19/01/2015

VMwareKB:UpdatingthevCenterSingleSignOnserverdatabaseconfiguration

KnowledgeBase

UpdatingthevCenterSingleSignOnserverdatabaseconfiguration(2045528)
Symptoms
AfteryouchangetheSQLportassignmentofthevCenterSingleSignOn(SSO)databaseserver,thevCenterSingleSignOnservicefails.AsaresultthevCenterServerservicefailstostart
AftermovingtheSSOdatabasefromonehosttoanother,youneedtochangethedatabaseconfigurationforthevCenterSSOserver
WhenmigratingtheSSOdatabasetheRSA_USERcredentialsaredifferentonthedestinationhost

Purpose
ThisarticlesprovidesrecommendationsonhowtomodifytheSSOconfigurationwhen:
ModifyingtheSQLserverport
MovingtheSSOdatabasetoanotherSQLhost.
ModifyingtheRSA_USERpassword

Cause
WhenyouchangetheSQLportassignmentofthevCenterSingleSignOndatabaseserver,vCenterSingleSignOnservicefailstostart.Asaresult,vCenterServerfailstostart.
ThisissuecanoccuriftheportassignmentfortheSQLserverhaschanged.ForexampleiftheSQLServerExpressEditionisconfiguredtousedynamicports,theportassignmentmightchangewhenyourebootthe
system.

Resolution
WhenyouchangetheSQLportassignmentoftheSingleSignOndatabaseserver,SingleSignOnfails.Asaresult,vCenterServerfailstostart.

ThisissuecanoccurifportassignmentfortheSQLserverhaschanged.ForexampleifSQLServerExpressEditionisconfiguredtousedynamicports,theportassignmentmightchangewhenyourebootthesystem.

WhenyouchangetheSQLportnumberoftheSSOdatabaseserveryoumustreconfigureSSOwiththenewportnumber.

ToreconfigureSSOwiththenewportnumber:
1. StopthevCenterSingleSignOnservice.Formoreinformation,seeStopping,starting,orrestartingvCenterservices(1003895)(/selfservice/search.do?cmd=displayKC&docType=kc&docTypeID=DT_KB_1_1&externalId=1003895).
2. Openanelevatedcommandprompt.Formoreinformation,seeOpeningacommandorshellprompt(1003892)(/selfservice/search.do?cmd=displayKC&docType=kc&docTypeID=DT_KB_1_1&externalId=1003892).
3. Runthiscommand:

SSO_Install_Directory\utils>ssocliconfigureriataconfiguredbdatabasehostdatabase_server_namedatabaseport
new_database_portmmaster_password
Bydefault,SSO_Install_DirectoryisC:\ProgramFiles\VMware\Infrastructure\SSOServer.
4. Openconfig.propertiesfile,locatedatSSO_Install_Directory\webapps\lookupservice\WEBINF\classes,usingatexteditor.
5. Locatethelinedb.url=andreplacetheportnumberwiththenewvalue.
6. StartthevCenterSingleSignOnservice.
ForinformationaboutfindingthecurrentvalueofadynamicportforSQLServer,seetheMicrosoftKnowledgeBasearticle823938(http://support.microsoft.com/kb/823938).

Note:TheprecedinglinkwascorrectasofJanuary31,2014.Ifyoufindthelinkisbroken,providefeedbackandaVMwareemployeewillupdatethelink.

IfyoumovetheSSOdatabasefromoneSQLhosttoanotherhostyouneedtoupdatetheSSOconfigurationwiththenewSQLserverhostinformation
Note:BydefaultthepermissionsdonotexistontheSQLserverand,afterthedatabaseismoved,theRSA_USERandRSA_DBAneedtobecreated.SeethevSphereInstallationandSetupguidelocatedatvSphere
InstallationandSetupGuide(https://www.vmware.com/support/pubs/vsphereesxivcenterserverpubs.html).
IfyouhavemovedtheSSODBandthedatabaseusercredentialshavechangedorthedatabaseserverloginpasswordhasexpired,youmustupdatetheSSOconfiguration.

TodeterminewhatdatabaseSSOisconfiguredtouse:
1. Openanelevatedcommandprompt.Formoreinformation,seeOpeningacommandorshellprompt(1003892)(/selfservice/search.do?cmd=displayKC&docType=kc&docTypeID=DT_KB_1_1&externalId=1003892).
2. Atacommandline,run:

SSO_Install_Directory\utils>ssoclimanagesecretsalistallkeys
Bydefault,SSO_Install_Directoryis:C:\ProgramFiles\VMware\Infrastructure\SSOServer
3. Whenprompted,supplythemasterpassword.
4. Updatetheconfigurationusingthecommand:

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2045528

1/3

19/01/2015

VMwareKB:UpdatingthevCenterSingleSignOnserverdatabaseconfiguration
ssocliconfigureriataconfiguredb
Forexample:

SSO_Install_Directory\utils>ssocliconfigureriataconfiguredbdatabasehostnew_host_namedatabaseport
new_SQL_server_portmmaster_password
SeetheAdditionalInformationsectionforallotheroptions.
Note:OntheserverwhereSSOisinstalled,youcanalsoviewthejndi.propertiesfileinthedefaultlocation(C:\Program
Files\VMware\Infrastructure\SSOServer\webapps\ims\webinf\classes\)toseethedatabaseconfigurationfortheSSOserverandverifythevalueswhichneedtobeupdated.
Mostcommonlythesevaluesare:

com.rsa.db.hostname
com.rsa.instanceName
OntheserverwhereSSOisinstalled,editthefileC:\ProgramFiles\VMware\Infrastructure\SSOServer\webapps\lookupservice\WEB
INF\classes\config.propertiesandmodifyallvaluesthatneedtobeupdated.Mostcommonlythisisthevalueunder:

##DBhost
Note:IftheRSA_USERcredentialsaredifferentonthedestinationhost,updatetheconfiguration.
ToreconfigureSSOwiththenewRSA_USERpassword:
1. StopthevCenterSingleSignOnservice.Formoreinformation,seeStopping,starting,orrestartingvCenterservices(/selfservice/search.do?cmd=displayKC&docType=kc&docTypeID=DT_KB_1_1&externalId=1003895).
2. LogintothevCenterSingleSignOndatabaseusingSQLManagementStudioorSQL*PlusandprovidetheRSA_USERcredentialstoensuretheRSA_USER'spasswordhasbeenchanged.
Note:TheRSA_DBAuserisusedonlyduringtheinitialinstallationofvCenterSingleSignOn.ApasswordchangeonRSA_DBAisnotrequired.
3. Openanelevatedcommandprompt.Formoreinformation,seeOpeningacommandorshellprompt(/selfservice/search.do?cmd=displayKC&docType=kc&docTypeID=DT_KB_1_1&externalId=1003892).
4. Runthiscommand:
ForMicrosoftSQL:

ssocli.cmdconfigureriataconfiguredbrsauserpasswordnew_db_passwordrsauserNew_RSA_USER
ForOracle:

rsautilconfigureriataconfiguredbrsauserpasswordnew_db_passwordrsauserPN_RSA_USERserverinstancename
NOTUSED
Note:BydefaulttheSSO_Install_DirectoryisatC:\ProgramFiles\VMware\Infrastructure\SSOServer.
5. Opentheconfig.propertiesfile,locatedatSSO_Install_Directory\webapps\lookupservice\WEBINF\classesusingatexteditor.
6. Locatethelinedb.pass=andreplacetheoldpasswordwiththenewpassword.
7. Saveandexitthefile.
8. StartthevCenterSingleSignOnserver(service).
Note:DatabaseloginaccountsdonotexpirewhenusingtheembeddedMicrosoftSQLServerExpressDatabase.

AdditionalInformation
Fulllistofconfiguredbarguments:

C:\ProgramFiles\VMware\Infrastructure\SSOServer\utils>ssocliconfigureriataconfiguredbhelp
Usage:rsautilconfigureriataconfiguredbarguments

Option
Description

m
masterpassword

Masterpassword.Required.

databasehost

DatabasehostnameorIPaddress.Optional,unlessitisbeingupdatedtoanewvalue.
IfaliteralIPv6addressisspecified,itmustbeenclosedin"["and"]"characters,asperRFC2732.

databaseport

Databaseportnumber.Optional,unlessitisbeingupdatedtoanewvalue.

serverinstancename Optional.NeededwhenMSSQLServerisdeployedtousedynamicport.
rsauser

Theuseraccounttouseforconnectingtothedatabase.Optional,unlessitisbeingupdatedtoanewvalue.

rsauserpassword

Optional,unlessthersauserargumentisalsopresented.Tocausethepasswordtobepromptedfor,specifythersauserargumentonthecommandline.

SeeAlso
Openingacommandorshellprompt(1003892)(http://kb.vmware.com/kb/1003892)
Stopping,starting,orrestartingVMwarevCenterServerservices(1003895)(http://kb.vmware.com/kb/1003895)
vCenterSingleSignOnfailsatstartuporduringinitialization(2033164)(http://kb.vmware.com/kb/2033164)
UpdateVMwarevCenterServer5.1SingleSignOnsettingsafteryouchangethehostnameorportofthedatabaseserver(2033516)(http://kb.vmware.com/kb/2033516)
vCenterSingleSignOn(2080426)(http://kb.vmware.com/kb/2080426)
vCenterSingleSignOn(2102157)(http://kb.vmware.com/kb/2102157)

RequestaProductFeature
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2045528

2/3

19/01/2015

VMwareKB:UpdatingthevCenterSingleSignOnserverdatabaseconfiguration

TorequestanewproductfeatureortoprovidefeedbackonaVMwareproduct,pleasevisittheRequestaProductFeature(http://www.vmware.com/contact/contactus.html?department=prod_request)page.
Permalinkto:UpdatingthevCenterSingleSignOnserverdatabaseconfiguration(http://kb.vmware.com/kb/2045528)
Readourblog(http://blogs.vmware.com/kb/)

WatchKBTV(http://blogs.vmware.com/kbtv/)

Followus(http://www.twitter.com/vmwarekb)

RequestNewContent(http://www.vmware.com/landing_pages/knowledgebasecontent

request.html)

1(javascript:void(rate(1,this)))
2(javascript:void(rate(2,this)))
3(javascript:void(rate(3,this)))
4(javascript:void(rate(4,this)))
5(javascript:void(rate(5,this)))
13Ratings

Actions
BookmarkDocument(javascript:addBookmark(actionBoxUtil.docURL,actionBoxUtil.docTitle))
PrintDocument(javascript:window.print())
SubscribetoDocument(/selfservice/microsites/microsite.do?cmd=displayKC&docType=kc&docTypeID=DT_KB_1_1&externalId=2045528&format=rss)
(http://www.addthis.com/bookmark.php?v=250&username=xa4b5f42f36e60a29e)

KB:2045528
Updated:Dec12,2014
Categories:
Howto
Informational
Troubleshooting
Languages:
English
Product(s):
VMwarevCenterServer
ProductVersion(s):
VMwarevCenterServer5.1.x

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2045528

3/3