HOWTO: Install the VMware vRealize Automation 6.x IaaS Prerequisites

Published on 11 January 2017 by Christopher Lewis. Words: 1209. Reading Time: 6 mins.

Introduction

This post is a part of a series of posts for preparation for the VCAP6-CMA Deploy exam. For the full exam prep resources check here .

Prerequisites

• Deploy a Windows Virtual Machine to be used as a IaaS Server.
• Download Oracle JAVA JRE (supported version)

Configuration Overview

The high level configuration steps for this server are:

1. Configure the vRealize Automation Service Account permissions
2. Install Microsoft IIS
3. Configure Microsoft IIS
4. Configure Loopback Check Registry Setting (for Distributed only)
5. Configure Secondary Logon Service
6. Configure User Rights Assignment
7. Configure MS DTC
8. Configure the Windows Firewall
9. Install and Configure Oracle JRE
10. Install the IaaS SSL Certificate
11. Reboot the IaaS Server

Step by Step Instructions

Configure the vRealize Automation Service Account permissions

1. Connect to the server either via VMware Remote Control or via Microsoft Remote Desktop Services using an account with administrative privileges.
2. Click Start and then click Administrative Tools.
3. Double click Computer Management.

4. Click on Local Users and Groups.

5. Double click on Groups.

6. Double click on Administrators.

7. Click Add.

8. Type in the VRA Service account name, click Check Names and then click OK.

9. Click Apply and then click OK.
10. Log out of the Administrator account and log back in with the vRealize Automation Service Account.

Install Microsoft Internet Information Services (IIS)

1. Open Server Manager, click Manage and then click Add Roles and Features.

2. Click Next.

3. Click Next.

4. Click Next.

5. Check the Web Server (IIS) role.

6. Click Add Features.

7. Click Next.

8. Expand .NET Framework 3.5 Features and check both the NET Framework 3.5 (includes .NET 2.0 and 3.0) checkbox and Non-HTTP Activation checkbox.

9. Click Add Features.

10. Expand .NET Framework 4.5 Features and ensure the ASP.NET 4.5 checkbox is checked.

11. Expand the WCF Services feature and check the HTTP Activation checkbox.

12. Click Add Features

13. Click Next.

14. Click Next.

15. Check the following additional Role Services check boxes:

• Web Server > Common HTTP Features > HTTP Redirection
• Security > Windows Authentication
• Application Development > .NET Extensibility 3.5
• Application Development > ASP.NET 3.5
• Management Tools > IIS 6 Management Compatibility > IIS 6 Metabase Compatibility

16. Click Next.

17. Click Install.

Configure Microsoft IIS

1. Navigate to Start > Administrative Tools > Internet Information Services (IIS) Manager.

2. Expand <HOSTNAME>, then Sites and select the Default Web Site.

3. Under Connections ensure that the Default Web Site is selected and then double click on Authentication.

4. Under Authentication highlight Anonymous Authentication and click Disable from the Actions menu.

5. Under Authentication highlight Windows Authentication and click Enable from the Actions menu.

6. Under Authentication highlight Windows Authentication and click Providers from the Actions menu.

7. Highlight each provider in turn and click Remove.

8. Click OK.

9. Under Authentication highlight Windows Authentication and click Providers from the Actions menu.

10. From the Available Providers dropdown, select Negotiate and click Add.
11. From the Available Providers dropdown, select NTLM and click Add.

12. Click OK.

13. Under Authentication highlight Windows Authentication and click Advanced Settings from the Actions menu.

14. Select Accept from the Extended Protection dropdown, uncheck the Enable Kernel-mode authentication checkbox and then click OK.
15. Under Authentication highlight Windows Authentication and click Advanced Settings from the Actions menu.

16. Select Off from the Extended Protection dropdown, check the Enable Kernel-mode authentication checkbox and then click OK.
17. At the Internet Infomation Services (IIS) Manager, right-click on the Default Web Site and select Manage Website > Restart.

Configure LoopbackCheck Registry Setting(s)

1. Right-click on Start and select Run.
2. Type into the Open text field regedt32 and click OK.

3. Navigate to the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\ registry key.

4. Right-click on LSA and create a new DWORD named DisableLoopbackCheck.

5. Right-click on the DisableLoopbackCheck key, select Modify and set the value to 1.

6. Navigate to the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters registry key.

7. Right-click on Parameters and select New > DWORD (32-bit) Value called DisableStrictNameChecking.

8. Right-click on the new DisableStrictNameChecking, select Modify and set a value of 1.

9. Close the Registry Editor.

Configure Secondary Logon Service

1. Navigate to Start > Administrative Tools > Services

2. Locate the Secondary Logon Service, right-click and select Properties.

3. Select Automatic from the Startup Type: dropdown and click Apply.

4. Click Start and then click OK.

Configure User Rights Assignment

1. Navigate to Start > Administrative Tools > Local Security Policy.

2. Expand Local Policies > User Rights Assignment.
3. Add the vRealize Automation Service to the following User Rights Assignments:

• Logon as a batch job
• Logon as a service

4. Close the Local Security Policy application.

Configure Microsoft Distributed Transaction Coordinator

Microsoft Distributed Transaction Coordinator (MSTDC) is a critical component for the VMware vRealize Automation IaaS components, including the SQL Server and should be configured identically on each of the IaaS Server in the following way:

1. Navigate to Start > Administrative Tools.

2. Double click on Component Services.

3. Expand Component Services > Computers > My Computer > Distributed Transaction Coordinator.

4. Right-click Local DTS and select Properties.

5. Click the Security

6. Make the following changes on the Security Tab:

• Under Security Settings, check the Network DTC Access checkbox
• Under Client and Administration, check the Allow Remote Clients
• Under Transaction Manager Communication, check the Allow Inbound
• Under Transaction Manager Communication, check the Allow Outbound

1. Click OK.

8. Click Yes.

9. Click OK.

Configure the Windows Firewall

1. Navigate to Start > Control Panel
2. Click System and Security.

3. Under Windows Firewall, Click Allow an app through Windows firewall.

4. Click Change Settings

5. Check the Domain check box for the Distributed Transaction Coordinator app.

6. Click OK.

Install and Configure Oracle JRE

For this I have downloaded the latest version of Oracle JAVA 1.8 (jre-8uXX-windows-x64.exe).

1. Double-click on the jre-8uXX-windows-x64.exe.

2. If prompted with the User Access Control dialog, click Yes.

3. Click Install.

4. Click Close.
5. Navigate to Start, then right click on This PC and select Properties from the context menu.
6. At the System screen, click Advanced system settings.
7. At the System Properties dialog, click Environment Variables…

8. At the Environment Variables dialog, under System variables click New…

9. At the New System Variable dialog, type the following into the text fields:

• Variable name: is JAVA_HOME
• Variable value: is D:\Program Files\Java\jre1.8.0_XX

10. Click OK.

11. Click OK.

Install the IaaS SSL Certificate

1. Navigate to Start > Administrative Tools > Internet Information Services (IIS) Manager.

2. Select <HOSTNAME> and double click on Server Certificates.

3. Click Import from the Actions Menu.

4. Enter the location of the pfx version of the SSL certificate for this server into the Certificate file (.pfx) text box (you can click … and search for it), type the export password into the Password textbox.

5. Click OK.

Published on 11 January 2017 by Christopher Lewis. Words: 1209. Reading Time: 6 mins.

Share this article on: