In this post I am sharing configure vCSA6.7 to an Active Directory Domain From HTML Client and other options available there ,additionally command to join , dis-join and verify domain status .
Join AD Domain
- Open vSphere HTML Client
- Login as Single Sign-On Administrator or a user with global permissions.
- Navigate to Administration >Configuration
From Identify Sources Tab you can verify available domain and by default Only SSO and Localos will be available
- Navigate to Tab Active Directory Domain and Click on Join AD
- Add the Domain Name and Username and Password has permission to join to Active Directory and Click Join
Note:- You have to reboot the Appliance to apply the changes
When the appliance is back online it will be part of Active Directory domain but you have to the domain to identity sources
- Login to vCenter with SSO Admin account Navigate to Administration >Configuration->Identity Sources
- Select ADD IDENTITY SOURCE and Select Use machine account and click OK
And you can view your domain is listed on the identity Source tab
Additionally you can do below configuration form same window
- Remove the Joined Domain
- Create Login Message
- Smart Card Authentication
- Policies – Password Policy , Lockout Policy and Token Policy
Next add a Permission from Active Directory
Navigate to the Object , here I choose vCenter – > Permission -> Select the “+” symbol to add permission
From User Option Select the Domain Name
Search the Desired Username
Select the desired Role and select the Propagate to Children Option and Click OK
Join to AD Domain using CLI
Also you can perform joining to active directory from command line
- Connect to the vCenter Server Appliance with SSH
- Activate the bash shell
#Command> shell
- Use the domainjoin-cli tool to join , dis-join and verify status of domain
Join to AD using CLI
# /opt/likewise/bin/domainjoin-cli join [domain] [user name] [password]
Note:-As a security reason you have to add only username and it will prompt for password and it won’t be visible
Verify the Domain status form CLI
Dis-join from a Domain From CLI