Configuring Windows PSC for High Availability in vSphere 6.5/6.7

Products

• VMware vCenter Server

Issue/Introduction

This article provides the procedure to configure Windows installed Platform Services Controller (PSC) Appliance 6.5/6.7 High Availability.

Environment

VMware vCenter Server 6.5.x
VMware vCenter Server 6.7.x

Resolution

This article is part of a series for configuring PSC HA, for the main article, see:

• vSphere 6.5: Configuring Platform Service Controller HA in vSphere 6.5
• vSphere 6.7: Configuring Platform Service Controller HA in vSphere 6.7

Configuring PSC HA 6.5 for SSL passthrough

To configure the PSCs for load balancing by running the updateSSOConfig.py and updateLsEndpoint.py scripts.

 

Notes:

• The updateSSOConfig.py script updates information local to each PSC and must be ran on all PSCs in the HA instance.
• The updateLsEndpoint.py script updates the ServiceRegistration Endpoints in VMDir and only needs to be ran on one of the PSCs in the HA instance.

Running the updateSSOConfig.py script

1. Connect to the PSC with an administrative user.
2. Open an elevated privilege command prompt.
3. Navigate to C:\Program Files\VMware\vCenter Server\vmware-sso\bin with this command:
   
   cd "C:\Program Files\VMware\vCenter Server\vmware-sso\bin"
    
4. Run this command:
   
   "%VMWARE_PYTHON_BIN%"\python updateSSOConfig.py --lb-fqdn=psc-ha-vip.domain.com
    
5. Repeat these steps on any remaining PSCs.

Running the updateLsEndpoint.py script

1. Connect to the PSC with an administrative user.
2. Open an elevated privilege command prompt.
3. Navigate to C:\Program Files\VMware\vCenter Server\vmware-sso\bin with this command:
   
   cd "C:\Program Files\VMware\vCenter Server\vmware-sso\bin"
    
4. Run this command
   
   "%VMWARE_PYTHON_BIN%"python UpdateLsEndpoint.py --lb-fqdn=psc-ha-vip.domain.com --user=administrative_user --password=password
   
   Note: Only perform this step on a single PSC node.

Configuring PSC HA 6.5 for SSL termination

To configure the PSCs for load balancing by running the updateSSOConfig.py and updateLsEndpoint.py scripts.

 

Notes:

• The updateSSOConfig.py script updates information local to each PSC and must be ran on all PSCs in the HA instance.
• The updateLsEndpoint.py script updates the ServiceRegistration Endpoints in VMDir and only needs to be ran on one of the PSCs in the HA instance.

Running the updateSSOConfig.py script

1. Connect to the PSC with an administrative user.
2. Open an elevated privilege command prompt.
3. Navigate to C:\Program Files\VMware\vCenter Server\vmware-sso\bin with this command:
   
   cd "C:\Program Files\VMware\vCenter Server\vmware-sso\bin"
    
4. Run this command:
   
   "%VMWARE_PYTHON_BIN%"\python updateSSOConfig.py --lb-fqdn=psc-ha-vip.domain.com
   
   For example:
   
   "%VMWARE_PYTHON_BIN%"python updateSSOConfig.py --lb-fqdn=loadbalancer.vmware.com
5. Repeat these steps on any remaining PSCs.

Running the updateLsEndpoint.py script

1. Connect to the PSC with an administrative user.
2. Open an elevated privilege command prompt.
3. Navigate to C:\Program Files\VMware\vCenter Server\vmware-sso\bin with this command:
   
   cd "C:\Program Files\VMware\vCenter Server\vmware-sso\bin"
    
4. Run this command
   
   "%VMWARE_PYTHON_BIN%"python UpdateLsEndpoint.py --upgrade --lb-fqdn=psc-ha-vip.domain.com --user=administrative_user --password=password
   
   For example:
   
   "%VMWARE_PYTHON_BIN%"python UpdateLsEndpoint.py --upgrade --lb-fqdn=psc-ha-vip.vmware.com [email protected] --password=VMware123$
   
   Note: Only perform this step on a single PSC node.

Additional Information