VMware vCenter Server

10 important questions on VMware vCenter Server

VCenter Server is a service that acts as a central administration point for ESXi hosts and their virtual machines, connected on a network:


-  Up to 1,000 hosts per vCenter Server instance"
-  Up to 10,000 powered-on virtual machines per vCenter Server instance"
- "15,000 registered virtual machines"


vCenter Server database:

- stores the inventory items
- security roles
- resource pools
- performance data
- other critical information

Accessing vSphere Web Client

https://localhost:9443

To access virtual machine consoles by using the vSphere Web Client, click the Download the Client Integration Plug-in link at the bottom of the browser access page.
  • Higher grades + faster learning
  • Never study anything twice
  • 100% sure, 100% understanding
Discover Study Smart

VCenter Single Sign-On has the following benefits:


- Faster operations and a less complex authentication process  
- Ability of vSphere solutions to trust each other without requiring authentication every time a solution is accessed
- An architecture that supports multi-instance and multisite configurations that provide for single-solution authentication across the entire environment


vCenter Single Sign-On has the following features:


-  Support for open standards
-  Support for multiple user repositories, including Active Directory and OpenLDAP
-  Ability for users to see all vCenter Server instances for which they have permission
-  No need to use vCenter Linked Mode for unified views of vCenter Server instances"


vCenter Single Sign-On supports open standard–based protocols such as Security Assertion Markup Language (SAML) 2.0 and WS-Trust 1.4. SAML 2.0 tokens can be used to authenticate a user to a different trust domain, such as a public cloud.


Multiple Single Sign-On Instances in the Same Location


This deployment mode provides high availability for your vCenter Single Sign-On environment.
Use this mode if you do not plan to use VMware vSphere® High Availability or VMware® vCenter™ Server Heartbeat™, but high availability of the vCenter Single Sign-On server is required.


This deployment mode supports the connectivity of Active Directory, OpenLDAP, and vCenter Single Sign-On embedded users and groups. However, it does not support the use of local operating system user accounts.


Installing vCenter Single Sign-On


Using the VMware vCenter Installer:
  Use the Simple Install option to deploy basic mode.
  Use the Custom Install option to install multisite or high availability mode.

During the custom install, you are prompted to select a deployment mode:
  Primary Node 
  High availability 
  Multisite


About the vCenter Single Sign-On Administrator


After installation, the domain name vsphere.local is created. The user named administrator is created in the vsphere.local domain.

administrator@vsphere.local has the following privileges: 
-  Member of the vCenter Single Sign-On group named Administrators 
- Is granted the vCenter Server Administrator role

A vCenter Single Sign-On administrator differs from a vCenter Server administrator in the following ways:
- A vCenter Server administrator is not allowed to perform vCenter Single Sign-On configuration tasks.
-  You must be a member of the vCenter Single Sign-On Administrators group to configure vCenter Single Sign-On.


Configuring vCenter Single Sign-On Slide 4-60


You configure vCenter Single Sign-On from the vSphere Web Client.
You can perform the following configuration tasks:
- Add identity sources 
- Set the default domain 
- Edit the password policy 
- Edit the lockout policy 
- Edit the token policy

You must have vCenter Single Sign-On administrator privileges to perform these tasks.


About vCenter Single Sign-On Policies


The password policy is a set of rules and restrictions on the format and lifespan of vCenter Single Sign-On user passwords.
-  The password policy applies only to users in the vCenter Single Sign-On domain, vsphere.local.

The lockout policy specifies the conditions under which a user’s vCenter Single Sign-On account is locked when the user attempts to log in with incorrect credentials.

The token policy specifies the clock tolerance, renewal count, and other token properties. Edit the token policy if you must conform to your company’s security standards.

The question on the page originate from the summary of the following study material:

  • A unique study and practice tool
  • Never study anything twice again
  • Get the grades you hope for
  • 100% sure, 100% understanding
Remember faster, study better. Scientifically proven.
Trustpilot Logo