VMware vCenter Server
10 important questions on VMware vCenter Server
VCenter Server is a service that acts as a central administration point for ESXi hosts and their virtual machines, connected on a network:
- Up to 1,000 hosts per vCenter Server instance"
- Up to 10,000 powered-on virtual machines per vCenter Server instance"
- "15,000 registered virtual machines"
vCenter Server database:
- security roles
- resource pools
- performance data
- other critical information
Accessing vSphere Web Client
To access virtual machine consoles by using the vSphere Web Client, click the Download the Client Integration Plug-in link at the bottom of the browser access page.
- Higher grades + faster learning
- Never study anything twice
- 100% sure, 100% understanding
VCenter Single Sign-On has the following benefits:
- Faster operations and a less complex authentication process
- Ability of vSphere solutions to trust each other without requiring authentication every time a solution is accessed
- An architecture that supports multi-instance and multisite configurations that provide for single-solution authentication across the entire environment
vCenter Single Sign-On has the following features:
- Support for open standards
- Support for multiple user repositories, including Active Directory and OpenLDAP
- Ability for users to see all vCenter Server instances for which they have permission
- No need to use vCenter Linked Mode for unified views of vCenter Server instances"
vCenter Single Sign-On supports open standard–based protocols such as Security Assertion Markup Language (SAML) 2.0 and WS-Trust 1.4. SAML 2.0 tokens can be used to authenticate a user to a different trust domain, such as a public cloud.
Multiple Single Sign-On Instances in the Same Location
This deployment mode provides high availability for your vCenter Single Sign-On environment.
Use this mode if you do not plan to use VMware vSphere® High Availability or VMware® vCenter Server Heartbeat, but high availability of the vCenter Single Sign-On server is required.
This deployment mode supports the connectivity of Active Directory, OpenLDAP, and vCenter Single Sign-On embedded users and groups. However, it does not support the use of local operating system user accounts.
Installing vCenter Single Sign-On
Using the VMware vCenter Installer:
Use the Simple Install option to deploy basic mode.
Use the Custom Install option to install multisite or high availability mode.
During the custom install, you are prompted to select a deployment mode:
Primary Node
High availability
Multisite
About the vCenter Single Sign-On Administrator
After installation, the domain name vsphere.local is created. The user named administrator is created in the vsphere.local domain.
administrator@vsphere.local has the following privileges:
- Member of the vCenter Single Sign-On group named Administrators
- Is granted the vCenter Server Administrator role
A vCenter Single Sign-On administrator differs from a vCenter Server administrator in the following ways:
- A vCenter Server administrator is not allowed to perform vCenter Single Sign-On configuration tasks.
- You must be a member of the vCenter Single Sign-On Administrators group to configure vCenter Single Sign-On.
Configuring vCenter Single Sign-On Slide 4-60
You configure vCenter Single Sign-On from the vSphere Web Client.
You can perform the following configuration tasks:
- Add identity sources
- Set the default domain
- Edit the password policy
- Edit the lockout policy
- Edit the token policy
You must have vCenter Single Sign-On administrator privileges to perform these tasks.
About vCenter Single Sign-On Policies
The password policy is a set of rules and restrictions on the format and lifespan of vCenter Single Sign-On user passwords.
- The password policy applies only to users in the vCenter Single Sign-On domain, vsphere.local.
The lockout policy specifies the conditions under which a users vCenter Single Sign-On account is locked when the user attempts to log in with incorrect credentials.
The token policy specifies the clock tolerance, renewal count, and other token properties. Edit the token policy if you must conform to your companys security standards.
The question on the page originate from the summary of the following study material:
- A unique study and practice tool
- Never study anything twice again
- Get the grades you hope for
- 100% sure, 100% understanding