-level events.


2. Verify that your domain is set to vsphere.local.

3. Log in with the Administrator user account and a password of VMware1!.


5. Click View event logs.

6. Examine the event logs.

7. Select any event and click View Details.

The system administrator event logs cover high-level events in the vRealize Automation system. Only users with system administrator-level authority can examine these events.

8. Click OK.

9. Log out of the default tenant.

145

Lab 27 Reclaiming Resources

Objective: Reclaim resources in vRealize Automation


1. Find Machines to Reclaim

2. Respond to Reclamation Requests

3. Examine User Responses to Reclamation Requests

4. Modify the Machine Lease Period

5. Destroy Machines

Task 1: Find Machines to Reclaim You find a machine to reclaim and request reclamation.




4. Log in with the RD-TA01 user account and VMware1! password.

NOTE

The RD-TA01 user has the Tenant Administrator role in the ENG tenant and is a member of the RD business group. Tenant administrators can find machines to reclaim and request reclamation.

146 Lab 27 Reclaiming Resources


6. Click Reclamation.


8. Examine the machines listed for the Eng tenant.

9. Click the expansion icon (right arrow) in the upper-right part of the pane to display the advanced search options.

10. Enter User01 in the Owner name contains text box.

11. Enter RD in the Business group contains text box.

12. Click the search icon.

13. Select the RD-WebServer-Centos-<xxxxxxxx> and RD-DBServer-Centos-<xxxxxxxx> machines.

NOTE

These machines have an eight-digit identifier number at the end of the machine name. For example, the RD-Webserver-Centos machine might be named RD-WebServer-Centos-85053117.

14. Click Reclaim.

15. Enter 1 in the New Lease length (days) text box.

Lab 27 Reclaiming Resources 147

16. Enter 1 in the Wait before forcing lease (days) text box.

17. Enter The Eng tenant needs more space in the Reason for request text box.

18. Click SUBMIT.

19. Click CLOSE.


Task 2: Respond to Reclamation Requests You respond as a user to reclamation requests.

1. Log in to the vclass.local domain as user account RD-User01 with the password VMware1!.

2. Click Inbox.

3. Click Reclamation Requests.

4. In the right pane, click the number of the first reclamation request to open it.

5. Click ITEM IN USE at the bottom of the pane.

6. In the right pane, click the number of the remaining reclamation request to open it.

7. Click RELEASE FOR RECLAMATION at the bottom of the pane.



Task 3: Examine User Responses to Reclamation Requests You examine a user’s response to your reclamation requests.

1. Log in to the vclass.local domain as user account RD-TA01 with the password VMware1!.


3. Click Reclamation.

4. Click Reclamation Requests.

5. Examine the response to your reclamation request. Q1. Can you select the approved item and delete the machine?

1. No. The Busi ness group manager or the owner can manuall y des troy machi nes . The recl amation process will automaticall y expire and archi ve (if configured) and then des troy machines that the tenant admi nistrator r equests for recl amation.


Task 4: Modify the Machine Lease Period You modify a machine lease.

1. Log in to the vclass.local domain as user account RD-BG-MGR01 with the password VMware1!.

The RD-BG-MGR01 user account has the Business Group manager role in the RD business group. The business manager of a business group has the power to modify the leases of deployed machines and to destroy deployed machines.


3. Click the Filter icon.

4. At the bottom of the left pane, deselect the [email protected] check box under Owners.

Lab 27 Reclaiming Resources 149

5. At the bottom of the left pane, select RD-User01 under Owners.

6. From the Actions drop-down menu, select Change Lease on the RD-DBServer-Centos-<xxxxxxxx> deployment owned by RD-User01.

This deployment never expires.

7. Select today’s date as the expiration date.

8. Select the current time as the expiration time.

9. Click SUBMIT.

10. Verify that the Lease changes to Expired.

11. From the Actions drop-down menu, select Change Lease on the RD-WebServer-Centos-<xxxxxxxx> deployment owned by RD-User01.

This deployment expires 25 years from now.

12. Select today’s date as the expiration date.

13. Select the current time as the expiration time.

14. Click SUBMIT. Q1. Why can you not change the expiration date to today’s date?

1. The Lease Mini mum days fi eld on the bl ueprint was set to 9,999 days. You cannot expir e the lease on any machine depl oyed with this bl ueprint until the mi ni mum number of days has passed. However, you can change that number to a much lower number and selec t Propag ate updates to existi ng deployments. This opti on all ows you to expire the l ease.

15. Click CANCEL.

Task 5: Destroy Machines You destroy machines to free up resources.

1. From the Actions drop-down menu, select Destroy on the RD-WebServer-Centos-<xxxxxxxx> deployment owned by RD-User01.

This deployment expires 25 years from now.

2. Click SUBMIT

3. From the Actions drop-down menu, select Destroy on the RD-DBServer-<xxxxxxxx> deployment owned by RD-User01.


This deployment has expired.

4. Click SUBMIT.

5. Wait for the Destroy actions to finish.

6. Log out of the RD-BG-MGR01 user account.

151

Lab 28 Using Health Checks

Objective: Create and run a health check in vRealize Automation


1. Create a Health Service Check

2. Run a Health Service Check

Task 1: Create a Health Service Check You create a health service check.




4. Log in with the RD-Health01 user account and the password VMware1!.

NOTE

The RD-Health01 user has the Health Administrator role in the ENG tenant and is a member of the RD business group. Health administrators can create and run health service checks.


6. Click Health.

152 Lab 28 Using Health Checks

By default, when you click the Administration tab with this user account, the Health pane should already be open.

7. Click +NEW CONFIGURATION.

8. Enter ENG Tenant Health Check in the Name text box.

9. Enter Health Check for the ENG tenant in the Description text box.

10. Select vRealize Automation 7.6.0 from the Product drop-down menu.

11. Click NEXT.

12. Select Tenant Tests for VRealize Automation.

13. Click NEXT.

14. Enter https://sa-vra-01.vclass.local in the vRealize Automation Web Address text box.

15. Enter sa-vra-01.vclass.local in the SSH Console Address text box.

16. Enter VMware1! in the SSH Console Password text box.

17. Enter [email protected] in the Tenant Username text box.

The tenant user selected must have the Fabric Group Administrator role, the Tenant Administrator role, and the IaaS Administrator role.

18. Enter VMware1! in the Tenant Password text box.

19. Enter VMware1! in the System Tenant Password text box.

Lab 28 Using Health Checks 153

20. Click NEXT.

21. Click FINISH.

Task 2: Run a Health Service Check You respond as a user to reclamation requests.

1. In the ENG Tenant Health Check card, click RUN.

Wait for the health service check run to complete. This step might take 2 to 3 minutes.

When the health service check run completes, a circle appears that is either mostly or all green.

2. Click the circle.

3. Examine the ENG Tenant Health Check.

4. Log out of the RD-Health01 user account.

154 Lab 28 Using Health Checks

155

Lab 29 Integrating vRealize Operations Manager

Objective: Explore the integration between vRealize Operations Manager and vRealize Automation


1. Configure the Management Pack in vRealize Operations Manager for vRealize Automation

2. Configure the Metrics Provider in vRealize Automation

3. Deploy Test Machines

4. Verify Current Placement

5. Configure Placement Options

6. Verify That vRealize Operations Manager Is Managing Resources

7. Examine Your Consolidation

8. Clean Up Lab Resources

Task 1: Configure the Management Pack in vRealize Operations Manager for vRealize Automation You configure the initial settings in vRealize Operations Manager.


156 Lab 29 Integrating vRealize Operations Manager

2. Open a new tab and use the bookmarks to navigate to Infrastructure > vRealize Operations Manager.

3. Log in to Local Users with the user account admin and password VMware1!.


The vSphere management pack has already been installed and configured. Adapter Status should indicate Data receiving.

5. Select VMware vRealize Automation.

6. Click the gear icon under Configured Adapter Instances to configure vRealize Automation.

7. Enter vRA in the Display Name text box.

8. Enter sa-vra-01 vRealize Automation system in the Description text box.

9. Enter https://sa-vra-01.vclass.local in the vRealize Automation Appliance URL text box.

10. Click the + icon on the right side of the Credential text box to enter a new credential.

11. Enter vRA Credential in the Credential name text box.

12. Enter [email protected] in the SysAdmin Username text box.

13. Enter VMware1! in the SysAdmin Password text box.

14. Enter [email protected] in the SuperUser Username text box.

15. Enter VMware1! in the SuperUser Password text box.

16. Click OK.

Lab 29 Integrating vRealize Operations Manager 157

17. Click TEST CONNNECTION.

18. Click ACCEPT to accept the security certificate.

19. Click OK to close the Test Connection Successful message.

20. Click SAVE SETTINGS.

21. Click OK to close the Adapter instance successfully saved message.

22. Click CLOSE.

Task 2: Configure the Metrics Provider in vRealize Automation You configure the management pack in vRealize Operations Manager.

1. If a tab is already open to the vRealize Automation web console, return to it.

2. If a tab is not open to the vRealize Automation web console, open a new tab.

a. Use the bookmarks to log in to the vclass.local domain with the VMW-TA01 user account (tenant administrator) in the ENG tenant with VMware1! as the password.

3. Navigate to Administration > Reclamation > Metrics Provider.

4. Select the vRealize Operations Manager endpoint.

5. Enter https://sa-vrops-01.vclass.local/suite-api/ in the URL text box.

6. Enter Admin in the Username text box.

7. Enter VMware1! in the Password text box.

8. Click TEST CONNECTION.


9. Verify that a successful connection occurs.

If the connection is not successful, inform your instructor.

10. Click SAVE.

11. Click OK to trust the certificate.

Task 3: Deploy Test Machines You request multiple machine deployments to test vRealize Operations Manager.

1. Click Catalog.

2. Click REQUEST in the VMW-vROPS catalog card.

3. Enter vROPS Test in the Description text box.

4. Click Submit.

These deployments will take a few minutes to complete. Wait for the deployment to complete. Four virtual machines are deployed.

5. Click the filter icon for Deployments.

6. In the left panel, expand Owners.

7. Verify that virtual machines are not deployed from [email protected].

8. If virtual machines owned by RD-User01 are currently deployed, destroy the virtual machines.

a. Log out of the VMW-TA01 user account.

b. Log in to the RD-User01 user account with the password VMware1!.

c. Click Deployments.

d. Destroy all virtual machines deployed by RD-User01.

Two virtual machines might be present.

e. Log out of the RD-User01 user account.

f. Log in using the VMW-TA01 user account and the password VMware1!.

Task 4: Verify Current Placement You verify the current distribution of the four virtual machines.

1. Open a new browser tab using Infrastructure > vSphere Client.


2. Log in to the vSphere Client with the [email protected] user account and the password VMware1!.

3. Go to Hosts and Clusters in the navigation panel.

4. Expand SA Datacenter, SA-Compute-01, and SA-Compue02.

5. Verify that the four virtual machines you just deployed are spread across SA-Compute01 and SA-Compute02.

Two virtual machines should exist on each cluster.

Task 5: Configure Placement Options You configure placement options in vRealize Operations Manager.

1. Return to the vRealize Operations Manager browser tab.

2. Click Home.

3. Expand Optimize Performance in the navigation pane.

4. Click Workload Optimization.

5. Click vRA-CDC-Center.

6. Click EDIT in the Operational Intent pane.

7. Click the lock icon to unlock Workload Optimization.


8. Drag the Workload Optimization slider to the far right for Consolidate.

This action recommends moving machines to a minimum number of hosts to maximize consolidation of resources.

9. Click SAVE.

10. Click YES to confirm the change to the shared policy.

11. Click OPTIMIZE NOW in the Optimization Recommendation pane.

You might need to wait for 10 minutes and do a browser refresh before OPTIMIZE NOW appears as an option.

Wait for the work plan to appear. The Workload optimization could not generate a suitable placement plan due to the following reason(s): The selected container is not stressed. error might appear.

a. Click OK.

b. Wait for 10 minutes.

c. Refresh the browser window.

At least one host should be listed as Not Optimized in the Optimization Recommendation pane.

d. Click OPTIMIZE NOW.

12. After you click OPTIMIZE NOW, wait for the work plan to appear.


13. Click NEXT.

14. Click BEGIN ACTION.

15. Click OK.

Task 6: Verify That vRealize Operations Manager Is Managing Resources You verify that vRealize Operations Manager is managing resources.

1. Return to the vRealize Automation browser tab.


NOTE

Relocations might take place. Or the console might report that some deployments are already migrated.

3. Examine the deployments to see migration requests.

Migration requests appear with a progress bar as deployments are moved.

4. When relocation is complete, double-click the VMW-vROPS deployment.

5. In the Details pane, click History in the left panel.

6. Verify that a relocation was ordered by the vraadmin user.

7. Click Monitor.

8. Select the deployed VMs and examine CPU and Memory usage graphs.

Task 7: Examine Your Consolidation You examine consolidation in the vSphere Client.

1. Return to your vSphere Client browser tab, or open a new tab and use the favorites to navigate to Infrastructure > vSphere Client.


2. If you are logged out, log in with the user name [email protected] and the password VMware1!.

3. Navigate to Hosts and Clusters.

NOTE

You might see a vSphere Health alarm related to the consolidated load. 4. Expand the SA-Compute-01 and SA-Compute-02 clusters.

5. Verify that all of the virtual machines are on one cluster.

For consolidation, virtual machines should be on the smaller cluster (SA-Compute-02) and all of the virtual machines should be on one host (sa-esxi-05.vclass.local).

Task 8: Clean Up Lab Resources You release lab resources for future labs.

1. Return to the vRealize Automation tab.

2. Click Back at the top left of the Deployments Details pane.


3. Select Destroy from the ACTIONS drop-down menu on the right of your recent VMW-vROPS deployment and click SUBMIT.

4. Log out of the VMW-TA01 user account and close the vRealize Automation web console tab.

5. Log out of the [email protected] account and close the vSphere Client web console tab.

6. Log out of the admin account and close the vRealize Operations Manager web console tab.

164 Answer Key

165

Answer Key

Lab 2 Exploring the vRealize Automation Architecture

Task 3: Examine the Components of the IaaS Server ........... 7 1. DEM Orchestrator. 2. DEM Worker. 3. vSphere Proxy Agent.

Lab 3 Creating the FIN Tenant

Task 2: Apply the Custom Tenant Branding to the FIN Tenant ............................................................................................ 11

1. Yes. 2. Yes.

Lab 4 Integrating the FIN Tenant with Active Directory

Task 1: Integrate the FIN Tenant with Active Directory ........ 13 1. 15. 2. Administrator.

Lab 5 Assigning User Roles

Task 3: Assign Architect Roles ............................................ 19 1. Design, Inbox, and Infrastructure tabs. 2. Blueprints. 3. Blueprints and Software Components.

Lab 7 Creating Machine Prefixes and Business Groups

Task 1: Create Machine Prefixes ......................................... 27 1. SL-001.

166 Answer Key

2. BL-10.

Lab 9 Creating a Single Machine Blueprint

Task 1: Create a Single Machine Blueprint .......................... 35 1. Yes.

Task 2: Publish the Single Machine Blueprint ...................... 37 1. Draft. 2. Published.

Lab 10 Using vRealize CloudClient to Export a Blueprint

Task 1: Use vRealize CloudClient to Export a Blueprint ...... 39 1. VMWPhotonOS.

Task 2: Review the Exported YAML File ............................. 40 1. VMWLin. 2. PhotonOS-Template.

Lab 11 Adding Published Items to the Service Catalog

Task 4: Verify Access to Catalog Items ............................... 44 1. Yes. 2. VMW-CentOS-7.5 and VMW-Redhat-7.6.

Lab 12 Deploying and Managing Catalog Items

Task 1: Request a Single Machine Blueprint ....................... 47 1. Yes.

Task 2: Modify Virtual Machine Resource Settings .............. 49 1. 2048 MB.

Task 3: Create and Delete Snapshots ................................. 50 1. Yes. 2. No.

Answer Key 167

Lab 14 Deploying a Blueprint That Uses a Custom Property from the Property Dictionary

Task 3: Test Your Blueprint and Custom Properties ............ 67 1. RD-HostTest.

Lab 17 Deploying a Blueprint That Uses Custom Properties

Task 3: Test Your Blueprint and Custom Properties ............ 79 1. RDLin<xxx>.

Lab 20 Integrating NSX Data Center for vSphere

Task 4: Deploy the Multitier Blueprint and Review Components ...................................................................... 103

1. Yes. 2. Yes.

Lab 21 (Optional) Adding the NAT Network to a Blueprint

Task 4: Deploy the NAT Blueprint ..................................... 108 1. Yes. 2. Yes. 3. Yes.

Lab 25 Creating Approval Policies

Task 4: Process an Approval Policy .................................. 138 1. Yes.

Lab 26 Monitoring Resources

Task 1: Analyze Resource Utilization ................................ 141 1. Answers vary. 2. Answers vary.

Task 2: Analyze IP Resources Allocated in Network Profiles .......................................................................................... 142

168 Answer Key

1. 41. 2. Answers vary, but you might see 38 unallocated.

Task 3: Examine Events and Logs .................................... 142 1. Answers vary. 2. Answers vary.

Lab 27 Reclaiming Resources

Task 3: Examine User Responses to Reclamation Requests .......................................................................................... 148

1. No. The Business group manager or the owner can manually destroy machines. The reclamation process will automatically expire and archive (if configured) and then destroy machines that the tenant administrator requests for reclamation.

Task 4: Modify the Machine Lease Period ......................... 148 1. The Lease Minimum days field on the blueprint was set to 9,999 days. You cannot expire

the lease on any machine deployed with this blueprint until the minimum number of days has passed. However, you can change that number to a much lower number and select Propagate updates to existing deployments. This option allows you to expire the lease.

Date post:	11-Sep-2020
Category:	Documents
Upload:	others
View:	17 times
Download:	3 times

VMware vRealize Automation: Install, Configure,...

Documents