Configuring single sign-on between the virtual machine and the Symantec High Availability Console

SSO configuration involves specifying the virtual machine administrator account to set up a permanent authentication for the virtual machine.

You need to manually configure SSO, if you have installed the guest components using the product installer or CLI. The Guest Components installer launched using the vSphere Client menu configures SSO after the guest components installation is complete.

Use the Symantec High Availability tab to configure the single sign-on between the virtual machine and the Console host.

Note:

Symantec High Availability solution uses platform-based authentication; it does not store user passwords.

The Symantec High Availability Console uses the Authentication service to provide secure communications between the virtual machine and the Console. It uses digital certificates for authentication and uses SSL to encrypt communications.

This single sign-on authentication is required for all operations on the virtual machine. This is also required so that the server does not prompt you for a user name and password each time you log on to the vSphere Client and click on a virtual machine to view its status.

Perform the following steps to configure the single sign-on for the virtual machines.

To configure single sign-on for the virtual machines

  1. Launch the vSphere Client and connect to the vCenter Server used to manage your virtual machines.
  2. On the Security Warning dialog that displays information about the Symantec High Availability Console certificate, do the following:
    • Check the option to install the certificate.

    • Click Ignore.

    If you do not install the Symantec High Availability Console certificate, this dialog pops up each time you log on to the vCenter Server using the vSphere Client.

  3. Open the Hosts and Clusters view in the vSphere Client and then expand the Cluster to display the list of virtual machines.
  4. From the left pane select the virtual machine to configure the SSO and then in the right pane select the Symantec High Availability tab.
  5. Click Yes on the security certificate related dialog box, if displayed.
  6. In the User Name and Password field, specify the credentials of a user that has administrative privileges on the virtual machine.
  7. Click Configure.

    The Symantec High Availability Console uses the specified user account to set up a permanent authentication for the virtual machine.

    After the authentication is successful, the Symantec High Availability tab refreshes and displays the application configuration view.

    Note:

    If you experience an error, "Error occurred during deployment of the ApplicationHA guest credential", you must repair the Console installation and then try to configure the single sign-on again.

  8. Repeat these steps for all virtual machines where you wish to configure application monitoring.