Deploying VMware vCloud Director 5.5

VEPSUN EducationServices,SR Arcade, 6th Cross, Tulasi TheaterRoad,Marathahalli,Bangalore.
Email- info@vepsun.com www.vepsun.in
Deploying VMware vCloud Director 5.5
Prerequisites/Tutorial To-Do List
 MicrosoftSQL Server2008 R2
 The SQL Servermustuse MixedMode authentication(cannotuse Windows
Authentication,mustbe aSQL account) We’ll gooverconfiguringthisinthe guide.
 Linux VM
 Must run one of the followingOSes(I’musingCentOS6forthisguide)
 CentOS6 (64-bit) Update 4
 RedHat Enterprise Linux 5(64-bit) Update 4
 Two networkadapters
 At least4 GB of memory
 Hard drive space for the OS andan additional 2GB of diskspace forvmware installation
and logfiles
 WorkingESXi environmentwithvCenterServer
 VMware vCloudNetworkingandSecurity5.5.x
 VMware vCloudDirectorLicense Key

Bestpracticiesarticle canbe found
here:http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&exter
nalId=2059451
Deploy VMware vCloudNetworking andSecurity 5.5.x
VMware vCloud Networking and Security 5.5 (formerlly called vShield). Unlike other VMware
products, this product must be installed as an appliance. VMware provides you an OVA file that
contains the entire virtual appliance, so minimal configuration is needed. Here is a good overview of
the product and how it works: http://vmwarelearning.com/vcloud_net_sec/
Before beginning, here are the following hardware prerequisites. These prerequisites can be found
from the official VMware deployment guide: http://www.vmware.com/pdf/vshield_51_quickstart.pdf
 Memory
 vShield Manager: 8GB allocated, 3GB reserved
 vShield App: 1GB allocated, 1 GB reserved
 vShield Edge compact: 256 MB, large: 1 GB, x-large: 8 GB
 vShield Data Security: 512 MB
 Disk Space
 vShield Manager: 60 GB
 vShield App: 5 GB per vShield App per ESX host
 vShield Edge compact and large: 320 MB, lx-Large: 4.4 GB (with 4 GB swap file)
 vShield Data Security: 6GB per ESX host
 vCPU
 vShield Manager: 2
 vShield App: 2
 vShield Edge compact: 1, large and x-Large: 2
 vShield Data Security: 1

Installing VMware vCloud Networking and Security 5.5 Appliance
1. Download the VMware vCloud Networking and Security 5.5 OVA file from myvmware.com
2. Login to vCenter
3. Select File->Deploy OVF Template…

4. Click Browse…

5. Select the VMware-vShield-Manager-5.5.x-xxxxxxx.ova file you downloaded and click OK

6. Select Next >

7. Select Next >

8. Select Accept and then click Next >

9. Enter a name for the VM and click Next >

10. Select a datastore to place the VM on storage and click Next >

11. Select how you want to provision the VM and click Next >

12. Select the destination network and click Next >

13. Enter in a password for the default admin user and for privileged CLI access and clickNext>

14. Click Finish

15. Power on the VM
16. Open up a console the VM

17. Login to the VM using the username admin and the “user password” you specified in step
13.

18. Type enable and hit enter (use the “privileged user password” you specified in step 13).
19. Type setup and hit enter to launch the network configuration wizard
Enter in the static IP Address you wish to assign to the appliance and hit enter
Enter in the Subnet Mask for your network and hit enter
Enter in the Default gateway for your network and hit enter
Enter in your Primary DNS server’s IP address and hit enter
Enter in your Secondary DNS server’s IP addres and hit enter
Enter in your domain search list (DNS Suffix if you host your own internal DNS) and hit

enter

20. Type y to confirm your changes and hit enter
21. Press control+alt+insert to send the control+alt+delete command to the VM to restart the
guest.

Note: Logging out like the wizard tells you didn’t work for me. Had to do the reboot.

22. Open up your webbrowser and head over to the static IP address you gave your appliance

23. Enter in the username admin and the password default to login
Configuring VMware vCloud Networking and Security 5.5 for vCenter

1. Click on the Edit button next to Lookup Service
2. Check Configure Lookup Service and enter in the information to your vCenter’s Lookup
Service instance:
Lookup Service Host
Lookup Service Port
SSO Administrator Username (should be admin@System-

Domainoradministrator@vsphere.local if you used the default installation options)
SSO Administrator Password.
Click OK once configured.

3. Click Yes to trust the server’s SSL certificate

4. Click Edit next to vCenter Server
5. Enter in your vCenter info and click OK
vCenter Server
Administrator Username

Administrator Password

6. Select Yes to trust the vCenter SSL certificate

7. Check Install this certificate and do not display any security warnings and then click
the Ignore button when prompted

8. Click the Edit button next to NTP Server

9. Specify the IP address of the NTP server you wish to sync to and click OK

10. Click the Change Password link at the top to change the default admin password.
ClickOK when you are done.
At this point, you can begin to install the vShield App, vShield Endpoint, and vShield Data Security
services by selecting one of your hosts and clicking the Install links. However, configuration of
these options is outside the scope of this tutorial.

Note: One thing that I did notice that is different from vShield 5.1 is that once vShield Manager 5.5 is
synchronized with vCenter, the management plugin will automatically be registered to vCenter and
you can access vShield Manager from the vSphere Client.
Linux VMInstallation (CentOS6)

1. Grab a copyof the live CDisoto install the OS
1. http://isoredirect.centos.org/centos/6/isos/x86_64/
2. Nextyourwayto victorythroughthe install,substitutinginyourlocationandserverinfo.
3. Install VMtoolsonce you have yourOS up and running
A quick tutorial on how to get VMware Tools up and running on aCentOS 6 Linux machine.
Although the instructions are shown with the GUI, we’ll use terminal so the guide works with both
gui and non-gui based installs.
1. Mount the VM tools installer to your VM

2. Open up Terminal
3. Execute the following command (this will create a mount point for our CD drive)

1. mkdir /cdrom
4. Execute the following command (this will map the CD drive to our cdrom mount point)

1. mount /dev/cdrom /cdrom
5. Execute the following command to move to your temporary files folder

1. cd /tmp
6. Execute the following command to extract the VMware Tools tarball

1. tar -xvf /cdrom/VMwareTools (tab to autofill the rest of the package)
7. Execute the following command to run the VMware Tools installer

1. ./vmware-tools-distrib/vmware-install.pl

8. Press Enter/Return through each of the questions, using their defaults

9. Verify VMtools is running by looking at the client status in vSphere
4. Configure staticIPsoneach of your networkcards
5. Enable the firewall toallowinboundconnectionsonport443 (HTTPS)

6. Open up terminal if you are on the GUI version of CentOS 6
7. Execute the following command

1. system-config-firewall-tui

8. Use your arrow keys to select Customize and hit enter
9. Use your arrow keys to select which service you would like to allow. Hit the spacebar to
enable or disable the rule and then select Close once you have enabled/disabled the rules
you wish.

1. In this case, I arrowed down to HTTPS and hit the spacebar.

10. Select OK

11. Select Yes
Generate SSL certificates
We will needtogenerate some SSLcertificatesbefore runningthe vCloudDirectorinstallation. Please
followthe stepsbelowtocreate a javakeystore thatvClouddirectorwill use forSSL. Below are two
differentmethodsof generatingcertificates. Use the firstif youdon’twantto signyour certificates,use
the secondif you wantto signyour certificate withaninternal orexternalcertificate authority. Note:
UsuallyI create seperatekeystoreswithforeachservice,inthiscase,VMware wantsbothcertificatesin
the same keystore. Additionally,make sure youchange the defaultpasswordinthe commandsbelowto
somethingstronger(otherVMware productswantyouto use a genericpassword,thisone youcan
change as it will be promptedduringthe installprocess).
CreatingSelf-SignedCertificates

keytool -genkey -keyalgRSA -storetypeJCEKS -aliashttp-keystorecertificates.ks -storepasspasswd-
validity360 -keysize 2048
keytool -genkey -keyalgRSA -storetypeJCEKS -aliasconsoleproxy -keystore certificates.ks -
storepass passwd -validity360 -keysize2048
–Verifybothcertificatesare inthe same keystore–

keytool -list-keystorecertificates.ks -storetypeJCEKS -storepass“passwd”
CreatingSignedCertificate Requests (use this ifyou have an internal PKI,skip this stepif you usedself-
signedcerts above)
–Create the certificate requests–
 HTTP Web CertRequest
 keytool –certreq-keystorecertificates.ks -storetypeJCEKS -storepass passwd-aliashttp-
file http.csr-validity360 -keysize2048
 Console ProxyCertRequest
 keytool -keystorecertificates.ks -storetypeJCEKS -storepass passwd -certreq–alias
consoleproxy -file consoleproxy.csr-validity360 -keysize 2048
–Import CA Chain–
 Root Certificate Authority
 keytool -storetype JCEKS -storepass passwd -keystorecertificates.ks -import–aliasroot-
file root.cer
 IntermediateCertificate Authority(onlyneededif youhave one)
 keytool -storetype JCEKS -storepass passwd -keystorecertificates.ks -import–alias
intermediate -fileintermediate.cer

–Import SignedCert–
 HTTP Web SignedCert
 keytool -storetype JCEKS -storepass passwd -keystorecertificates.ks -import–aliashttp-
file http.cer
 Console ProxySignedCert
 keytool -storetype JCEKS -storepass passwd -keystorecertificates.ks -import–alias
consoleproxy -file consoleproxy.cer
Note:Official VMware KBarticle ongeneratingSSLcertificatesforvCloud
Director:http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&ex
ternalId=1026309
Configure the Microsoft SQL (MSSQL) ServerDatabase
1. Loginto your SQL Server/Cluster

2. Rightclickon your SQL Serverandselect Properties
3. Selectthe Securitypage and ensure SQL Serverand WindowsAuthenticationmode is checked

1. PerVMware’sdocumentation, WindowsAuthenticationisnotsupportedwhenusing
MicrosoftSQL withvCloudDirector.
4. ClickOK
5. Clickon the NewQuery buttonand Execute the followingquery (make sure youchange the
path to the database andlog files).Thiscommandwill create the database instanceandlogfiles,
specifyingthe propercollationsequence:
USE [master]
GO
CREATE DATABASE[vcloud] ON PRIMARY

(NAME= N'vcloud',FILENAME= N'C:vcloud.mdf',SIZE= 100MB, FILEGROWTH = 10% )
LOG ON
(NAME= N'vcdb_log',FILENAME= N'C:vcloud.ldf',SIZE= 1MB, FILEGROWTH = 10%)
COLLATE Latin1_General_CS_AS

GO

6. Use VMware’srecommendedtransactionisolationlevel. Clickthe NewQuerybuttonagainand
thenExecute the followingquery:
USE [vcloud]
GO
ALTER DATABASE[vcloud] SETSINGLE_USER WITH ROLLBACKIMMEDIATE;
ALTER DATABASE[vcloud] SETALLOW_SNAPSHOT_ISOLATION ON;
ALTER DATABASE[vcloud] SETREAD_COMMITTED_SNAPSHOT ON WITH NO_WAIT;
ALTER DATABASE[vcloud] SETMULTI_USER;

7. Next,create the SQL Userto connect tothe database (we will use vcloudasthe username,you
can change thisif youwouldlike). Clickthe NewQuerybuttonagainand thenExecute the
followingquery(amke sure to change the defaultpassword):
USE [vcloud]
GO
CREATE LOGIN [vcloud] WITHPASSWORD= 'vcloudpass', DEFAULT_DATABASE=[vcloud],
DEFAULT_LANGUAGE =[us_english],CHECK_POLICY=OFF
GO
CREATE USER [vcloud] forLOGIN [vcloud]

8. Last, assignthe properpermissionstothe SQL user. We will needthe usertohave db_owner
permissionsforthe install. Clickthe NewQuerybuttonagainand thenExecute the following
query:
USE [vcloud]
GO
sp_addrolemember[db_owner],[vcloud]

The official VMware KBarticle on configuringMSSQLServer(andoracle) can be found
here:http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&exter
nalId=2034540
Install vCloud Director
1. Copythe certificates.kskeystoreovertothe vCloudDirectorVMif you didn’tgenerate themon
it.
1. I placedmyssl certificatesinthe followingdirectory(VMware doesn’trecommenda
location,soI justpickedthisone):/opt/vmware/
2. Downloadacopy of VMware vCloudDirector5.5.Xfrom myvmware.com

3. Openup Terminal
4. Execute the followingcommandtoinstall one of the prerequisitesforthe vclouddirector
installer(CentOSshouldcome preinstalledwiththe others)

1. yum install redhat-lsb

5. Enter y and thenpressentertocontinue the install

6. Enter y and thenpressentertocontinue the install
7. Navigate tothe folderwhere youdownloadedthe vmware-vcloud-directorbinfileandexecute
the followingcommandtoallowthe binfile tobe executed

1. chmodu+x vmware-vcloud-director-5.5(tabtothe endof the file)
8. Execute the followingcommandtobeginthe installation

1. ./vmware-vcloud-director(tabtothe endof the file)

9. Enter y to run the scriptafterthe installerverifiesprerequisites

10. Selectwhichadapteryouwouldlike toassignthe HTTPservice toand pressenter(thiswill be
for the webmanagementinterface)

11. Selectwhichadapteryouwouldlike toassignthe console proxyIPaddresstoandpressenter

12. Enter inthe path to yourcertificates.ksfile andpressenter(inthistutorial,Iused
/opt/vmware/certificates.ksforexample)

13. Enter inthe passwordto the keystore whenpromptedandpressenter

14. If you have a syslogserverenterinthe IPto it, otherwise pressentertoskipit

15. Type 2 to use MicrosoftSQL Serverand pressenter

16. Enter inthe hostname or IPaddressto your MSSQL serverandpressenter

17. Pressentertouse the defaultSQLserverport

18. Enter inthe name of yoursql database (usingthe defaultdatabase name vcloudforthisguide)
and pressenter

19. Pressentertouse the defaultdatabase instance

20. Enter yourdatabase user(vcloudis whatwe have beenusingforthistutorial) andpressenter

21. Enter the passwordtoyour sql userand pressenter

22. Type y and pressenterto start the service

Configuring vCloudDirector
1. Openupyour webbrowserandnavigate overtoyour vCloudinstance
2. Optionally,installthe VMware Remote Console Plug-inif promptedandthenclick Next

1. The VMware Remote Console plug-inisusedtomanage yourVMs throughthe web. It is
not neededduringthe installationprocess.

3. “Read” andcheck Yes,I accept the terms inthe license agreement andclick Next

4. Enter yourvCloudDirectorlicense key (canbe obtainedmymyvmware.com) andclickNext

5. Enter inan administratoraccountusedtomanage vCloudDirectorand thenclick Next

6. Enter a systemname (Iused vCloudDirector) thatgetsaddedto vSphere. Thisiswhere all the
vCloudDirectorVMswill gowhentheyare provisioned. ClickNext

7. ClickFinish
8. LoginusingyourAdministratoraccountonce redirected

9. Clickon Attach a vCenterundernetthprovisionyourCloudresources…

10. Enter inyourvCenterinfoandclick Next

11. Enter inthe username and passwordtoyour vShieldManagerinstance andclick Next

12. Verifyyoursettingsandclick Finish

13. Clickon Step2, Create a ProviderVDC
14. If you have differentresource poolswithdifferentconfigurations,Iwouldcreate asimilarname
for yourvDC. In thisexample,Ionlyhave one resource pool containingall the resourcesinmy

environment,soIam goingto name my vDC (Virtual DataCenter) MyCompany.
Click Nextwhenreadyto proceed.
1. Additionally,youcanselectwhatsupportedhardware versionyouwishtouse. AsI
have no ESX 4.x hosts,I am goingto selectHardware version 9as I have a newer
environment.
2. Note:PerVMware’swebsite,here isthe definitionof aProvidervDC: A ProvidervDCisa
collectionof compute,memory,andstorage resourcesfromone vCenter.A Provider

vDC providesresourcestoorganizationvDCs.

15. Selectaresource pool youwishto deploythe VMsto and click Next

16. If you have a specificdatastore orstorage policyyouwishtouse for thisvDC, selectthe Storage
Policy/Datastore,clickthe Addbutton,and thenclick Next.

17. Enter inthe credentialstoeachof the hoststo deploythe vCloudDirectoragent. Once
completed,click Next.

18. ClickFinishif the providedinformationlookscorrect
19. Now,dependingonyourconfiguration,if youhadotherVMsdeployedtothisresource pool,
youmay receive anerrorstatingthat the machinescannotentermaintennace mode. The
reasonbehindthisisthatDRS is preventingthe hosts fromenteringmaintnenace mode because

DRS cannot move the VMs aroundto achieve HighAvailablity.

1. If you see thisbehavior,youwillhave tomanuallydeploythe vCloudDirectoragentsto
the hosts. To dothis,clickon the Manage & Monitortab inside of vCloudDirector.
2. SelectHosts

3. Rightclickon one of the hostsand select Prepare Host…

4. Enter the username andpasswordtothe host andclick OK
5. Repeatthisprocessforthe otherhosts inyour cluster(youcanselectmultiplehostsat
a time.Nowthat we have at leastone hostavailable,we canfailover afew VMsvia)

20. Clickon the Home tab andthenclickon the Create a new organization link
21. Enter inyourorganizationinformationandclick Next

1. The Organizationname issimplyacode usedto generate ashort url to identifythe
organization. Onlylettersandnumbersare acceptedinthisfield.

22. Optionallyselectwhetheryouwantto use LDAPto provide accessto vCloudDirectorandthen
clickNext.

23. On the AddLocal Users page,clickAddto add virtual vCloudUsers(non-ldap). ClickNextonce
youhave addedthe usersof yourchoice or click Nextif youwant to add userslater.

24. On the Catalogpage,selectwhetherornotyouwant to allow sharing/publishingbetween
organizations. Inthiscase,justclick Next.
(oops,nopicture forthisone )
25. On the Email Preferencespage,click Next

26. Configure the policiestoyourliking. Inthiscase I am goingto leave thingswiththeirdefault
settingsandclick Next
(Oops,nopicture forthisone )
27. ClickFinish

28. Clickon Step6 Allocate resources to an organization

29. Selectthe Organizationyoucreatedandclick Next

30. SelectyourProviderVDCandclickNext

31. Selectthe allocationmodelyouchoose tobestfityourorganization. Inthiscase,I am goingto
use Pay-As-You-Gotoonlyallocate usedresources. ClickNext.

32. Choose youyouwant to configure yourallocationmodel fromthe previousstepandclickNext.

33. Selectthe storage youwantto use,click Add, and thenclick Next

34. ClickNexton the SelectNetworkPool &Servicespage
35. ClickNextif you don’tneedanedge gatewaytoan external network

1. An edge gatewayisneededtoprovide accesstootherinternal andexternal (internet)
networks.

36. Enter a name for the newOrganizationVDCandclick Next

37. ClickFinish

At thispointyoushouldbe able topublishacatalog or create a new VMfrom scratch ina completely
isolatedenvironment. Youcan add an external networkorutilize aVXLAN withadditional
configurationstobegintoconnectyournetworktoan outside world.

Deploying VMware vCloud Director 5.5

Recommended

Recommended

More Related Content

Viewers also liked

Viewers also liked (10)

Similar to Deploying VMware vCloud Director 5.5

Similar to Deploying VMware vCloud Director 5.5 (20)

Recently uploaded

Recently uploaded (20)

Deploying VMware vCloud Director 5.5