Milestone 2 AD, vCenter, and SSO Integration - jacobwilliams100/sys-350 GitHub Wiki

VM Setup

Add WinServer 2019 iso to the isos folder on your datastore. It will be located on the Cyber Share X Drive.

image

Create a VM from the new iso

image

  • 8GB RAM

  • 2 CPUs

  • 80GB storage (thin)

image

Don't forget to add the iso as disk drive

image

Run the installation normally

make sure to select standard, desktop experience

image

Download updates

image

image

Installing SSH

wget https://raw.githubusercontent.com/gmcyber/480share/master/ssh-prep.ps1

Unblock-File .\windows-prep.ps1

.\windows-prep.ps1

Install VMWare Tools

image

image

Once you do this, turn the system off and change the network adapter to 350-internal, and start back up

image

Take a new snapshot called "Base"

image

IP settings:

image

Setting hostname:

image

Installing Active Directory and setting up forest:

image

New Named Domain Admin

image

DNS

Setting up records

image

Deliverable 1: Testing from mgmt1

image

Success!

VCenter Installation

Change mgmt1's DNS to 10.0.17.4 (DC1)

Add search domain too.

image

And add a DN

Mount the VSCA ISO as MGMT1's optical drive

image

Navigate to and run the installer

image

image

image

image

image

IMPORTANT: Enable Thin Disk Mode

image

IP Settings:

image

Let it load. will take some time.

image

image

Once again, it will take some loading.

image

image

After logging in, create new data center

image

Now add a host to the datacenter

image

image

image

Wait for it to turn on and the list will populate

image

Licensing

image

image

SSO Integration

We are going to join the AD Domain

image

Note: I had a LOT of difficulty with this stage. If you get errors...

-Make sure the timing is synced up on DC, EXSI, and vcenter

-Add a DNS Record to vcenter

image

image

image

Now reboot vcenter

image

It will be inaccessible for a bit

image

Add Domain Admins from the AD Domain as Administrators

image

You should now be able to log in as named domain admin.

image

Deliverables

Deliverable 1: SSH session from mgmt1 to yourname-adm@[email protected]. With your session show the logged in user, their primary ad groups, and the A records for your primary zone

image

Deliverable 2: Provide Screenshots that show:

Your current vCenter version

image

Valid vCenter license (have not been provided licenses yet.)

image

Valid vsphere license

image

Deliverable 3: Provide a screenshot showing your named domain administrator login in the upper right of the vCenter UI.

image

Reflection

This lab was a real challenge. A misconfiguration of my DNS kept causing me issues with vcenter and I eventually just had to rewrite all of my DNS record, and wipe and reinstall vcenter. DNS and Active Directory are already things I tend to have trouble with, but it was ultimately a learning experience. I also had a really hard time joining vcenter to the AD Domain. Getting their clocks to sync up was a real challenge. Even after getting the clocks fully sync'ed, for some reason it still would not join. The only way I could solve it in the end was by adding a DNS suffix to vcenter remotely. But in the end, I got everything working properly which is what matters.