If the vCenter Server instance has been deployed with an embedded PSC and you want additional vCenter Server instances in your SSO domain, you can modify the vCenter Server instance configuration to point to an external PSC. Anyway, this configuration is a one-way process only, and it's not possible to switch back to the previous configuration with an embedded PSC.
Before proceeding, take snapshots of both the vCenter Server with embedded PSC and the external PSC in order to revert if something goes wrong during the configuration.
To point the vCSA with an embedded PSC to an external PSC, you should perform the following steps:
- SSH vCenter Server with the embedded PSC using the root credentials and enable the shell.
- Verify that all services are running in the PSC using the following command:
service-control --status --all
The services that must be running are as follows:
-
- VMware License Service
- VMware Identity Management Service
- VMware Security Token Service
- VMware Certificate Service
- VMware Directory Service
- To reconfigure vCenter Server, use the following command:
cmsso-util reconfigure --repoint-psc psc_fqdn --username username --domain-name domain --passwd password
Here, psc_fqdn is the FQDN or the static IP address of the external PSC.
For instance, you can run the following command:
cmsso-util reconfigure --repoint-psc vcsa65-psc01.lab.local --username administrator --domain-name vsphere.local --passwd Password00
- Using the vSphere Client, log in to the vCenter Server instance to verify the instance is running and you can manage it. If the procedure has completed successfully, the vCenter Server with the embedded PSC is now demoted and redirected to the external PSC.