Creating connection profile
Prerequisites
- The Active Directory user’s account exist in Active Directory.
- The iDRAC and host are configured for Active Directory based authentication.
About this task
Steps
In the Connection Profile Description dialog box, click Next.
In the Connection Profile Name and Credentials dialog box, enter the connection Profile Name and connection profile Description, which is optional.
In the Connection Profile Name and Credentials dialog box, under iDRAC Credentials, do either of the following actions, depending on configuring iDRAC with or without Active Directory:
NOTE: The iDRAC account requires administrative privileges for updating firmware, applying hardware profiles, applying system profiles in 14th generation servers, and deploying hypervisor.- The iDRAC IPs that are already configured and enabled for Active Directory
on which you want to use Active Directory, select Use Active
Directory; otherwise scroll down to configure the iDRAC
credentials.
- In Active Directory User Name, type the user name. Type the user name in one of these formats: domain\username or username@domain. The user name is limited to 256.
- In Active Directory Password, type the password. The password is limited to 127 characters.
- In Verify Password, type the password again.
- Depending
on your requirement, perform one of the following actions:
- To download and store the iDRAC certificate and validate it during all future connections, select Enable Certificate Check.
- To not store and perform the iDRAC certificate check during all future connections, clear Enable Certificate Check.
- To configure the iDRAC credentials without Active Directory, perform
the following tasks:
- In User Name, type the user name. The user name is limited to 16 characters. See the iDRAC Documentation for information about user name restrictions for the version of iDRAC that you are using.
- In Password, type the password. The password is limited to 20 characters.
- In Verify Password, type the password again.
- Perform one
of the following actions:
- To download and store the iDRAC certificate, and validate it during all future connections, select Enable Certificate Check.
- To not store and perform the iDRAC certificate check during all future connections, clear Enable Certificate Check.
- The iDRAC IPs that are already configured and enabled for Active Directory
on which you want to use Active Directory, select Use Active
Directory; otherwise scroll down to configure the iDRAC
credentials.
In Host Root, perform one of the following steps:
- The hosts that are already configured and enabled for Active Directory
on which you want to use Active Directory, select Use Active
Directory, and perform the following steps; otherwise
configure your host credentials:
- In Active
Directory User Name, type the user name. Type
the user name in one of these formats: domain\username or username@domain. The user name is limited to 256 characters.NOTE: For host user name and domain restrictions, see the following:
Host user name requirements:
- Between 1 and 64 characters long
- No nonprintable characters
- No Invalid characters, such as " / \ [ ] : ; | = , + * ? < > @
Host domain requirements:
- Between 1 and 64 characters long
- First character must be alphabetical.
- Cannot contain a space.
- No Invalid characters, such as " / \ [ ] : ; | = , + * ? < > @
- In Active Directory Password, type the password. The password is limited to 127 characters.
- In Verify Password, type the password again.
- Perform
one of the following actions:
- To download and store the host certificate, and validate it during all future connections, select Enable Certificate Check.
- To not store and perform the iDRAC certificate check during all future connections, clear Enable Certificate Check.
- In Active
Directory User Name, type the user name. Type
the user name in one of these formats: domain\username or username@domain. The user name is limited to 256 characters.
- To
configure host credentials without Active Directory, perform the following
tasks:
- In User Name, the user name is root, which is the default user name and you cannot change the user name. However, if the Active Directory is set, you can choose any Active Directory user and not root.
- In Password, type the password. The password is limited
to 127 characters.NOTE: The OMSA credentials are the same credentials that are used for the ESXi hosts.
- In Verify Password, type the password again.
- Perform one
of the following actions:
- To download and store the host certificate, and validate it during all future connections, select Enable Certificate Check.
- To not store and perform the host certificate check during all future connections, clear Enable Certificate Check.
- The hosts that are already configured and enabled for Active Directory
on which you want to use Active Directory, select Use Active
Directory, and perform the following steps; otherwise
configure your host credentials:
Click Next.
In the Connection Profile Associated Hosts dialog box, select the hosts for the connection profile and click OK.
To test the connection profile, select one or more hosts and click Test Connection.
NOTE: This step is optional, and checks the host and iDRAC credentials. Although this step is optional, it is recommended that you test the connection profile.NOTE: The test connection fails for all hosts running ESXi 6.5 and/or later that has the WBEM service disabled. For such hosts, WBEM service is automatically enabled when you perform inventory on those hosts. Although the test connection fails, it is recommended that you complete the connection profile wizard actions, run the inventory on the hosts, and then test the connection profile again.To complete the creation of profile, click Next.
After you click next, all details that you provide in this wizard is saved and you cannot modify the details from the wizard. You can modify or create more connection profiles for this vCenter detail from the Connection Profiles page after completing the configuration from the configuration wizard. See Modifying connection profile topic in this guide..
After hosts are added to connection profile, the IP address of OMIVV is automatically set to SNMP trap destination of host's iDRAC, and OMIVV automatically enables the Web-Based Enterprise Management (WBEM) service for ESXi 6.5 hosts. OMIVV uses the WBEM service to properly synchronize the ESXi host and the iDRAC relationships. If configuring the SNMP trap destination fails for particular hosts, and/or enabling the WBEM service fails for particular hosts, those hosts are listed as noncomplaint. To view the noncomplaint hosts that require SNMP trap destination to be reconfigured and/or WBEM services to be enabled, see Reporting and fixing compliance for vSphere hosts.