VMware vCenter Configuration Manager Connector

Including:

• The name of the .NET assembly file

• The connection methodology

• The resource and link types that can be discovered

• The events that are generated

• The actions that can be called under workflow control

For compatibility and version support details, refer to the ASM Connector Matrix.

You should familiarize yourself with the information in Installing Connectors before installing any connectors, and read the Integration topics for more information on how to configure them.

Functionality

The VMware vCenter Configuration Manager connector allows organizations to enhance the following processes:

• Incident Management. Automatically discover machine resources into the ASM Core Federated CMDB for the purposes of incident classification, reporting, and routing.

• Asset Management. Automatically discover installed software into the ASM Core Federated CMDB for the purposes of comparing the actual deployments of software with software license assignments.

• Change Management. Automatically enforce the initiation of a formal Change Management process in ASM Core whenever a server administrator attempts to roll out changes (eg: Windows service packs or security bulletins) using VMware vCenter Configuration Manager.

Connector Details

Connector Installation

The steps below detail how to install the connector.

1. Download the connector zip package, save it in a temporary directory then unzip it.

2. The unzip folder should contain 4 sub-folders: Bin, Config, Doc, and vCM Scripts.

3. Prepare the vCM Database. See vCM Database Preparation.

4. Prepare the ASM Core Server. See ASM Core Server Preparation.

5. Configure a Connection Source. See Connection Source Creation.

vCM Database Preparation

A number of operations must be performed against the vCM database server as part of the connector installation. These operations must be performed by an account that is a database owner of the target database catalog such that any objects created in these steps should be created in the “dbo” schema.

Some of these operations are performed by shipped database script files (*.sql). Others should be performed by the SQL Server administration interface.

The connector connects solely to the main vCM database catalog. By default this will be called “VCM”; in some upgraded environments this may be “SCM” or “ECM”.

vCM utilizes additional database catalogs with suffixed names e.g.“VCM_Unix” and “VCM_Coll”. The database account used by the connector requires some access to one of these, the “Unix” database. However, the connector will never connect to this database directly.

1. Copy the contents of the vCM Scripts directory to your vCM database server.

2. Login to the SQL Server administration interface as an administrator.

3. Create a dedicated database login for the ASM connector.

4. On the main database catalog:

   • Run the provided SQL script Create_vSM_Connector_Objects.sql. (This creates the stored procedure used by the connector.)

   • Run the provided SQL script Grant_vSM_Connector_Access_Main.sql. (This creates the vSM_Connector database role and assigns it permissions.)

   • Add the dedicated login as a user to the catalog

   • Add the user as a member to the database role vSM_Connector.

   • Run the provided SQL script Enable_vCM_Integration.sql. (This enables vCM to create RFC events.)

5. On the “Unix” database catalog:

   • Run the provided SQL script Grant_vSM_Connector_Access_Unix.sql.

   • Run the provided SQL script Grant_vSM_Connector_Access_Unix.sql. (This creates the vSM_Connector database role and assigns it permissions.)

   • Add the dedicated login as a user to the catalog

   • Add the user as a member to the database role vSM_Connector.

Maintenance

If required at a later date, RFC events can be disabled by running the database script Disable_vCM_Integration.sql.

ASM Core Server Preparation

1. Copy the contents of the bin and config directories to the following locations on the ASM Core server:

2. In the ASM Core Server Console, execute the SQL script Infra.Connector.vCM.Install.scp against the target system.

Restart the following Windows services:

• The World Wide Web Publishing Service

• The ASM Connector Service

Connection Source Creation

When creating a new VMware vCenter Configuration Manager source from the Source option of the Integration Platform, some specific parameters have to be entered as follows:

Two modes of authentication against the database are supported:

• SQL Server Authentication

• Integrated Windows Authentication

SQL Server Authentication

In SQL Server Authentication the connector uses the credentials of a user created within the database. In this scenario, the credentials of that user are specified within the “DB User ID” and “DB Password” parameters.

Integrated Windows Authentication

In Integrated Windows Authentication the connector is authenticated using the credentials of a Windows account granted permission to the database. When this method is used the “DB User ID” and “DB Password” parameters are ignored and should be left blank. Instead, connector is authenticated using the account of the executing process. To use this mode of authentication:

1. The “DB Connection String” parameter requires an addition suffix, “;Integrated Security=SSPI”. E.g. Server=server-name;Database=main;Integrated Security=SSPI Where main is the name of the main database (see previous explanations about main vCM database).

2. The following processes must be configured to execute using a Windows account with the prerequisite database permissions.

   • The IIS Application Pool used by the ASM Core virtual directory (directories)

   • The various ASM Core Windows services

Incident Management

The VMware vCenter Configuration Manager connector allows you to populate your Federated CMDB with machines (ie: physical servers, virtual servers, desktops, and laptops) for the purposes of incident classification, reporting, and routing.

Resource Types

Machine

A resource that represents a single computer.

Recommended Configuration

Resources

We recommend that you:

• Create a Machine CMDB Item Type and design a screen for it.

• Create a Machine Template Eg:\

• Set up a resource mapping in the Integration Platform to map vCM Machine resources and attributes onto ASM Core Machine CIs. The key fields to consider mapping are:

You may also consider mapping other attributes such as Manufacturer, Model, OS Vendor, OS Name, and OS Version which can be useful for incident diagnosis, routing, and reporting purposes.

Software License Management

The VMware vCenter Configuration Manager connector allows you to populate your Federated CMDB with the software actually installed on each machine. This is intended to be used in conjunction with the Asset Management capabilities of ASM Core, which are used to maintain your inventory of software licenses and their current assignments. By comparing the software actually installed on machines with the current license assignments, you can determine whether you are under or over licensed.

Resource Types

Windows Software

A resource that represents a specific minor version of a Windows software product that is installed on one or more machines.

Unix Software

A resource that represents a specific minor version of a UNIX software product that is installed on one or more machines.

Link Types

Windows Software Installed On

A relationship between a Machine resource and a Windows Software resource indicating that the software is installed on that machine.

Unix Software Installed On

A relationship between a Machine resource and a UNIX Software resource indicating that the software is installed on that machine.

Recommended Configuration

Resources

It is recommended to either:

• Store both Windows and UNIX software in the in-built Software Product CMDB Item type.

• Create separate descendent CMDB Item Types for Windows Software and UNIX Software.

It is recommended to map the VCM Resource attribute Product Name to the ASM Core Configuration Item attribute Title.

There are three possible ways to manage versions of software products in the CMDB as follows:

• Each software product is stored as a single Configuration Item. To support this scenario, set up a Matching Rule based on:

• Product Name

• Each major version of a software product is stored as a single Configuration Item. To support this scenario, add a Major Version attribute to your CMDB Item and set up a Matching Rule based on:

  • Product Name

  • Major Version

  
• Each minor version of a Software Product is stored as a single Configuration Item. To support this scenario, add Major Version and Minor Version attributes to your CMDB Item and set up a Matching Rule based on:

  • Product Name

  • Major Version

  • Minor Version

Links

It is recommended that the Installed On links be imported using a special link type such as:

• Category should be set to Summary. A single machine may have a large number of software products installed; similarly, a single software product may be installed on a very large number of machines. Therefore, rendering software installations in a CMDB linking can greatly reduce the readability of the CMDB Linking diagram and obfuscate those relationships that should be clearly visible in the diagram. This configuration is used to hide software installations on the diagram allowing more significant impact relationships to be more clearly presented.

• Principal should be set to the CMDB Item Type of the machine CMDB Items imported from vCM, or a common ancestor thereof. This could be as simple as Configuration Item. Optionally, it can be helpful to specify a descriptive role name for Principal such as Installed On.

• Summarized should be set to Software Product or whatever descendent type is being assigned to your software product CMDB Items imported from vCM. Optionally, it can be helpful to specify a descriptive role name for Summarized such as Installed Software.\

Change Management

The VMware vCenter Configuration Manager connector allows you to automatically enforce the initiation of a formal Change Management process in ASM Core whenever a server administrator attempts to roll out changes (eg: Windows service packs or security bulletins) using VMware vCenter Configuration Manager.

Event Types

RFC Event

An RFC Event represents a notification that a job has been created within vCM to affect some change in the environment that needs to be approved in order to proceed.

The event type exposes the following fields:

Outbound Actions

The two Outbound Actions published by the connector are:

• Approve Change. This action allows a change (as identified by a previous event) to proceed.

• Deny Change. This action stops a change (as identified by a previous event) from proceeding.

Both actions have the same parameters as follows:

Input Parameters

Output Parameters

The same fields exposed during receipt of the initial event are available as parameters from actions.

Error Handling

All outbound actions in the connector are attempted synchronously, with one of the following three outcomes possible:

Recommended Configuration

At a high level, the steps involved in setting up Change Management are as follows:

1. Configure vCM Service Desk Integration. See the vCM documentation for details.

2. Model your Change Management process using the ASM Core Workflow Template Administration.

3. Map RFC Events through to your process using the ASM Core Integration Platform.

4. Add Outbound Actions tasks to your process to Approve / Deny changes in vCM.

Modeling your Change Management Process

Your Change Management process should be modeled using the ASM Core Workflow Template Administration. A simple Change Management process can be seen below:

Create a Screen Set for your change process, and add the following extension fields to it. Display these fields as read only fields in your Request Details screen within that Screen Set.

Mapping RFC Events

The ASM Core Integration Platform should be used to map the receipt of vCM RFC Events onto the initiation of a request:

All other Incoming Transactions should be configured to Take No Action as follows:

It is recommended to set up the following incoming field mappings:

The mapping of the GUID is important as this is needed to approve or deny the change. The mapping of the Machine CIs is important as it allows impact analysis to be performed.

Approving / Denying Changes

At appropriate points in your ASM Core Change Management process, you should insert Outbound Action tasks that approve or deny changes. The only important field to map is the RFC Event GUID as follows:

The RFC No field will be automatically populated with the ASM Core request number (eg: Request#123). It is possible to overwrite this default format by providing an alternative mapping for this field (eg: RFC352).

The RFC Notes field can also optionally be mapped to pass additional information back to vCM.