VMware Aria Orchestrator MP Limitations in VMware Aria Operations (SaaS)

Products

• VMware Aria Suite

Issue/Introduction

To provide VMware Aria Orchestrator workflows to configure automated compliance remediation by applying host security configuration rules and setting options to enforce hardening rules with VMware Aria Operations (SaaS) (formerly known as vRealize Operations Cloud).

Users can use the VMware Aria Orchestrator Management Pack on VMware Aria Operations (SaaS) version 8.3 and later.
The Management Pack can be installed from the in-product Marketplace available at Administration > Solutions > Marketplace.  Search for VMware Aria Orchestrator Management Pack and Press the GET button.
This will download and install the management pack after the user accepts the EULA.
Once installed users can use it to execute workflows.

However, there are a few limitations with this model:

• VMware Aria Orchestrator Management Pack Out-Of-the-Box workflow Apply Host Security Configuration Rules and the dependent workflows such as Configure Host Security Configuration Data are not supported on VMware Aria Operations (SaaS).

Resolution

To resolve the limitation, download the com.vmware.vrops.oob_content.package file attached to this article and import it into VMware Aria Orchestrator.  While importing, override the existing workflows with the new ones that are shipped through the package.

• When you run the workflow Configure Host Security Config Data and select the option for VMware Aria Operations (SaaS) you must use the URL for your VMware Aria Operations (SaaS) instance.

Example: https://www.mgmt.cloud.vmware.com
This URL can be different for regions outside of the United States so be sure to verify your URL.

• Certificates are imported when you run the Configure Host Security Config Data workflow and they are signed by a trusted CA.  However, you may have to accept the certificate during the workflow execution.
• If the Apply Host Security Rules workflow fails with an error due to untrusted certificates, you can add the certificate for your VMware Aria Operations (SaaS) instance and the VMware Cloud Console using the workflow Import a Certificate From URL.

Additional Information

For more information see the documentation page Example: Configuring Automated Compliance Remediation.