Migrating vrealize Automation to 7.3 or March 2018 vrealize Automation 7.3

Transcription

1 Migrting vrelize Automtion to 7.3 or Mrch 2018 vrelize Automtion 7.3

2 You cn find the most up-to-dte technicl documenttion on the VMwre website t: If you hve comments bout this documenttion, submit your feedbck to VMwre, Inc Hillview Ave. Plo Alto, CA Copyright VMwre, Inc. All rights reserved. Copyright nd trdemrk informtion. VMwre, Inc. 2

3 Contents Updted Informtion 5 1 Migrting vrelize Automtion 7 2 Migrtion 9 for Migrtion to Miniml Environment 9 for Migrtion to High-Avilbility Environment 10 3 Pre-Migrtion Tsks 13 Review Chnges Introduced by Migrtion from vrelize Automtion 6.2.x to 7.x 13 Set the vrelize Automtion PostgreSQL Repliction Mode to Asynchronous 14 Chnge DoDeletes Setting on the vsphere Agent to Flse 15 Prepre vrelize Automtion Virtul Mchines for Migrtion 15 Gther Informtion Required for Migrtion 15 Obtin the Encryption Key from the Source vrelize Automtion Environment 17 List Tennt nd IS Administrtors from the Source vrelize Automtion 6.2.x Environment 18 Add Ech Tennt from the Source vrelize Automtion Environment to the Trget Environment 18 Crete n Administrtor for Ech Added Tennt 20 Synchronize Users nd Groups for n Active Directory Link Before Migrtion to Miniml Environment 21 Synchronize Users nd Groups for n Active Directory Link Before Migrtion to High-Avilbility Environment 22 Run NSX Network nd Security Inventory Dt Collection in the Source vrelize Automtion Environment 24 Mnully Clone the Source vrelize Automtion IS Microsoft SQL Dtbse 25 Snpshot the Trget vrelize Automtion Environment 25 4 Migrtion s 27 Migrte vrelize Automtion Source Dt to vrelize Automtion 7.3 Miniml Environment 27 Migrte vrelize Automtion Source Dt to vrelize Automtion 7.3 High-Avilbility Environment 29 5 Post-Migrtion Tsks 32 Add Tennt nd IS Administrtors from the Source vrelize Automtion 6.2.x Environment 33 Set the vrelize Automtion PostgreSQL Repliction Mode to Synchronous 33 Run Test Connection nd Verify Migrted Endpoints 34 Run NSX Network nd Security Inventory Dt Collection in Your Trget vrelize Automtion 7.3 Environment 35 VMwre, Inc. 3

4 Reconfigure Lod Blncers After Migrtion to High-Avilbility Environment 35 Migrting n Externl vrelize Orchestrtor Server to vrelize Automtion Control Center Differences Between Externl nd Embedded Orchestrtor 36 Migrte n Externl vrelize Orchestrtor 6.x on Windows to vrelize Automtion Migrte n Externl vrelize Orchestrtor 6.x Virtul Applince to vrelize Automtion Migrte n Externl vrelize Orchestrtor 7.x to vrelize Automtion Configure the Built-In vrelize Orchestrtor Server 45 Migrte the Embedded vrelize Orchestrtor Server from vrelize Automtion 7.x to Temporrily Chnge the Configurtion of the Source vrelize Automtion Applince 48 Export the Configurtion from the Embedded vrelize Orchestrtor on the Source vrelize Automtion Applince 49 Import the Configurtion nd Dtbse of the Embedded Source vrelize Orchestrtor to the Embedded Trget vrelize Orchestrtor 50 Reconfigure the Trget Embedded vrelize Orchestrtor to Support High Avilbility 52 Restore the Configurtion of the Source vrelize Automtion Applince 52 Reconfigure the vrelize Automtion Endpoint in the Trget vrelize Orchestrtor 53 Reconfigure the vrelize Automtion Infrstructure Endpoint in the Trget vrelize Orchestrtor 54 Instll vrelize Orchestrtor Customiztion 55 Reconfigure Embedded vrelize Orchestrtor Infrstructure Endpoint in the Trget vrelize Automtion 55 Reconfigure the Azure Endpoint in the Trget vrelize Automtion Environment 56 Migrte vrelize Automtion 6.2.x Automtion Appliction Services to Updte Softwre Agent on Existing Virtul Mchines 57 Delete Originl Trget vrelize Automtion IS Microsoft SQL Dtbse 59 Updte Dt Center Loction Menu Contents After Migrtion 59 Vlidte the Trget vrelize Automtion 7.3 Environment 59 6 Troubleshooting Migrtion 61 PostgreSQL Version Cuses Error 61 Some Virtul Mchines Do Not Hve Deployment Creted during Migrtion 61 Lod Blncer Configurtion Cuses Timeout for Long-Running Opertions 62 Migrtion Log Loctions 62 Ctlog Items Apper in the Service Ctlog After Migrtion But Are Not Avilble to Request 63 Empty Deployments Are Seen in vrelize Automtion After Migrtion 64 XS Resource Mpping Nmed Deployment Is Missing After Migrtion 64 VMwre, Inc. 4

5 Updted Informtion This Migrting vrelize Automtion to 7.3 is updted with ech relese of the product or when necessry. This tble provides the updte history of the Migrting vrelize Automtion to 7.3 documenttion. Revision Description 18 JAN 2018 Revised XS Resource Mpping Nmed Deployment Is Missing After Migrtion. Added Chnge DoDeletes Setting on the vsphere Agent to Flse. Revised Migrte the Embedded vrelize Orchestrtor Server from vrelize Automtion 7.x to 7.3. Revised Temporrily Chnge the Configurtion of the Source vrelize Automtion Applince. Revised Export the Configurtion from the Embedded vrelize Orchestrtor on the Source vrelize Automtion Applince. Revised Import the Configurtion nd Dtbse of the Embedded Source vrelize Orchestrtor to the Embedded Trget vrelize Orchestrtor. Revised Reconfigure the Trget Embedded vrelize Orchestrtor to Support High Avilbility. Revised Restore the Configurtion of the Source vrelize Automtion Applince. 04 DEC 2017 Revised Synchronize Users nd Groups for n Active Directory Link Before Migrtion to Miniml Environment Revised Synchronize Users nd Groups for n Active Directory Link Before Migrtion to High-Avilbility Environment Added Empty Deployments Are Seen in vrelize Automtion After Migrtion. Revised Chpter 1 Migrting vrelize Automtion. Revised for Migrtion to Miniml Environment. Revised for Migrtion to High-Avilbility Environment. Added Review Chnges Introduced by Migrtion from vrelize Automtion 6.2.x to 7.x. Revised Prepre vrelize Automtion Virtul Mchines for Migrtion. Revised Gther Informtion Required for Migrtion. Revised Synchronize Users nd Groups for n Active Directory Link Before Migrtion to Miniml Environment. Revised Synchronize Users nd Groups for n Active Directory Link Before Migrtion to High-Avilbility Environment. Revised Migrte vrelize Automtion Source Dt to vrelize Automtion 7.3 Miniml Environment. Revised Migrte vrelize Automtion Source Dt to vrelize Automtion 7.3 High-Avilbility Environment. Revised Add Tennt nd IS Administrtors from the Source vrelize Automtion 6.2.x Environment. Added Empty Deployments Are Seen in vrelize Automtion After Migrtion. Added XS Resource Mpping Nmed Deployment Is Missing After Migrtion. 12 SEP 2017 Revised: for Migrtion to High-Avilbility Environment. VMwre, Inc. 5

6 Revision Description 30 AUG 2017 Revised Chpter 1 Migrting vrelize Automtion. Revised Run NSX Network nd Security Inventory Dt Collection in the Source vrelize Automtion Environment. Revised Run NSX Network nd Security Inventory Dt Collection in Your Trget vrelize Automtion 7.3 Environment Revised Migrte n Externl vrelize Orchestrtor 6.x on Windows to vrelize Automtion 7.3. Added Ctlog Items Apper in the Service Ctlog After Migrtion But Are Not Avilble to Request 07 AUG 2017 Added Prepre vrelize Automtion Virtul Mchines for Migrtion Mde minor editoril updtes. Chnged title nd dded informtion to Run Test Connection nd Verify Migrted Endpoints. Added vrelize Orchestrtor migrtion topics. Migrting n Externl vrelize Orchestrtor Server to vrelize Automtion 7.3 Migrte n Externl vrelize Orchestrtor 6.x on Windows to vrelize Automtion 7.3 Migrte n Externl vrelize Orchestrtor 6.x Virtul Applince to vrelize Automtion 7.3 Migrte n Externl vrelize Orchestrtor 7.x to vrelize Automtion 7.3 Configure the Built-In vrelize Orchestrtor Server Control Center Differences Between Externl nd Embedded Orchestrtor Initil relese. VMwre, Inc. 6

7 Migrting vrelize Automtion 1 You cn perform side-by-side upgrde of your current vrelize Automtion environment using migrtion. Migrtion moves ll dt, except for tennts nd identity stores, from your current vrelize Automtion source environment to trget deployment of the ltest version of vrelize Automtion. Migrtion does not chnge your source environment except to stop vrelize Automtion services for the time required to collect nd copy the dt sfely to your trget environment. Depending on the size of the source vrelize Automtion dtbse, migrtion cn tke from few minutes to hours. You cn migrte your source environment to miniml deployment or high-vilbility deployment. If you pln to put your trget environment into production fter migrtion, do not put your source environment bck into service. Chnges to your source environment fter migrtion re not synchronized with your trget environment. If your source environment is integrted with vcloud Air or vcloud Director or hs physicl endpoints, you must use migrtion to perform n upgrde. Migrtion removes these endpoints nd everything ssocited with them from the trget environment. Migrtion lso removes 6.x VMwre vrelize Appliction Services integrtion from the trget environment. Note You must complete dditionl tsks to prepre your vrelize Automtion virtul mchines before you migrte. Before you migrte, review Knowledge Bse rticle If you migrte from vrelize Automtion 6.2.x to the ltest version, you might experience these issues. VMwre, Inc. 7

8 Issue After you migrte from vrelize Automtion 6.2.x to the ltest version, ctlog items tht use these property definitions pper in the service ctlog but re not vilble to request. Control types: Check box or link. Attributes: Reltionship, regulr expressions, or property lyouts. In vrelize Automtion 7.x, the property definitions no longer use these elements. Regulr expressions used to define prent child reltionships in drop-down list in vrelize Automtion 6.2.x no longer function fter migrtion. For exmple, if you define one or more resources tht re vilble only in certin context, the resources do not pper s menu items fter migrtion. Resolution You must recrete the property definition or configure the property definition to use vrelize Orchestrtor script ction rther thn the embedded control types or ttributes. For more informtion, see Ctlog Items Apper in the Service Ctlog After Migrtion But Are Not Avilble to Request. You must recrete the property definition to restore the dropdown menu items fter migrtion. VMwre, Inc. 8

9 Migrtion 2 The migrtion prerequisites differ depending on your trget environment. You cn migrte to miniml environment or to high-vilbility environment. This chpter includes the following topics: for Migrtion to Miniml Environment for Migrtion to High-Avilbility Environment for Migrtion to Miniml Environment Ensure successful migrtion to miniml environment by reviewing these prerequisites. Verify tht you hve new trget environment of vrelize Automtion. Instll relevnt proxy gents on the trget environment ccording to these requirements. Trget proxy gent nme must mtch the source proxy gent nme for vsphere, Hyper-V, Citrix XenServer, nd Test proxy gents. Note Finish these steps to obtin n gent nme. 1 Go to the gent instlltion directory on the IS node. 2 Open the VRMAgent.exe.config file. 3 Under the serviceconfigurtion tg, look for the vlue of the gentnme ttribute. Trget proxy gent endpoint nme must mtch the source proxy gent endpoint nme for vsphere, Hyper-V, Citrix XenServer, nd Test proxy gents. Do not crete n endpoint for vsphere, Hyper-V, Citrix XenServer, or Test proxy gents on the trget environment. Review the version numbers of vrelize Automtion components. b In your trget vrelize Automtion 7.3 environment, strt browser. Go to the vrelize Automtion pplince mngement console t Log in with the user nme root nd the pssword you entered when you deployed the pplince. VMwre, Inc. 9

10 c d Select vra Settings > Cluster. Expnd the Host / Node Nme records by clicking the tringle. Verify tht the version numbers of the vrelize Automtion IS components mtch. You must review Knowledge Bse rticle nd perform ny relevnt fixes to your environments prior to migrtion. Verify tht the trget Microsoft SQL Server version for the vrelize Automtion trget IS dtbse is 2012, 2014, or Verify tht port 22 is open between the source nd trget vrelize Automtion environments. Port 22 is required to estblish Secure Shell (SSH) connections between source nd trget virtul pplinces. Verify tht the IS server node in the trget environment hs t lest Jv SE Runtime Environment (JRE) 8, updte 111 (64 bit) instlled. After you instll the JRE, mke sure the JAVA_HOME system vrible points to the Jv version you instlled on ech IS node. Revise the pth if necessry. Verify tht ech IS node hs PowerShell 3.0 or lter instlled. Verify tht the source nd trget vrelize Automtion environments re running. Verify tht no user nd provisioning ctivities re hppening on the source vrelize Automtion environment. Security softwre must not interct with the operting system nd its components running on IS nodes in the trget vrelize Automtion environment during migrtion. If you hve ny ntivirus or security softwre instlled, verify tht the softwre is correctly configured or disbled for migrtion. Wht to do next Chpter 3 Pre-Migrtion Tsks. for Migrtion to High-Avilbility Environment Ensure successful migrtion to high-vilbility environment by reviewing these prerequisites. Verify tht you hve new trget instlltion of vrelize Automtion with mster nd replic virtul pplince configured for high vilbility. See vrelize Automtion High Avilbility Configurtion Considertions in Reference Architecture. Verify tht ll vrelize Automtion virtul pplinces use the sme pssword for root user. VMwre, Inc. 10

11 Instll relevnt proxy gents on the trget environment ccording to these requirements. Trget proxy gent nme must mtch the source proxy gent nme for vsphere, Hyper-V, Citrix XenServer, nd Test proxy gents. Note Finish these steps to obtin n gent nme. 1 Go to the gent instlltion directory on the IS node. 2 Open the VRMAgent.exe.config file. 3 Under the serviceconfigurtion tg, look for the vlue of the gentnme ttribute. Trget proxy gent endpoint nme must mtch the source proxy gent endpoint nme for vsphere, Hyper-V, Citrix XenServer, nd Test proxy gents. Do not crete n endpoint for vsphere, Hyper-V, Citrix XenServer, or Test proxy gents on the trget environment. Check the version numbers of vrelize Automtion components. b c d In your trget vrelize Automtion 7.3 environment, strt browser nd go to the vrelize Automtion pplince mngement console t Log in with the user nme root nd the pssword you entered when you deployed the pplince. Select vra Settings > Cluster. To expnd the Host / Node Nme records so you cn see the components, click the expnd button. Verify tht the version numbers of vrelize Automtion components mtch cross ll virtul pplince nodes. Verify tht the version numbers of vrelize Automtion IS components mtch cross ll IS nodes. e You must review Knowledge Bse rticle nd perform ny relevnt fixes to your environments prior to migrtion. Perform these steps to direct trffic to only the mster node. b Disble ll the redundnt nodes. Remove the helth monitors for these items ccording to your lod blncer documenttion: vrelize Automtion virtul pplince IS Website IS Mnger Service Verify tht the vrelize Automtion pplince mster node connects to the PostgreSQL dtbse in MASTER mode. In your trget vrelize Automtion 7.3 environment, strt browser nd go to the mster vrelize Automtion pplince mngement console t VMwre, Inc. 11

12 b c d Log in with the user nme root nd the pssword you entered when you deployed the pplince. Select vra Settings > Dtbse. Verify tht the dtbse node host mode is MASTER. Verify tht the trget Microsoft SQL Server version for the vrelize Automtion trget IS dtbse is 2012, 2014, or Verify tht port 22 is open between the source nd trget vrelize Automtion environments. Port 22 is required to estblish Secure Shell (SSH) connections between source nd trget virtul pplinces. Verify tht the IS Web Service nd Model Mnger Server nodes in the trget environment hve the right Jv Runtime Environment. You must hve Jv SE Runtime Environment (JRE) 8, updte 111 (64 bit) or lter instlled. Mke sure the JAVA_HOME system vrible points to the Jv version you instlled on ech IS node. Revise the pth if necessry. Verify tht ech IS node hs t lest PowerShell 3.0 or lter instlled. Verify tht the source nd trget vrelize Automtion environments re running. Verify tht no user nd provisioning ctivities re hppening on the source vrelize Automtion environment. Verify tht ny ntivirus or security softwre tht might interct with the operting system nd its components running on IS nodes in the trget vrelize Automtion environment is correctly configured or disbled. Security softwre must not interct with the operting system nd its components running on IS nodes in the trget vrelize Automtion environment during migrtion. If you hve ny ntivirus or security softwre instlled, verify tht it is correctly configured or disbled for migrtion. Wht to do next Chpter 3 Pre-Migrtion Tsks. VMwre, Inc. 12

13 Pre-Migrtion Tsks 3 Before you migrte, you must perform severl pre-migrtion tsks. The pre-migrtion tsks you perform before you migrte your source vrelize Automtion environment to the trget vrelize Automtion 7.3 environment vry depending on your source environment. This chpter includes the following topics: Review Chnges Introduced by Migrtion from vrelize Automtion 6.2.x to 7.x Set the vrelize Automtion PostgreSQL Repliction Mode to Asynchronous Chnge DoDeletes Setting on the vsphere Agent to Flse Prepre vrelize Automtion Virtul Mchines for Migrtion Gther Informtion Required for Migrtion Obtin the Encryption Key from the Source vrelize Automtion Environment List Tennt nd IS Administrtors from the Source vrelize Automtion 6.2.x Environment Add Ech Tennt from the Source vrelize Automtion Environment to the Trget Environment Crete n Administrtor for Ech Added Tennt Synchronize Users nd Groups for n Active Directory Link Before Migrtion to Miniml Environment Synchronize Users nd Groups for n Active Directory Link Before Migrtion to High-Avilbility Environment Run NSX Network nd Security Inventory Dt Collection in the Source vrelize Automtion Environment Mnully Clone the Source vrelize Automtion IS Microsoft SQL Dtbse Snpshot the Trget vrelize Automtion Environment Review Chnges Introduced by Migrtion from vrelize Automtion 6.2.x to 7.x vrelize Automtion 7 nd lter introduces vrious functionl chnges during nd fter the upgrde process. Review these chnges before you upgrde your vrelize Automtion 6.2.x deployment to the ltest version. VMwre, Inc. 13

14 For informtion bout the differences between vrelize Automtion 6.2.x nd 7.x, see Considertions About Upgrding to This vrelize Automtion Version in Upgrding vrelize Automtion to 7.4. Note The vrelize Production Test Upgrde Assist Tool nlyzes your vrelize Automtion 6.2.x environment for ny feture configurtion tht cn cuse upgrde issues nd checks tht your environment is redy for upgrde. To downlod this tool nd relted documenttion, go to the VMwre vrelize Production Test Tool downlod product pge. After you migrte from vrelize Automtion 6.2.x to the ltest version, ctlog items tht use these property definitions pper in the service ctlog but re not vilble to request. Control types: Check box or link. Attributes: Reltionship, regulr expressions, or property lyouts. In vrelize Automtion 7.x, the property definitions no longer use these elements. You must recrete the property definition or configure the property definition to use vrelize Orchestrtor script ction rther thn the embedded control types or ttributes. For more informtion, see Ctlog Items Apper in the Service Ctlog After Migrtion But Are Not Avilble to Request. Set the vrelize Automtion PostgreSQL Repliction Mode to Asynchronous If you migrte from distributed vrelize Automtion 7.3 environment tht opertes in PostgreSQL synchronous repliction mode, you must chnge repliction mode to synchronous on both the source nd trget environments before you migrte. If you migrte from distributed vrelize Automtion environment erlier thn 7.3, you must chnge PostgreSQL repliction mode to synchronous on the trget environment before you migrte. You hve distributed vrelize Automtion 7.3 environment tht you wnt to migrte or you hve distributed vrelize Automtion environment erlier thn 7.3 tht you wnt to migrte. You re logged in s root on the pproprite vrelize Automtion Applince Mngement t 1 Click vra Settings > Dtbse. 2 Click Async Mode nd wit until the ction completes. 3 Verify tht ll nodes in the Sync Stte column disply Async sttus. Wht to do next Chnge DoDeletes Setting on the vsphere Agent to Flse VMwre, Inc. 14

15 Chnge DoDeletes Setting on the vsphere Agent to Flse If you migrte from vrelize Automtion environment, you must chnge the DoDeletes setting on your trget vsphere gent before migrtion. This prevents virtul mchines from your source environment being deleted fter migrtion. Follow the steps in the Configure the vsphere Agent procedure in Instlling vrelize Automtion to set DoDeletes to flse. You hve completed the prerequisites for migrtion. Wht to do next Prepre vrelize Automtion Virtul Mchines for Migrtion. Prepre vrelize Automtion Virtul Mchines for Migrtion Known issues with migrting vrelize Automtion 6.2.x virtul mchines cn cuse problems fter migrtion. You must review Knowledge Bse rticle nd perform ny relevnt fixes to your environments prior to migrtion. Wht to do next Gther Informtion Required for Migrtion. Gther Informtion Required for Migrtion Use these tbles to record the informtion tht you need for migrtion from your source nd trget environments. Finish verifying the prerequisites for your sitution. for Migrtion to Miniml Environment. for Migrtion to High-Avilbility Environment. Note You must review Knowledge Bse rticle nd perform ny relevnt fixes to your environments prior to migrtion. VMwre, Inc. 15

16 Tble 3 1. Source vrelize Automtion Applince Option Description Vlue Host nme Root usernme Root pssword Log in to your source vrelize Automtion pplince mngement console. Find the host nme on the System tb. The host nme must be fully qulified domin nme (FQDN). root The root pssword tht you entered when you deployed your source vrelize Automtion pplince. Tble 3 2. Trget vrelize Automtion Applince Option Description Vlue Root usernme Root pssword Defult tennt Administrtor usernme Administrtor pssword root The root pssword tht you entered when you deployed your trget vrelize Automtion pplince. The defult tennt you creted when you configured single sign-on in the vrelize Automtion Instlltion wizrd, usully vsphere.locl. Defult tennt dministrtor user nme tht you entered when you deployed the trget vrelize Automtion environment, usully dministrtor. Pssword for the defult tennt dministrtor user tht you entered when you deployed the trget vrelize Automtion environment. Tble 3 3. Trget IS Dtbse Option Description Vlue Dtbse server The loction of the Microsoft SQL Server where the restored vrelize Automtion IS Microsoft SQL dtbse resides. If nmed instnce nd non-defult port is used, enter in SERVER,PORT\INSTANCE- NAME formt. Cloned dtbse nme Nme of the source vrelize Automtion 6.2.x or 7.x IS Microsoft SQL dtbse tht you bcked up on the source nd restored on the trget environment. Login nme Pssword Login nme of user with db_owner role for the cloned IS Microsoft SQL dtbse in the trget environment. For Windows Authentiction, the Windows ccount for the vcloud Automtion Center Mngement Agent service must be db_owner for the cloned IS SQL dtbse. Pssword for the SQL Server user who hs the db_owner role for the cloned IS Microsoft SQL dtbse. VMwre, Inc. 16

17 Tble 3 3. Trget IS Dtbse (Continued) Option Description Vlue Originl encryption key New pssphrse Originl encryption key tht you retrieve from the source environment. See Obtin the Encryption Key from the Source vrelize Automtion Environment. A series of words used to generte new encryption key. You use this pssphrse ech time you instll new IS component in the trget vrelize Automtion environment. Wht to do next Obtin the Encryption Key from the Source vrelize Automtion Environment. Obtin the Encryption Key from the Source vrelize Automtion Environment You must enter the encryption key from the source vrelize Automtion environment s prt of the migrtion procedure. Verify tht you hve dministrtor privileges on the ctive Mnger Service host virtul mchine in your source environment. 1 Open commnd prompt s n dministrtor on the virtul mchine tht hosts the ctive Mnger Service in your source environment nd run this commnd. "C:\Progrm Files (x86)\vmwre\vcac\server\configtool\encryptionkeytool\dynmicops.tools.encryption KeyTool.exe" key-red -c "C:\Progrm Files (x86)\vmwre\vcac\server\mngerservice.exe.config" -v If your instlltion directory is not in the defult loction, C:\Progrm Files (x86)\vmwre\vcac, edit the pth to show your ctul instlltion directory. 2 Sve the key tht ppers fter you run the commnd. The key is long string of chrcters tht looks similr to this exmple: NRH+f/BlnCB6yvsLS3sxespgdkcFWAEuyV0g4lfryg=. Wht to do next If you re migrting from vrelize Automtion 6.2.x environment: Add Ech Tennt from the Source vrelize Automtion Environment to the Trget Environment. If you re migrting from vrelize Automtion 7.x environment: List Tennt nd IS Administrtors from the Source vrelize Automtion 6.2.x Environment. VMwre, Inc. 17

18 List Tennt nd IS Administrtors from the Source vrelize Automtion 6.2.x Environment Before you migrte vrelize Automtion 6.2.x environment, you must mke list of the tennt nd IS dministrtors for ech tennt. Perform the following procedure for ech tennt in the source vrelize Automtion console. Note If you migrte from vrelize Automtion 7.x environment, you do not need to perform this procedure. Log in to the source vrelize Automtion console. 1 Open the vrelize Automtion console using the fully qulified domin nme of the source virtul pplince: For high-vilbility environment, open the console using the fully qulified domin nme of the source virtul pplince lod blncer: 2 Log in with the user nme dministrtor@vsphere.locl nd the pssword tht you entered when you deployed the source vrelize Automtion. 1 Select Administrtion > Tennts. 2 Click tennt nme. 3 Click Administrtors. 4 Mke list of ech tennt nd IS dministrtor user nme. 5 Click Cncel. Wht to do next Add Ech Tennt from the Source vrelize Automtion Environment to the Trget Environment. Add Ech Tennt from the Source vrelize Automtion Environment to the Trget Environment You must dd tennts in the trget environment using the nme of ech tennt in the source environment. For successful migrtion, it is mndtory tht ech tennt in the source environment is creted in the trget environment. You must lso use tennt-specific ccess URL for ech tennt tht you dd using the tennt URL nme from the source environment. If there re unused tennts in the source environment tht you do not wnt to migrte, delete them from the source environment before migrtion. VMwre, Inc. 18

19 Perform this procedure for ech tennt in your source environment. When you migrte from vrelize Automtion 6.2.x environment, you migrte your existing SSO2 tennts nd identity stores on the source environment to the VMwre Identity Mnger on the trget environment. When you migrte from vrelize Automtion 7.x environment, you migrte your existing VMwre Identity Mnger tennts nd identity stores on the source environment to the VMwre Identity Mnger on the trget environment. Gther Informtion Required for Migrtion. Log in to the trget vrelize Automtion console. Open the vrelize Automtion console using the fully qulified domin nme of the trget virtul pplince: For high-vilbility environment, open the console using the fully qulified domin nme of the trget virtul pplince lod blncer: b Log in with the user nme dministrtor@vsphere.locl nd the pssword tht you entered when you deployed the trget vrelize Automtion. 1 Select Administrtion > Tennts. 2 Click the New icon ( ). 3 In the Nme text box, enter tennt nme tht mtches tennt nme in the source environment. For exmple, if the tennt nme in the source environment is DEVTennt, enter DEVTennt. 4 (Optionl) Enter description in the Description text box. 5 In the URL Nme text box, enter tennt URL nme tht mtches the tennt URL nme in the source environment. The URL nme is used to ppend tennt-specific identifier to the vrelize Automtion console URL. For exmple, if the URL nme for DEVTennt in the source environment is dev, enter dev to crete the URL 6 (Optionl) Enter n emil ddress in the Contct Emil text box. 7 Click Submit nd Next. Wht to do next Crete n Administrtor for Ech Added Tennt. VMwre, Inc. 19

20 Crete n Administrtor for Ech Added Tennt You must crete n dministrtor for ech tennt tht you dded to the trget environment. You crete n dministrtor by creting locl user ccount nd ssigning tennt dministrtor privileges to the locl user ccount. Perform this procedure for ech tennt in your trget environment. Add Ech Tennt from the Source vrelize Automtion Environment to the Trget Environment. Log in to the trget vrelize Automtion console. Open the vrelize Automtion console using the fully qulified domin nme of the trget virtul pplince: For high-vilbility environment, open the console using the fully qulified domin nme of the trget virtul pplince lod blncer: b Log in with the user nme dministrtor@vsphere.locl nd the pssword tht you entered when you deployed the trget vrelize Automtion. 1 Select Administrtion > Tennts. 2 Click tennt tht you dded. For exmple, for DEVTennt, click DEVTennt. 3 Click Locl users. 4 Click the New icon ( ). 5 In User Detils, enter the requested informtion to crete locl user ccount to ssign the tennt dministrtor role. The locl user nme must be unique to the defult locl directory, vsphere.locl. 6 Click OK. 7 Click Administrtors. 8 Enter the locl user nme in the Tennt dministrtors serch box nd press Enter. 9 Click the pproprite nme in the serch returns to dd the user to the list of tennt dministrtors. 10 Click Finish. 11 Log out of the console. Wht to do next For miniml deployment: Synchronize Users nd Groups for n Active Directory Link Before Migrtion to Miniml Environment. VMwre, Inc. 20

21 For high-vilbility deployment: Synchronize Users nd Groups for n Active Directory Link Before Migrtion to High-Avilbility Environment. Synchronize Users nd Groups for n Active Directory Link Before Migrtion to Miniml Environment Before you import your users nd groups to miniml deployment of vrelize Automtion, you must connect the trget vrelize Automtion to your Active Directory link. Perform this procedure for ech tennt. If tennt hs more thn one Active Directory, perform this procedure for ech Active Directory tht the tennt uses. Crete n Administrtor for Ech Added Tennt. Verify tht you hve ccess privileges to the Active Directory. Log in to the vrelize Automtion console s tennt dministrtor. 1 Select Administrtion > Directories Mngement > Directories. 2 Click Add Directory icon ( ) nd select Add Active Directory over LDAP/IWA. 3 Enter your Active Directory ccount settings. u For Non-Ntive Active Directories Option Directory Nme This Directory Supports DNS Service Loction Bse DN Bind DN Bind DN Pssword Smple Input Enter unique directory nme. Select Active Directory over LDAP when using Non-Ntive Active Directory. Deselect this option. Enter the distinguished nme (DN) of the strting point for directory server serches. For exmple, cn=users,dc=rinpole,dc=locl. Enter the full distinguished nme (DN), including common nme (CN), of n Active Directory user ccount tht hs privileges to serch for users. For exmple, cn=config_dmin infr,cn=users,dc=rinpole,dc=locl. Enter the Active Directory pssword for the ccount tht cn serch for users nd click Test Connection to test the connection to the configured directory. u For Ntive Active Directories Option Directory Nme Domin Nme Smple Input Enter unique directory nme. Select Active Directory (Integrted Windows Authentiction) when using Ntive Active Directory. Enter the nme of the domin to join. VMwre, Inc. 21

22 Option Domin Admin Usernme Domin Admin Pssword Bind User UPN Bind DN Pssword Smple Input Enter the user nme for the domin dmin. Enter the pssword for the domin dmin. Use the emil ddress formt to enter the nme of the user who cn uthenticte with the domin. Enter the Active Directory bind ccount pssword for the ccount tht cn serch for users. 4 Click Sve & Next. Select the Domins displys list of domins. 5 Accept the defult domin setting nd click Next. 6 Verify tht the ttribute nmes re mpped to the correct Active Directory ttributes, nd click Next. 7 Select the groups nd users to synchronize. b Click the New icon ( ). Enter the user domin nd click Find Groups. For exmple, enter dc=vcc,dc=locl. c d To select the groups to synchronize, click Select nd click Next. On Select Users, select the users to synchronize nd click Next. Only dd users nd groups tht re required to use vrelize Automtion. Do not select Sync nested groups unless ll of the groups in the nest re required to use vrelize Automtion. 8 Review the users nd groups you re syncing to the directory, nd click Sync Directory. The directory synchroniztion tkes some time nd runs in the bckground. Wht to do next Run NSX Network nd Security Inventory Dt Collection in the Source vrelize Automtion Environment Synchronize Users nd Groups for n Active Directory Link Before Migrtion to High-Avilbility Environment Before you import your users nd groups to high-vilbility vrelize Automtion environment, you must connect to your Active Directory link. Perform steps 1-8 for ech tennt. If tennt hs more thn one Active Directory, perform this procedure for ech Active Directory tht the tennt uses. Repet steps 9 10 for ech identity provider ssocited with tennt. Crete n Administrtor for Ech Added Tennt. VMwre, Inc. 22

23 Verify tht you hve ccess privileges to the Active Directory. Log in to the tennted trget vrelize Automtion console t with the tennt dministrtor user nme nd pssword. 1 Select Administrtion > Directories Mngement > Directories. 2 Click Add Directory icon ( ) nd select Add Active Directory over LDAP/IWA. 3 Enter your Active Directory ccount settings. u For Non-Ntive Active Directories Option Directory Nme This Directory Supports DNS Service Loction Bse DN Bind DN Bind DN Pssword Smple Input Enter unique directory nme. Select Active Directory over LDAP when using Non-Ntive Active Directory. Deselect this option. Enter the distinguished nme (DN) of the strting point for directory server serches. For exmple, cn=users,dc=rinpole,dc=locl. Enter the full distinguished nme (DN), including common nme (CN), of n Active Directory user ccount tht hs privileges to serch for users. For exmple, cn=config_dmin infr,cn=users,dc=rinpole,dc=locl. Enter the Active Directory pssword for the ccount tht cn serch for users nd click Test Connection to test the connection to the configured directory. u For Ntive Active Directories Option Directory Nme Domin Nme Domin Admin Usernme Domin Admin Pssword Bind User UPN Bind DN Pssword Smple Input Enter unique directory nme. Select Active Directory (Integrted Windows Authentiction) when using Ntive Active Directory. Enter the nme of the domin to join. Enter the user nme for the domin dmin. Enter the pssword for the domin dmin ccount. Use the emil ddress formt to enter the nme of the user who cn uthenticte with the domin. Enter the Active Directory bind ccount pssword for the ccount tht cn serch for users. 4 Click Sve & Next. The Select the Domins pge displys the list of domins. 5 Accept the defult domin setting nd click Next. 6 Verify tht the ttribute nmes re mpped to the correct Active Directory ttributes, nd click Next. VMwre, Inc. 23

24 7 Select the groups nd users to synchronize. b Click the New icon. Enter the user domin nd click Find Groups. For exmple, enter dc=vcc,dc=locl. c d To select the groups to synchronize, click Select nd click Next. On the Select Users pge, select the users to synchronize nd click Next. Only dd users nd groups tht re required to use vrelize Automtion. Do not select Sync nested groups unless ll of the groups in the nest re required to use vrelize Automtion. 8 Review the users nd groups you re syncing to the directory, nd click Sync Directory. The directory synchroniztion tkes some time nd runs in the bckground. 9 Select Administrtion > Directories Mngement > Identity Providers, nd click your new identity provider. For exmple, WorkspceIDP On the pge for the identity provider tht you selected, dd connector for ech node. b c Follow the instructions for Add Connector. Updte the vlue for the IdP Hostnme property to point to the fully qulified domin nme (FQDN) for the vrelize Automtion lod blncer. Click Sve. Wht to do next Run NSX Network nd Security Inventory Dt Collection in the Source vrelize Automtion Environment. Run NSX Network nd Security Inventory Dt Collection in the Source vrelize Automtion Environment Before you migrte, you must run NSX Network nd Security Inventory dt collection in the source vrelize Automtion environment. This dt collection is necessry for the Lod Blncer Reconfigure ction to work in vrelize Automtion 7.3 for 7.1 nd 7.2 deployments. Note You do not need to run this dt collection in your source environment when you migrte from vrelize Automtion 6.2.x. vrelize Automtion 6.2.x does not support the Lod Blncer Reconfigure ction. VMwre, Inc. 24

25 u Run NSX Network nd Security Inventory dt collection in your source vrelize Automtion environment before you migrte to vrelize Automtion 7.3. See Strt Endpoint Dt Collection Mnully in Mnging vrelize Automtion. Wht to do next Mnully Clone the Source vrelize Automtion IS Microsoft SQL Dtbse. Mnully Clone the Source vrelize Automtion IS Microsoft SQL Dtbse Before migrtion, you must bck up your IS Microsoft SQL dtbse in the vrelize Automtion source environment nd restore it to new blnk dtbse creted in the vrelize Automtion trget environment. Run NSX Network nd Security Inventory Dt Collection in the Source vrelize Automtion Environment. Obtin informtion bout bcking up nd restoring n SQL Server dtbse. Find rticles on the Microsoft Developer Network bout creting full SQL Server dtbse bckup nd restoring n SQL Server dtbse to new loction. u Crete full bckup of your source vrelize Automtion 6.2.x or 7.x IS Microsoft SQL dtbse. You use the bckup to restore the SQL dtbse to new blnk dtbse creted in the trget environment. Wht to do next Snpshot the Trget vrelize Automtion Environment. Snpshot the Trget vrelize Automtion Environment Tke snpshot of ech trget vrelize Automtion virtul mchine. If migrtion is unsuccessful, you cn try gin using the virtul mchine snpshots. For informtion, see your vsphere documenttion. Mnully Clone the Source vrelize Automtion IS Microsoft SQL Dtbse. Wht to do next Perform one of the following procedures: Migrte vrelize Automtion Source Dt to vrelize Automtion 7.3 Miniml Environment. VMwre, Inc. 25

26 Migrte vrelize Automtion Source Dt to vrelize Automtion 7.3 High-Avilbility Environment. VMwre, Inc. 26

27 Migrtion s 4 The procedure you perform to migrte your source vrelize Automtion environment dt depends whether you migrte to miniml environment or to high-vilbility environment. This chpter includes the following topics: Migrte vrelize Automtion Source Dt to vrelize Automtion 7.3 Miniml Environment Migrte vrelize Automtion Source Dt to vrelize Automtion 7.3 High-Avilbility Environment Migrte vrelize Automtion Source Dt to vrelize Automtion 7.3 Miniml Environment You cn migrte your current vrelize Automtion environment to new instlltion of vrelize Automtion 7.3. Gther Informtion Required for Migrtion. Obtin the Encryption Key from the Source vrelize Automtion Environment. Add Ech Tennt from the Source vrelize Automtion Environment to the Trget Environment. Crete n Administrtor for Ech Added Tennt. Synchronize Users nd Groups for n Active Directory Link Before Migrtion to Miniml Environment. Mnully Clone the Source vrelize Automtion IS Microsoft SQL Dtbse. Snpshot the Trget vrelize Automtion Environment. 1 In your trget vrelize Automtion 7.3 environment, strt browser nd go to the vrelize Automtion pplince mngement console t 2 Log in with the user nme root nd the pssword you entered when you deployed the pplince. 3 Select vra Settings > Migrtion. VMwre, Inc. 27

28 4 Enter the informtion for the source vrelize Automtion pplince. Option Host nme Root usernme Root pssword Description The host nme for the source vrelize Automtion pplince. root The root pssword tht you entered when you deployed the vrelize Automtion pplince. 5 Enter the informtion for the trget vrelize Automtion pplince. Option Root usernme Root pssword Defult tennt Administrtor usernme Administrtor pssword Description root The root pssword tht you entered when you deployed the trget vrelize Automtion pplince. The defult tennt you creted when you configured single sign-on in the Instlltion wizrd, usully vsphere.locl. The tennt dministrtor user nme tht you entered when you deployed the trget vrelize Automtion pplince. Chnge existing vlue if necessry. The pssword tht you entered for the defult tennt dministrtor when you deployed the trget vrelize Automtion pplince. 6 Enter the informtion for the trget IS dtbse server. Option Dtbse server Cloned dtbse nme Description The loction of the Microsoft SQL Server where the restored vrelize Automtion IS Microsoft SQL dtbse resides. If nmed instnce nd non-defult port re used, enter in SERVER,PORT\INSTANCE-NAME formt. If you configure the trget Microsoft SQL Server to use the AlwysOn Avilbility Group (AAG) feture, the trget SQL Server should be entered s the AAG listener nme, without port or instnce nme. Nme of the source vrelize Automtion 6.2.x or 7.x IS Microsoft SQL dtbse tht you bcked up on the source nd restored on the trget environment. Authentiction mode Windows If you use the Windows uthentiction mode, the IS service user must hve the SQL Server db_owner role. The sme permissions pply when using SQL Server uthentiction mode. SQL Server SQL Server opens the Login nme nd Pssword text boxes. Login nme Pssword Login nme of the SQL Server user with the db_owner role for the cloned IS Microsoft SQL dtbse. Pssword for the SQL Server user with the db_owner role for the cloned IS Microsoft SQL dtbse. VMwre, Inc. 28

29 Option Originl encryption key New pssphrse Description Originl encryption key tht you retrieve from the source environment. See Obtin the Encryption Key from the Source vrelize Automtion Environment. A series of words used to generte new encryption key. You use this pssphrse ech time you instll new IS component in the trget vrelize Automtion environment. 7 Click Vlidte. The pge displys the vlidtion progress. If ll the items vlidte successfully, go to step 8. If n item fils to vlidte, inspect the error messge nd the vlidtion log file on the IS nodes. For log file loctions, see Migrtion Log Loctions. Click Edit Settings nd edit the problem item. Go to step 7. 8 Click Migrte. The pge displys the migrtion progress. If migrtion is successful, the pge displys informtion bout the Softwre Agent post-migrtion updte. If migrtion is unsuccessful, inspect the migrtion log files on the virtul pplince nd the IS nodes. For log file loctions, see Migrtion Log Loctions. Finish these steps before you restrt migrtion. b Revert your trget vrelize Automtion environment to the stte you cptured when you took snpshot before migrtion. Restore your trget IS Microsoft SQL dtbse using the bckup of the source IS dtbse. Wht to do next Chpter 5 Post-Migrtion Tsks. Migrte vrelize Automtion Source Dt to vrelize Automtion 7.3 High-Avilbility Environment You cn migrte your current vrelize Automtion environment to new instlltion of vrelize Automtion 7.3 configured s high-vilbility environment. Gther Informtion Required for Migrtion. Obtin the Encryption Key from the Source vrelize Automtion Environment. Add Ech Tennt from the Source vrelize Automtion Environment to the Trget Environment. Crete n Administrtor for Ech Added Tennt. Synchronize Users nd Groups for n Active Directory Link Before Migrtion to High-Avilbility Environment. VMwre, Inc. 29

30 Mnully Clone the Source vrelize Automtion IS Microsoft SQL Dtbse. Snpshot the Trget vrelize Automtion Environment. 1 In your trget vrelize Automtion 7.3 environment, open browser nd go to the mster vrelize Automtion pplince mngement console t 2 Log in with the user nme root nd the pssword you entered when you deployed the pplince. 3 Select vra Settings > Migrtion. 4 Enter the informtion for the source vrelize Automtion pplince. Option Host nme Root usernme Root pssword Description The host nme for the source vrelize Automtion pplince. root The root pssword tht you entered when you deployed the source vrelize Automtion pplince. 5 Enter the informtion for the trget vrelize Automtion pplince. Option Root usernme Root pssword Defult tennt Administrtor usernme Administrtor pssword Description root The root pssword tht you entered when you deployed the trget vrelize Automtion pplince. The defult tennt you creted when you configured single sign-on in the Instlltion wizrd, usully vsphere.locl. The tennt dministrtor user nme tht you entered when you deployed the trget vrelize Automtion pplince. Chnge existing vlue if necessry. The pssword tht you entered for the defult tennt dministrtor when you deployed the trget vrelize Automtion pplince. 6 Enter the informtion for the trget IS dtbse server. Option Dtbse server Cloned dtbse nme Description The loction of the Microsoft SQL Server instnce where the restored vrelize Automtion IS Microsoft SQL dtbse resides. If nmed instnce nd nondefult port re used, enter in SERVER,PORT\INSTANCE-NAME formt. If you configure the trget Microsoft SQL Server to use the AlwysOn Avilbility Group (AAG) feture, the trget SQL Server should be entered s the AAG listener nme, without port or instnce nme. Nme of the source vrelize Automtion 6.2.x or 7.x IS Microsoft SQL dtbse tht you bcked up on the source nd restored on the trget environment. VMwre, Inc. 30

31 Option Description Authentiction mode Windows If you use the Windows uthentiction mode, the IS service user must hve the SQL Server db_owner role. The sme permissions pply when using SQL Server uthentiction mode. SQL Server SQL Server opens the Login nme nd Pssword text boxes. Login nme Pssword Originl encryption key New pssphrse Login nme of the SQL Server user with the db_owner role for the cloned IS Microsoft SQL dtbse. Pssword for the SQL Server user with the db_owner role for the cloned IS Microsoft SQL dtbse. Originl encryption key tht you retrieve from the source environment. See Obtin the Encryption Key from the Source vrelize Automtion Environment. A series of words used to generte new encryption key. You use this pssphrse ech time you instll new IS component in the trget vrelize Automtion environment. 7 Click Vlidte. The pge displys the vlidtion progress. If ll the items vlidte successfully, go to step 8. If n item fils to vlidte, inspect the error messge nd the vlidtion log file on the IS nodes. For log file loctions, see Migrtion Log Loctions. Click Edit Settings nd edit the problem item. Go to step 7. 8 Click Migrte. The pge displys the migrtion progress. If migrtion is successful, the pge displys informtion bout the Softwre Agent post-migrtion updte. If migrtion is unsuccessful, inspect the migrtion log files on the virtul pplince nd the IS nodes. For log file loctions, see Migrtion Log Loctions. Finish these steps before you restrt migrtion. b Revert your trget vrelize Automtion environment to the stte you cptured when you took snpshot before migrtion. Restore your trget IS Microsoft SQL dtbse using the bckup of the source IS dtbse. Wht to do next Chpter 5 Post-Migrtion Tsks. VMwre, Inc. 31

32 Post-Migrtion Tsks 5 After you migrte vrelize Automtion, perform the post-migrtion tsks tht pertin to your sitution. Note After you migrte the identity stores, users of vrelize Code Strem must mnully ressign vrelize Code Strem roles. This chpter includes the following topics: Add Tennt nd IS Administrtors from the Source vrelize Automtion 6.2.x Environment Set the vrelize Automtion PostgreSQL Repliction Mode to Synchronous Run Test Connection nd Verify Migrted Endpoints Run NSX Network nd Security Inventory Dt Collection in Your Trget vrelize Automtion 7.3 Environment Reconfigure Lod Blncers After Migrtion to High-Avilbility Environment Migrting n Externl vrelize Orchestrtor Server to vrelize Automtion 7.3 Migrte the Embedded vrelize Orchestrtor Server from vrelize Automtion 7.x to 7.3 Reconfigure the vrelize Automtion Endpoint in the Trget vrelize Orchestrtor Reconfigure the vrelize Automtion Infrstructure Endpoint in the Trget vrelize Orchestrtor Instll vrelize Orchestrtor Customiztion Reconfigure Embedded vrelize Orchestrtor Infrstructure Endpoint in the Trget vrelize Automtion Reconfigure the Azure Endpoint in the Trget vrelize Automtion Environment Migrte vrelize Automtion 6.2.x Automtion Appliction Services to 7.3 Updte Softwre Agent on Existing Virtul Mchines Delete Originl Trget vrelize Automtion IS Microsoft SQL Dtbse Updte Dt Center Loction Menu Contents After Migrtion Vlidte the Trget vrelize Automtion 7.3 Environment VMwre, Inc. 32

33 Add Tennt nd IS Administrtors from the Source vrelize Automtion 6.2.x Environment You must delete nd restore the vrelize Automtion 6.2.x tennt dministrtors in ech tennt fter migrtion. Perform the following procedure for ech tennt in the trget vrelize Automtion console. Note If you migrte from vrelize Automtion 7.x environment, you do not need to perform this procedure. Successful migrtion to vrelize Automtion 7.3. Log in to the trget vrelize Automtion console. 1 Select Administrtion > Tennts. 2 Click tennt nme. 3 Click Administrtors. 4 Mke list of ech tennt dministrtor nme nd user nme. 5 Point to ech dministrtor nd click the delete icon (Delete) until you delete ll dministrtors. 6 Click Finish. 7 On the Tennts pge, click the tennt nme gin. 8 Click Administrtors. 9 Enter the nme of ech user tht you deleted in the pproprite serch box nd press Enter. 10 Click the nme of the pproprite user from the serch returns to dd the user bck s n dministrtor. When you finish, the list of tennt dministrtors dministrtors looks the sme s the list of dministrtors you deleted. 11 Click Finish. Set the vrelize Automtion PostgreSQL Repliction Mode to Synchronous After you migrte from distributed vrelize Automtion 7.3 environment, you cn chnge PostgreSQL repliction mode to synchronous on both the source nd trget environments. After you upgrde from distributed vrelize Automtion environment erlier thn 7.3, you cn chnge PostgreSQL repliction mode to synchronous on the trget environment. VMwre, Inc. 33