Maintain a current backup of the Single Sign On configuration. If your Single Sign On instance is corrupted, you can restore the backup to ensure continued vSphere access for vCenter Server and vCenter Server components.

Back up the Single Sign On configuration in the following circumstances.

After you install, update, or change the location of a vCenter Single Sign On instance.

When the node.pkg file is modified. The node.pkg file is modified when you take either of the following actions.

Change Single Sign On database information, such as the database host name or port.

Change the Single Sign On password that was created for the administrator user admin@System-Domain when Single Sign On was originally installed. This original password is required when you restore a Single Sign On backup.

For a complete backup, you must also back up your Single Sign On database. See the documentation for your database type.

On the vCenter Single Sign On host machine, take one of the following actions.



From the Windows user interface


Go to Programs > VMware.


Right-click Generate vCenter Single Sign On backup bundle and select Run as administrator.

From a command prompt


Right-click the Command Prompt icon or menu item, and select Run as administrator.


Change directory to C:\Program Files\VMware\Infrastructure\SSOServer\scripts.

If you installed Single Sign On in a location other than the default C:\Program Files, adjust the path.


Type cscript sso-backup.wsf /z and press Enter.

The vCenter Single Sign On configuration is backed up as Single Sign on the Desktop of the host machine. To restore a vCenter Single Sign On backup, see Restore a vCenter Single Sign On Single or Primary Node Instance to a New Host Machine.