If you want to configure Orchestrator to work with the VMware vCenter Server Appliance, and want to run workflows by using the vSphere Web Client, you must configure the Orchestrator server to work with vCenter Single Sign On, which is prebuilt in the appliance.


Ensure that the clocks of the Orchestrator server machine and the vCenter Server Appliance are synchronized. Otherwise you might receive cryptic vCenter Single Sign On errors.

This workflow describes the process to change the self-signed certificate.


Download and deploy the VMware vCenter Server Appliance.

See vSphere Installation and Setup for instructions.


Import the SSL and vCenter Single Sign On certificates of the vCenter Server instance running in the vCenter Server Appliance into Orchestrator.

You import certificates from the Orchestrator configuration interface. For more information about importing certificates, see Import the vCenter Server SSL Certificate and Import the vCenter Single Sign On SSL Certificate.

For importing the SSL certificate of the vCenter Server instance running in the appliance, in the Import from URL text box, type your_vcenter_server_appliance_ip_address:vcenter_server_api_port.

For importing the vCenter Single Sign On certificate, in the Import from URL text box, type your_vcenter_server_appliance_ip_address:single_sign_on_port.


In the Orchestrator configuration interface, click Authentication and select SSO Authentication.


Register Orchestrator to work with vCenter Single Sign On:


In the Host text box, type your_vcenter_server_appliance_ip_address:single_sign_on_port


In the Admin user name and the Admin password text boxes, type the credentials of the root user of the vCenter Server Appliance.


Click Register Orchestrator.


Complete the registration by selecting the vCO Admin domain and group from the drop-down menu.