Install vSphere Authentication Proxy to enable ESXi hosts to join a domain without using Active Directory
credentials. vSphere Authentication Proxy enhances security for PXE-booted hosts and hosts that are
provisioned using Auto Deploy, by removing the need to store Active Directory credentials in the host
configuration.
If an earlier version of the vSphere Authentication Proxy is installed on your system, this procedure
upgrades the vSphere Authentication Proxy to the current version.
You can install vSphere Authentication Proxy on the same machine as the associated vCenter Server, or on a
different machine that has network connection to the vCenter Server. The vSphere Authentication Proxy is
not supported with vCenter Server versions earlier than version 5.0.
The vSphere Authentication Proxy service binds to an IPv4 address for communication with vCenter Server,
and does not support IPv6. The vCenter Server can be on a host machine in an IPv4-only, IPv4/IPv6 mixedmode,
or IPv6-only network environment, but the machine that connects to the vCenter Server through the
vSphere Web Client must have an IPv4 address for the vSphere Authentication Proxy service to work.
Procedure
1 On the host machine where you will install the vSphere Authentication Proxy service, install the .NET
Framework 3.5.
2 Install vSphere Auto Deploy.
You do not have to install Auto Deploy on the same host machine as the vSphere Authentication Proxy
service.
3 Add the host machine where you will install the authentication proxy service to the domain.
4 Use the Domain Administrator account to log in to the host machine.
5 In the software installer directory, double-click the autorun.exe file to start the installer.
6 Select vSphere Authentication Proxy and click Install.
7 Follow the wizard prompts to complete the installation or upgrade.
During installation, the authentication service registers with the vCenter Server instance where Auto
Deploy is registered.
When you install the vSphere Authentication Proxy service, the installer creates a domain account with
appropriate privileges to run the authentication proxy service. The account name begins with the prefix CAMand
has a 32-character, randomly generated password associated with it. The password is set to never
expire. Do not change the account settings.
credentials. vSphere Authentication Proxy enhances security for PXE-booted hosts and hosts that are
provisioned using Auto Deploy, by removing the need to store Active Directory credentials in the host
configuration.
If an earlier version of the vSphere Authentication Proxy is installed on your system, this procedure
upgrades the vSphere Authentication Proxy to the current version.
You can install vSphere Authentication Proxy on the same machine as the associated vCenter Server, or on a
different machine that has network connection to the vCenter Server. The vSphere Authentication Proxy is
not supported with vCenter Server versions earlier than version 5.0.
The vSphere Authentication Proxy service binds to an IPv4 address for communication with vCenter Server,
and does not support IPv6. The vCenter Server can be on a host machine in an IPv4-only, IPv4/IPv6 mixedmode,
or IPv6-only network environment, but the machine that connects to the vCenter Server through the
vSphere Web Client must have an IPv4 address for the vSphere Authentication Proxy service to work.
Procedure
1 On the host machine where you will install the vSphere Authentication Proxy service, install the .NET
Framework 3.5.
2 Install vSphere Auto Deploy.
You do not have to install Auto Deploy on the same host machine as the vSphere Authentication Proxy
service.
3 Add the host machine where you will install the authentication proxy service to the domain.
4 Use the Domain Administrator account to log in to the host machine.
5 In the software installer directory, double-click the autorun.exe file to start the installer.
6 Select vSphere Authentication Proxy and click Install.
7 Follow the wizard prompts to complete the installation or upgrade.
During installation, the authentication service registers with the vCenter Server instance where Auto
Deploy is registered.
When you install the vSphere Authentication Proxy service, the installer creates a domain account with
appropriate privileges to run the authentication proxy service. The account name begins with the prefix CAMand
has a 32-character, randomly generated password associated with it. The password is set to never
expire. Do not change the account settings.
No comments:
Post a Comment