The EmpowerID VMWare connector allows organizations to inventory and manage the Virtual Machines, ESX servers and templates hosted in their VMWare VCenters. These management actions include the following:


EmpowerID store a record for each inventoried VCenter instance in the Computer table of the EmpowerID Identity Warehouse.



In order to connect EmpowerID to VMWare, you need to provide EmpowerID with the following information:

  • The username and password of the VCenter administrator account
  • The VCenter Server name

These values are used by EmpowerID to inventory and manage the machines in your VCenter.


Additionally, for EmpowerID to successfully inventory your VMWare Center, you need to import the VMWare certificate to the Personal and Trusted Root Authorities certificate stores on your EmpowerID server. If you do not, a "Could not create SSL/TLS secure channel" error will occur.



Connecting EmpowerID to VMWare

  1. Log in to the EmpowerID Management Console as an administrator.
  2. Click the application icon and select Configuration Manager from the menu.
  3. In Configuration Manager, select the Account Stores node and then click the Add New button above the grid.




  4. In the Add New Security Boundary window that opens, select the VMWare VCenter Security Boundary type from the drop-down list and then click OK.




  5. In the Account Store Details window that appears, do the following:
    1. Type a name for the connector in the Account Store Name field.
    2. Type the administrative user in the User Name field.
    3. Type the password for the administrative user in the Password field.
    4. Type name of the VCenter server to which you want to connect in the Server Name field.
    5. Click Save.




  6. Back in the main screen of Configuration Manager, locate the record for the VMWare account store you just created and either double-click it or right-click it and selectEdit from the context menu.
  7. From the Inventory pane of the the Account Store Details screen that appears, enable EmpowerID to inventory your VCenter by toggling the Enable Inventory button from a red sphere to a green check.





After EmpowerID inventories your VCenter, you can manage the virtual machines in that VCenter. For more information, see Managing VMWare VCenter Instances.



In EmpowerID, all resources belong to a location, which is a container that can be used for managing access to resources. For VMWare, the default path to this location is Anywhere/Default Organization/All IT Systems/VMWare/TheNameOfTheAccountStore. All virtual machines belonging to the ESX host belong to the location of that host. Thus in the above example, the ESX host and all machines on the host are assigned to the Anywhere/Default Organization/All IT Systems/VMWare/Corp_VMWare location






tasks:

Managing VMWare VCenter Instances