VMware Cloud Community
tractng
Enthusiast
Enthusiast

Administrator account for vCenter

During the vCenter installation, what is the preferred entry for the administrator account for SSO?  Do still keep "vSphere" - for example "administrator@vSphere.mydomain.net"  I ran through the setup on test environment really late last night and notice this morning my account was "administrator@mydomain.net".  Trying to avoid any headache in the future with SSO.

vCenter is 6.5.

TT

Reply
0 Kudos
8 Replies
daphnissov
Immortal
Immortal

When setting up a vCenter, do not change the local SSO domain from the default of "vsphere.local" unless you know exactly what and why you're doing it. The default account would therefore be administrator@vsphere.local.

Reply
0 Kudos
itproguide
Contributor
Contributor

The domain name is used by the VMware Directory Service (vmdir) for all Lightweight Directory Access Protocol (LDAP) internal structuring.

With vSphere 6.0 and later, you can give your vSphere domain a unique name. To prevent authentication conflicts, use a name that is not used by OpenLDAP, Microsoft Active Directory, and other directory services

Reply
0 Kudos
tractng
Enthusiast
Enthusiast

Yea.  I have always seen "Administrator@vSphere.local" as the default on version 5.5.  I need to have it like "Administrator@vSphere.mydomain.net" by specifying a unique name for the domain during setup.

Thanks.

Reply
0 Kudos
daphnissov
Immortal
Immortal

It's the default even today unless you changed the SSO domain which, again, just don't.

Reply
0 Kudos
tractng
Enthusiast
Enthusiast

Reply
0 Kudos
HassanAlKak88
Expert
Expert

Hello,

I recommend to check the below:

https://haveyoutriedreinstalling.com/2016/04/26/caution-custom-vsphere-local-domains/

https://astgl.com/2017/09/28/changing-vcenter-default-domain/

Please consider marking this answer "CORRECT" or "Helpful" if you think your question have been answered correctly.

Cheers,

VCIX6-NV|VCP-NV|VCP-DC|

@KakHassan

linkedin.com/in/hassanalkak


If my reply was helpful, I kindly ask you to like it and mark it as a solution

Regards,
Hassan Alkak
Reply
0 Kudos
GayathriS
Expert
Expert

Hi

.Each Platform Services Controller is associated with a vCenter Single Sign-On domain

2. The domain name is used by the VMware Directory Service (vmdir) for all Lightweight Directory Access Protocol (LDAP) internal structuring

2. Default domain name - vsphere.local for all vSphere versions

    Condition I -

               a. Your vSphere domain name is (vsphere.local) till vSphere 5.5 and you don't have option to change it.
               b. If you are upgrading from vSphere 5.5 to 6.x then your vSphere domain name would remains same (vsphere.local) and you don't have option to change it.

    Condition II -
               a. When you install a Platform Services Controller, you are prompted to create a vCenter Single Sign-On domain or join an existing domain

               b. With vSphere 6.0 and later, you can give your vSphere domain a unique name ( you can change domain name now in fresh/new installation)

Please consider marking this answer as "correct" or "helpful" if you think your questions have been answered.

Reply
0 Kudos
Devi94
Hot Shot
Hot Shot

Keep it as administrator@vsphere.local. That makes your setup easy.

Reply
0 Kudos