Unable to login to vRO with error Invalid Username or Password (SKKB1037)

In this post we will take a look at what can be the cause of not being able to login to vRO, especially in the embedded vRO in a distributed vRA deployment,  with [invalid username/password] error. Lab Environment Issue Cause Solution Final Step Update Log: Lab Environment The full lab logical design can be seen Read more about Unable to login to vRO with error Invalid Username or Password (SKKB1037)[…]

vRO Architecture Considerations when Digitally Signing Packages (SKKB1036)

In this blog post we will take a look at how Digitally signing packages in VMware realize Orchestrator (vRO) may affect how you deploy vRO in your environment. Lab Environment Introduction Use Case 1 (Single Digital Signature Issuer) Use Case 2 (Multiple Digital Signature Issuers) Final Step Update Log: Lab Environment The full lab logical Read more about vRO Architecture Considerations when Digitally Signing Packages (SKKB1036)[…]

vRO: Securing Your PowerShell Execution and Password in vRO (SKKB1035)

In this blog post we will take a look at how we can secure your end to end PowerShell Execution from vRO. Including how not to show passwords when using CredSSP in a double-hop authentication scenario. Lab Environment Introduction UseCase 1 (least secure) UseCase 2 UseCase 3 (most secure) Securing the PowerShell Passowrd References Final Read more about vRO: Securing Your PowerShell Execution and Password in vRO (SKKB1035)[…]

How to Change the Package Signing Certificate of a vRO Appliance (SKKB1029)

In this post we will take a look how we can change the Package Signing Certificate (PSC) in vRealize Orchestrator (vRO) appliance. Lab Environment Overview Changing the Package Signing Certificate Importing Digitally Signed Packages to a Different Destination vRO Server Backing up your PSC certificate and Private Key Final Step Update Log: 12/02/2016 – Added Read more about How to Change the Package Signing Certificate of a vRO Appliance (SKKB1029)[…]

Troubleshooting Tips: Orchestrator PowerShell Plug-in (SKKB1028)

In this post we will take a look at some at some common issues that one might experience when using the VMware vRealize Orchestrator (vRO) PowerShell Plug-In and especially when using HTTPS protocol or Kerberos authentication for the PowerShell host (PSHost). Introduction Lab Environment Background and General Conciderations Troubleshooting issues when adding a PSHost Troubleshooting Read more about Troubleshooting Tips: Orchestrator PowerShell Plug-in (SKKB1028)[…]

How To Configure HA LDAP Server with the vRO Active Directory Plug-in Using F5 BIG-IP (SKKB1025)

In this post we will demonstrate how to configure a highly available (HA) LDAP server to use with the VMware vRealize Orchestrator Server (vRO) Active Directory Plug-in.We will accomplish this task using F5 BIG-IP. This approach can also be used to achieve LDAP load balancing (LB) not only HA. Lab Environment Introduction Solution Additional Resources Read more about How To Configure HA LDAP Server with the vRO Active Directory Plug-in Using F5 BIG-IP (SKKB1025)[…]

How to Change the SSL Certificate of a vRO Appliance (7.x) (SKKB1021)

In this post we will take a look into the SSL certificate replacement process for vRealize Orchestrator (vRO) 7.x appliance Lab Environment Current VMware Certificate Restrictions Scenario 1: Use vCO Dunes Private Key Generate Certificate Request and Issue Certificate Import the Ccertificate Import a PEM into the vRO SSL store Import a CRT into the Read more about How to Change the SSL Certificate of a vRO Appliance (7.x) (SKKB1021)[…]

vRO and Microsoft Azure integration using PowerShell (SKKB1020)

In this article we will take a look on how to integrate VMware vRealize Orchestrator (vRO) and Microsoft Azure using Microsoft Windows PowerShell. Lab Environment Prerequisites Subscription Authentication Azure PowerShell Module Azure Configuration Initial Microsoft Azure configuration Cloud Services Storage Networks Directory Powershell Host Setup Installing the Azure PowerShell Module Configure the Certificate Authentication Method Read more about vRO and Microsoft Azure integration using PowerShell (SKKB1020)[…]

Wrong encoding or formatting of Linux configuration files can cause problems in VMware Appliances (SKKB1017)

Introduction Lab Environment Use Case: Malformed Krb5.conf file Introduction Correctly encoded and formated file Malformed file Fixing a malformed file vRO (Add A PowerShell Host) Workflow fails with “cannot locate default realm” error Introduction In this blog post we will look into some use cases that can lead to malformed or wrongly encoded files,  which Read more about Wrong encoding or formatting of Linux configuration files can cause problems in VMware Appliances (SKKB1017)[…]

Introducing the Add CredSSP to a PowerShell script (vROCmdlet) workflow (SKKB1015)

Introduction Lab Environment Getting the vROC workflow Examining the tabs Examining the Settings Presentation Tab Examining the Connection Presentation Tab Use Case 1: Execute PowerShell command locally on the PShost against the PSHost itself Use Case 2: Invoke PowerShell command locally on the PSHost against remote computer Use Case 3: Invoke PowerShell command on remote Read more about Introducing the Add CredSSP to a PowerShell script (vROCmdlet) workflow (SKKB1015)[…]

Adding vCO Powershell Host with account other than the default domain administrator account (SKKB1005)

In this post we will take a look how we can we add a vCO powershell host with account other than the default domain administrator account. Also we will take a look how to generally configure which accounts and user groups can remotely execute powershell commands in Windows. This post assumes that you have already Read more about Adding vCO Powershell Host with account other than the default domain administrator account (SKKB1005)[…]

Using CredSSP with the vCO PowerShell Plugin (SKKB1002)

Lab Environment Introduction Security Considerations Configure WinRM and user token delegation (CredSSP). Configure Windows Credential Delegation using the Credential Security Service Provider (CredSSP) module. Configure Windows service principal names (SPN’s) for WinRM Grant WinRM service access to the private key of valid certificate Edit the Kerberos Domain realm on the vCO Appliance (Optional/Scenario specific) Add Read more about Using CredSSP with the vCO PowerShell Plugin (SKKB1002)[…]