How to correct an incorrectly configured vCenter SSO domain name using the cmsso-util command
search cancel

How to correct an incorrectly configured vCenter SSO domain name using the cmsso-util command

book

Article ID: 447020

calendar_today

Updated On:

Products

VMware vCenter Server

Issue/Introduction

  • After a new vCenter Server deployment, the Single Sign-On (SSO) domain name is found to be misspelled (e.g., "vshpere.local" instead of "vsphere.local").

  • Attempts to edit the domain name directly via the vSphere Client UI do not work.

Environment

  • vCenter Server 8.x

Cause

The local SSO domain name was entered incorrectly during the initial deployment phase of the vCenter Server Appliance (VCSA).

Resolution

To change the SSO domain name, you must perform a domain repoint. Follow these steps:

  1. Take a Snapshot: Ensure a valid offline snapshot of the vCenter VM is taken before proceeding.
  2. SSH to vCenter: Connect to the vCenter Server via SSH using the root account.
  3. Run Repoint Command: Execute the following command to repoint the vCenter to the correct domain (replace vsphere.local with your intended domain if different):
    bash
     
    cmsso-util domain-repoint -m execute --src-emb-admin Administrator --dest-domain-name vsphere.local
  4. Verify: Once the process completes, log in to the vSphere Client using the administrator@vsphere.local account to confirm the change.
  5. Cleanup: Delete the vCenter VM snapshot after confirming everything is working as expected.

Additional Information

Review the "Repoint a vCenter Server Node to a New Domain" section of the following documentation for addition details:

Repoint a vCenter Server Node to a New Domain