Nerdy Drunk

Migrating from single vCenter Server Appliance (vCSA) with embedded Platform Services Controller (PSC) to vCenter Server Appliance (vCSA) with external Platform Services Controller (PSC).

Enable shell and find SSO domain site name of vCSA.

Command> shell.set --enabled True
Command> shell
vcenter:~ # /usr/lib/vmware-vmafd/bin/vmafd-cli get-site-name --server-name localhost
Default-First-Site

Verify the embedded PSC is running the following services:

• VMware License Service
• VMware Identity Management Service
• VMware Security Token Service
• VMware Certificate Service
• VMware Directory Service

vcenter:~ # service-control --status vmware-cis-license vmware-sts-idmd vmware-stsd vmcad vmdird

Create a snapshot of your exsting vCSA

Deploy external PSC

Reconnect vCSA to external PSC

Command> cmsso-util reconfigure --repoint-psc psc.company.com --username administrator --domain-name vsphere.local --passwd Password1!
Validating Provided Configuration ...
Validation Completed Successfully.
Executing reconfiguring steps. This will take few minutes to complete.
Please wait ...
Stopping all the services ...
All services stopped.
Starting vmafd service.
Successfully joined the external PSC psc.company.com
Cleaning up...
Cleanup completed
Starting all the services ...
Started all the services.
The vCenter Server has been successfully reconfigured and repointed to the external Platform Services Controller psc.company.com.
Command>

Login to vCSA to verify functionality.

Verify backup applications or appliances connect to the vCSA.

Delete (commit) your open snapshot of the vCSA.

The final thing will be to resolve the “Performance Charts Service Health Alarm”. On one of the external PSCs run the following commands to remove the old embedded PSC.

> shell.set --enable True
> shell
# cd /usr/lib/vmidentity/tools/scripts/
# ./lstool.py list --ep-type com.vmware.cis.cs.identity.sso --no-check-cert --url https://psc.company.com/lookupservice/sdk 2> /dev/null
# ./lstool.py unregister --user administrator@vsphere.local --password Password1! --id a1b2c3e4-a1b2-a1b2-a1b2-a1b2c3d4e5f6 --no-check-cert --url https://psc.company.com/lookupservice/sdk
# ./lstool.py list --ep-type com.vmware.cis.cs.identity.sso --no-check-cert --url https://psc.company.com/lookupservice/sdk 2> /dev/null

On all impacted VCSAs, run the following commands to restart the performance service.

> service-control --stop vmware-perfcharts
> service-control --start vmware-perfcharts

Migrate from embedded to external PSC:
http://pubs.vmware.com/vsphere-60/index.jsp?topic=%2Fcom.vmware.vsphere.upgrade.doc%2FGUID-E7DFB362-1875-4BCF-AB84-4F21408F87A6.html

Re-point vCSA to different PSC:
https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2113917

Resolve Performance Charts Service Health Alarm:
https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2131327