In Part 1 we deployed the vCenter Orchestrator virtual appliance. Now in part 2 we are going to configure vCO, such as SSO integration, vCenter and SSL certificates amongst other items.



If you missed any of the previous parts of the series or want go back here is the jump list:


1. Now you have the vCO appliance deployed, powered on and it has an IP address (plus the DNS A record you created)



2. Open your web browser to https://vCOappliance:8283

3. Login with Username: VMware

Password: <The Password Set During OVF Deployment>



4. Now you are logged into the vCO Configuration page, here we need to make a number of configurations before vCO will work.



5. First go to Network --> SSL Trust manager

6. You want to import from URL your vCenter and SSO certificates so you can connect to them later on in the config





7. You will be prompted to accept the certificate. Click Import.



8. You will now see your certificates within the SSL Trust Manager



9. Go to Authentication

10. Select "SSO Authentication"

11. Enter your SSO server details (e.g., your SSO administrator (this might be This email address is being protected from spambots. You need JavaScript enabled to view it. if you haven't setup any others).

12. Enter your SSO administrators password and Click Register Orchestrator.

13. Now you need to select a "vCO Admin - domain and group" you can manage vCO (this could be vsphere.local Administrators, or your Domain Admins group if configured in SSO)



14. Click Update Orchestrator Configuration, all the dots next to the config items will turn green indicating that config is complete.



15. Go to vCenter Server

16. We need to add a vCenter Server so browse to the New vCenter Server Host tab and enter the details of a vCenter Server, Click Apply Changes.



17. Check your vCenter Server has been added in the Hosts tab.



18. Go to Licenses

19. Select "Use vCenter Server license" and enter your vCenter server details



20. Go to Plug-ins

21. Ensure the plugins are enabled, enter your SSO user and Click Apply changes



22. Go to Network

23. In the IP Address box select the IP address that the vCO service should bind to and Click Apply



24. Go to Startup Options

25. Under vCO Server, Click "Restart service".

This will restart the vCO service, binding the vCO service to the correct network interface and also set the SSO authentication.





Next up Part 3..

If you missed any of the previous parts of the series or want go back here is the jump list:






Share this blog post on social media:

Social Links


All advice, installation/configuration how to guides, troubleshooting and other information on this website are provided as-is with no warranty or guarantee. Whilst the information provided is correct to the best of my knowledge, I am not reponsible for any issues that may arise using this information, and you do so at your own risk. As always before performing anything; check, double check, test and always ensure you have a backup.

Copyright ©2008-2021 Andy Barnes - Please do not copy any content including images without prior consent!

Designed and Hosted by Andy Barnes

We use cookies

We use cookies on our website. Some of them are essential for the operation of the site, while others help us to improve this site and the user experience (tracking cookies). You can decide for yourself whether you want to allow cookies or not. Please note that if you reject them, you may not be able to use all the functionalities of the site.