===== vCSA Migrate to External PSC ===== {{tag>VMware}} Migrating from single vCenter Server Appliance (vCSA) with embedded Platform Services Controller (PSC) to vCenter Server Appliance (vCSA) with external Platform Services Controller (PSC). Enable shell and find SSO domain site name of vCSA. Command> shell.set --enabled True Command> shell vcenter:~ # /usr/lib/vmware-vmafd/bin/vmafd-cli get-site-name --server-name localhost Default-First-Site Verify the embedded PSC is running the following services: * VMware License Service * VMware Identity Management Service * VMware Security Token Service * VMware Certificate Service * VMware Directory Service vcenter:~ # service-control --status vmware-cis-license vmware-sts-idmd vmware-stsd vmcad vmdird Create a snapshot of your exsting vCSA Deploy external PSC Reconnect vCSA to external PSC Command> cmsso-util reconfigure --repoint-psc psc.company.com --username administrator --domain-name vsphere.local --passwd Password1! Validating Provided Configuration ... Validation Completed Successfully. Executing reconfiguring steps. This will take few minutes to complete. Please wait ... Stopping all the services ... All services stopped. Starting vmafd service. Successfully joined the external PSC psc.company.com Cleaning up... Cleanup completed Starting all the services ... Started all the services. The vCenter Server has been successfully reconfigured and repointed to the external Platform Services Controller psc.company.com. Command> Login to vCSA to verify functionality. Verify backup applications or appliances connect to the vCSA. Delete (commit) your open snapshot of the vCSA. The final thing will be to resolve the "Performance Charts Service Health Alarm". On one of the external PSCs run the following commands to remove the old embedded PSC. > shell.set --enable True > shell # cd /usr/lib/vmidentity/tools/scripts/ # ./lstool.py list --ep-type com.vmware.cis.cs.identity.sso --no-check-cert --url https://psc.company.com/lookupservice/sdk 2> /dev/null # ./lstool.py unregister --user administrator@vsphere.local --password Password1! --id a1b2c3e4-a1b2-a1b2-a1b2-a1b2c3d4e5f6 --no-check-cert --url https://psc.company.com/lookupservice/sdk # ./lstool.py list --ep-type com.vmware.cis.cs.identity.sso --no-check-cert --url https://psc.company.com/lookupservice/sdk 2> /dev/null On all impacted VCSAs, run the following commands to restart the performance service. > service-control --stop vmware-perfcharts > service-control --start vmware-perfcharts ---- Migrate from embedded to external PSC:\\ http://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.upgrade.doc%2FGUID-E7DFB362-1875-4BCF-AB84-4F21408F87A6.html Re-point vCSA to different PSC:\\ https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2113917 Resolve Performance Charts Service Health Alarm:\\ https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2131327