Shutdown and Startup

09 FEB 2021
VMware Validated Design 6.2
VMware Cloud Foundation 4.2
Shutdown and Startup

You can find the most up-to-date technical documentation on the VMware website at:

https://docs.vmware.com/

VMware, Inc.
3401 Hillview Ave.
Palo Alto, CA 94304
www.vmware.com

©
Copyright 2020-2021 VMware, Inc. All rights reserved. Copyright and trademark information.

VMware, Inc. 2
 Contents

1 About VMware Validated Design Shutdown and Startup 5

2 SDDC Shutdown 8
Shut Down the vSphere with Tanzu Workload Domain 8
Get Virtual Machine to Host Mapping in the vSphere with Tanzu Workload Domain 10
Shut Down the vCenter Server Instance in the vSphere with Tanzu Workload Domain 10
Shut Down the Supervisor Control Plane Virtual Machines in the vSphere with Tanzu
Workload Domain 12
Shut Down the Tanzu Kubernetes Cluster Control Plane and Worker Virtual Machines in the
vSphere with Tanzu Workload Domain 12
Shut Down the Harbor Virtual Machines in the vSphere with Tanzu Workload Domain 13
Shut Down the vSphere Cluster Services Virtual Machines in the vSphere with Tanzu
Workload Domain 14
Shut Down the NSX-T Edge Nodes in the vSphere with Tanzu Workload Domain 14
Shut Down the NSX-T Managers in the vSphere with Tanzu Workload Domain 15
Shut Down vSAN and the ESXi Hosts in the vSphere with Tanzu Workload Domain 16
Shut Down the Virtual Infrastructure Workload Domain 17
Get Virtual Machine to Host Mapping in the Virtual Infrastructure Workload Domain 18
Shut Down the NSX-T Edge Nodes in the Virtual Infrastructure Workload Domain 19
Shut Down the NSX-T Managers in the Virtual Infrastructure Workload Domain 20
Shut Down the vCenter Server Instance in the Virtual Infrastructure Workload Domain 20
Shut Down the vSphere Cluster Services Virtual Machines in the Virtual Infrastructure
Workload Domain 21
Shut Down vSAN and the ESXi Hosts in the Virtual Infrastructure Workload Domain 22
Shut Down the Management Domain 23
Shut Down the vRealize Automation Virtual Machines in the Management Domain 25
Shut Down the vRealize Operations Manager Virtual Machines in the Management Domain
26
Shut Down the Cross-Region Workspace ONE Access Virtual Machines in the Management
Domain 28
Shut Down the vRealize Suite Lifecycle Manager Virtual Machine in the Management Domain
28
Shut Down the vRealize Log Insight Virtual Machines in the Management Domain 29
Shut Down the Region-Specific Workspace ONE Access Virtual Machine in the Management
Domain 30
Shut Down the NSX-T Edge Nodes in the Management Domain 30
Shut Down the NSX-T Managers in the Management Domain 31
Shut Down the SDDC Manager Virtual Machine in the Management Domain 32
Set DRS Automation Level of the Management Domain to Manual 32
Shut Down the vCenter Server Instance in the Management Domain 33

VMware, Inc. 3
Shutdown and Startup

Shut Down the vSphere Cluster Services Virtual Machines in the Management Domain 34
Shut Down vSAN and the ESXi Hosts in the Management Domain 35

3 SDDC Startup 37
Start the Management Domain 37
Start vSAN and the ESXi Hosts in the Management Domain 39
Start the vSphere Cluster Services in the Management Domain 41
Start the vCenter Server Instance in the Management Domain 41
Set DRS Automation Level of the Management Domain to Automatic 42
Start the SDDC Manager Virtual Machine in the Management Domain 43
Start the NSX-T Manager Virtual Machines in the Management Domain 43
Start the NSX-T Edge Nodes in the Management Domain 44
Start the Region-Specific Workspace ONE Access Virtual Machine in the Management
Domain 45
Start the vRealize Log Insight Virtual Machines in the Management Domain 46
Start the vRealize Suite Lifecycle Manager Virtual Machine in the Management Domain 47
Start the Cross-Region Workspace ONE Access Virtual Machines in the Management Domain
47
Start the vRealize Operations Manager Virtual Machines in the Management Domain 49
Start the vRealize Automation Virtual Machines in the Management Domain 50
Start the Virtual Infrastructure Workload Domain 51
Start vSAN and the ESXi Hosts in the Virtual Infrastructure Workload Domain 52
Start the vSphere Cluster Services in the Virtual Infrastructure Workload Domain 54
Start vCenter Server in the Virtual Infrastructure Workload Domain 54
Start the NSX-T Manager Virtual Machines in the Virtual Infrastructure Workload Domain
55
Start the NSX-T Edge Nodes in the Virtual Infrastructure Workload Domain 56
Start the vSphere with Tanzu Workload Domain 57
Start vSAN and the ESXi Hosts in the vSphere with Tanzu Workload Domain 58
Start the vSphere Cluster Services in the vSphere with Tanzu Workload Domain 60
Start vCenter the Server Instance in the vSphere with Tanzu Workload Domain 60
Start the NSX-T Manager Virtual Machines in the vSphere with Tanzu Workload Domain
62
Start the NSX-T Edge Nodes in the vSphere with Tanzu Workload Domain 63

VMware, Inc. 4
About VMware Validated Design
Shutdown and Startup 1
The Shutdown and Startup documentation provides step-by-step instructions for shutting down
and starting up the management virtual machines in Region A in a Software-Defined Data Center
(SDDC) deployment according to VMware Validated Design™. You perform these operations
after you apply a patch, upgrade, or restore the SDDC.

Intended Audience
This design is intended for cloud architects, infrastructure administrators, and cloud
administrators who are familiar with and want to use VMware software to automate and monitor
an SDDC that is deployed according to VMware Validated Design. The information is written
for experienced Windows or Linux system administrators who are familiar with virtual machine
technology and data center operations.

Supported VMware Cloud Foundation Version

Shutdown and Startup is compatible with VMware Cloud Foundation™ 4.2.

Required VMware Software on VMware Cloud Foundation

Shutdown and Startup is compliant and validated with certain VMware Workspace ONE Access
and vRealize Suite product versions on VMware Cloud Foundation. See VMware Validated Design
Release Notes.

Before You Apply This Guidance

You apply the instructions in Shutdown and Startup on environment with a certain configuration.
Following the prescriptive path of VMware Validated Design, you deploy the virtual infrastructure
of the management domain and workload domains by using VMware Cloud Foundation, then
manually adding a region-specific Workspace ONE Access instance for central user management
in NSX-T. Then, you use vRealize Suite Lifecycle Manager in VMware Cloud Foundation mode to
deploy the vRealize Suite components. For information on the deployment workflow of the SDDC
components, see Deployment of VMware Validated Design in Introducing VMware Validated
Design.

VMware, Inc. 5
Shutdown and Startup

VMware Validated Design follows an example naming convention. The naming provides
uniqueness of the objects across the SDDC. You can identify managed objects directly if you
use many components that are linked together, for example, multiple vCenter Server systems
working in Enhanced Linking Mode or management dashboards in vRealize Operations Manager
monitoring multiple instances of the same component. For information on the naming convention,
see Planning and Preparation Workbook.

Table 1-1. SDDC Management Components in VMware Validated Design

Domain Management Component Deployment Method

Management domain VMware ESXi™ hosts Manual deployment

®
VMware vCenter Server Automated deployment by using
Cloud Builder

NSX-T Manager and NSX-T Edge nodes Automated deployment by using

with a region-specific and cross-region Cloud Builder
virtual network segments

VMware vSAN™ as principal storage Automated deployment by using

Cloud Builder

NFS as supplemental storage Manual deployment

®
VMware Cloud Foundation SDDC Automated deployment by using
Manager™ Cloud Builder

Region-specific Workspace ONE Access Manual deployment

instance connected to NSX-T and
vRealize Log Insight

vRealize Suite Lifecycle Manager in Automated deployment by using

VMware Cloud Foundation mode SDDC Manager

Cross-region Workspace ONE Access Automated deployment by using

instance connected to vRealize vRealize Suite Lifecycle Manager in
Operations Manager, vRealize Log VMware Cloud Foundation mode
Insight, and vRealize Automation
®
VMware vRealize Operations Automated deployment by using
Manager™ vRealize Suite Lifecycle Manager in
VMware Cloud Foundation mode
®
VMware vRealize Log Insight™ Automated deployment by using
vRealize Suite Lifecycle Manager in
VMware Cloud Foundation mode
®
VMware vRealize Automation™ Automated deployment by using
vRealize Suite Lifecycle Manager in
VMware Cloud Foundation mode

Virtual infrastructure workload ESXi hosts Manual deployment

domain or vSphere with Tanzu
workload domain vCenter Server Automated deployment by using
SDDC Manager

NSX-T Manager and NSX-T Edge nodes Automated deployment by using

SDDC Manager

VMware, Inc. 6
Shutdown and Startup

Table 1-1. SDDC Management Components in VMware Validated Design (continued)

Domain Management Component Deployment Method

Principal storage Automated deployment by using

SDDC Manager

Supplemental storage Manual deployment

vSphere with Tanzu workload Kubernetes control plane node Validation by using SDDC Manager
domain and manual deployment

Tanzu Kubernetes cluster control plane Manual deployment

node

Tanzu Kubernetes cluster control worker Manual deployment

node

To use this document, you must be acquainted with the following guidance:

n Introducing VMware Validated Designs

n Optionally, the following architecture and design documentation:

n Architecture and Design for the Management Domain

n Architecture and Design for a Virtual Infrastructure Workload Domain or Architecture

and Design for a vSphere with with Tanzu Workload Domain

n Architecture and Design for Cloud Operations and Automation

n Planning and Preparation Workbook

n Deployment of the Management Domain in the First Region

n Deployment of a Virtual Infrastructure Workload Domain in the First Region or Deployment

of a vSphere with Tanzu Workload Domain in the First Region

n Deployment of Cloud Operations and Automation in the First Region

See Documentation Map for VMware Validated Design.

The same requirement applies if you are following the VMware Cloud Foundation documentation
to deploy the operations and automation solutions. See the VMware Cloud Foundation
documentation.

VMware, Inc. 7
SDDC Shutdown
2
To avoid data loss and maintain the SDDC components operational, you follow the specified
order when shutting down the management virtual machines.

Prerequisites

n Verify that you have complete backups of all management components.

n Verify that the management virtual machines are not running on snapshots.

n If a vSphere Storage APIs for Data Protection (VADP) based backup solution is running on
the management clusters, verify that the solution is properly shut down by following the
vendor guidance.

n To decrease the startup time before you shut down the management virtual machines,
migrate the management domain vCenter Server instance to the first ESXi host in the first
cluster in the management domain.

Shut Down the vSphere with Tanzu Workload Domain

In an SDDC deployed according to VMware Validated Design, in addition to the management
domain you deploy a single workload domain. If you deployed a vSphere with Tanzu workload
domain, you start shutting down the SDDC management components in the vSphere with Tanzu
workload domain before shutting down the SDDC components in the management domain.

If you deployed a virtual infrastructure workload domain, you skip this chapter and proceed
with shutting down the virtual infrastructure workload domain. See Shut Down the Virtual
Infrastructure Workload Domain.

You shut down the SDDC components in the vSphere with Tanzu workload domain in a specific
order to keep components operational by maintaining the necessary infrastructure, networking,
and management services before shutdown.

Table 2-1. Shutdown Order of the vSphere with Tanzu Workload Domain

Shutdown Order SDDC Component

1 vCenter Server

2 Supervisor Control Plane virtual machines

3 Tanzu Kubernetes Cluster control plane virtual machines

VMware, Inc. 8
Shutdown and Startup

Table 2-1. Shutdown Order of the vSphere with Tanzu Workload Domain (continued)

Shutdown Order SDDC Component

4 Tanzu Kubernetes Cluster worker virtual machines

5 Harbor virtual machines

6 vSphere Cluster Services virtual machines

7 NSX-T Edge nodes

8 NSX-T Managers

9 vSAN and ESXi hosts

Procedure

1 Get Virtual Machine to Host Mapping in the vSphere with Tanzu Workload Domain
Before you begin shutting down the vSphere with Tanzu workload domain, you get a
mapping between virtual machines in the workload domain and the ESXi hosts on which
they are deployed. You later use this mapping to log in to specific ESXi hosts and shut
specific management virtual machines down.

2 Shut Down the vCenter Server Instance in the vSphere with Tanzu Workload Domain
You begin shutting down the vSphere with Tanzu workload domain components by
stopping the Kubernetes services, checking the vSAN cluster health, and shutting down the
workload domain vCenter Server.

3 Shut Down the Supervisor Control Plane Virtual Machines in the vSphere with Tanzu
Workload Domain
Shut down the supervisor control plane virtual machines in the vSphere with Tanzu workload
domain.

4 Shut Down the Tanzu Kubernetes Cluster Control Plane and Worker Virtual Machines in the
vSphere with Tanzu Workload Domain
Shut down the Tanzu Kubernetes Cluster (TKC) control plane and worker virtual machines in
the vSphere with Tanzu workload domain.

5 Shut Down the Harbor Virtual Machines in the vSphere with Tanzu Workload Domain
You continue shutting down the vSphere with Tanzu workload domain by shutting down the
Harbor virtual machines that host the registry service in the supervisor cluster.

6 Shut Down the vSphere Cluster Services Virtual Machines in the vSphere with Tanzu
Workload Domain
You shut down the vSphere Cluster Services virtual machines in the vSphere with Tanzu
workload domain.

VMware, Inc. 9
Shutdown and Startup

7 Shut Down the NSX-T Edge Nodes in the vSphere with Tanzu Workload Domain
You begin shutting down the NSX-T Data Center infrastructure in the vSphere with Tanzu
workload domain by shutting down the NSX-T Edge nodes that provide north-south traffic
connectivity between the physical data center networks and the NSX-T SDN networks.

8 Shut Down the NSX-T Managers in the vSphere with Tanzu Workload Domain
You continue shutting down the NSX-T Data Center infrastructure in the vSphere with Tanzu
workload domain by shutting down the NSX-T Manager cluster that provides management
and control plane capabilities to Tanzu workloads.

9 Shut Down vSAN and the ESXi Hosts in the vSphere with Tanzu Workload Domain
You shut down vSAN and the ESXi hosts in the vSphere with Tanzu workload domain by
preparing the vSAN cluster for shutdown, placing each ESXi host in maintenance mode to
prevent any virtual machines being deployed to or starting up on the host, and shutting
down the host.

Get Virtual Machine to Host Mapping in the vSphere with Tanzu

Workload Domain
Before you begin shutting down the vSphere with Tanzu workload domain, you get a mapping
between virtual machines in the workload domain and the ESXi hosts on which they are
deployed. You later use this mapping to log in to specific ESXi hosts and shut specific
management virtual machines down.

Procedure

1 Start Windows PowerShell.

2 Connect to the vSphere with Tanzu workload domain vCenter Server by running the
command.

Connect-VIServer -Server sfo-w01-vc01.sfo.rainpole.io -User [email protected] -Password

vsphere_admin_password

3 Generate the virtual machine to host mapping by running the command.

Get-VM | Select Name,VMHost | Export-Csv -Path C:\VMToHostMapping.csv -NoTypeInformation

The C:\VMToHostMapping.csv file, containing the virtual machines to hosts mapping, is

created.

Shut Down the vCenter Server Instance in the vSphere with Tanzu
Workload Domain
You begin shutting down the vSphere with Tanzu workload domain components by stopping the
Kubernetes services, checking the vSAN cluster health, and shutting down the workload domain
vCenter Server.

VMware, Inc. 10
Shutdown and Startup

In an SDDC deployed according to VMware Validated Design, to provide centralized

management of the vSphere infrastructure and host the necessary Kubernetes services there
is one vCenter Server Appliance sfo-w01-vc01 deployed in the sfo-m01-fd-mgmt folder in the
sfo-m01-cl01 cluster in the management domain.

Prerequisites

Shut down any additional virtual machines running on the vSphere with Tanzu workload domain
ESXi hosts.

Procedure

1 Log in to the workload domain vCenter Server by using a Secure Shell (SSH) client.

Setting Value

FQDN sfo-w01-vc01.sfo.rainpole.io

User name root

Password vcenter_server_root_password

2 Stop the Kubernetes services by running the command.

vmon-cli -k wcp

3 Verify the Kubernetes services status by running the command.

vmon-cli -s wcp

4 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

5 In the Hosts and clusters inventory, expand the sfo-w01-vc01.sfo.rainpole.io tree and
expand the sfo-w01-dc01 data center.

6 Verify the vSAN health and resynchronization status.

a Select the sfo-w01-cl01 cluster and click the Monitor tab.

b In the left pane, navigate to vSAN > Skyline health and verify that there are no errors for
each of the vSAN health check categories.

c In the left pane, navigate to vSAN > Resyncing objects and verify that all syncrhonization
tasks are complete.

VMware, Inc. 11
Shutdown and Startup

7 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

8 Expand the sfo-m01-fd-mgmt folder.

9 Right-click the sfo-w01-vc01 workload domain vCenter Server virtual machine and select
Power > Shut down Guest OS.

10 In the confirmation dialog box, click Yes.

Shut Down the Supervisor Control Plane Virtual Machines in the

vSphere with Tanzu Workload Domain
Shut down the supervisor control plane virtual machines in the vSphere with Tanzu workload
domain.

In an SDDC deployed according to VMware Validated Design, to provide management, storage,

and networking services to the Tanzu workloads, there are three supervisor control plane virtual
machines deployed in the sfo-w01-cl01 supervisor cluster.

Procedure

1 In a Web browser, log in to the workload domain ESXi host that runs the first Kubernetes
control plane virtual machine by using the VMware Host Client.

Setting Value

URL https://<ESXi host running SupervisorControlPlane VM>

User name root

Password esxi_root_password

2 In the navigation pane, click Virtual machines.

3 Right-click the supervisor control plane virtual machine, and select Guest OS > Shut down.

4 In the confirmation dialog box, click Yes.

5 Repeat this procedure to shut down the remaining two supervisor control plane virtual
machines on the workload domain ESXi hosts which run them.

Shut Down the Tanzu Kubernetes Cluster Control Plane and Worker
Virtual Machines in the vSphere with Tanzu Workload Domain
Shut down the Tanzu Kubernetes Cluster (TKC) control plane and worker virtual machines in the
vSphere with Tanzu workload domain.

In an SDDC deployed according to VMware Validated Design, to provide management, storage,

and networking services to vSphere pods and external services such as the Tanzu Kubernetes
Grid Service API, there are three Tanzu Kubernetes Cluster control plane node and three Tanzu
Kubernetes Cluster worker node virtual machines placed in the sfo-w01-tkc01 namespace in the
sfo-w01-cl01 supervisor cluster.

VMware, Inc. 12
Shutdown and Startup

Procedure

1 In a Web browser, log in to the workload domain ESXi host that runs the first Tanzu
Kubernetes Cluster control plane virtual machine by using the VMware Host Client.

Setting Value

URL https://<ESXi host running TKC control plane VM>

User name root

Password esxi_root_password

2 In the navigation pane, click Virtual machines.

3 Right-click the Tanzu Kubernetes Cluster control plane virtual machine and select Guest OS >
Shut down.

4 In the confirmation dialog box, click Yes.

5 Repeat this procedure to shut down the remaining TKC control plane and TKC worker virtual
machines on the workload domain ESXi hosts that run them.

Shut Down the Harbor Virtual Machines in the vSphere with Tanzu
Workload Domain
You continue shutting down the vSphere with Tanzu workload domain by shutting down the
Harbor virtual machines that host the registry service in the supervisor cluster.

In an SDDC deployed according to VMware Validated Design, to provide private image registry
services, there is a locally managed deployment of VMware Harbor registry placed in the
vmware-system-registry namespace in the sfo-w01-cl01 supervisor cluster.

Procedure

1 In a Web browser, log in to the workload domain ESXi host that runs the first Harbor virtual
machine by using the VMware Host Client.

Setting Value

URL https://<ESXi host running Harbor VM>

User name root

Password esxi_root_password

2 In the navigation pane, click Virtual machines.

3 Right-click the harbor virtual machine and select Power > Power off.

4 In the Warning dialog box, click Yes.

5 Repeat the procedure to power off the remaining VMware Harbor virtual machines on the
workload domain ESXi hosts that run them.

VMware, Inc. 13
Shutdown and Startup

Shut Down the vSphere Cluster Services Virtual Machines in the

vSphere with Tanzu Workload Domain
You shut down the vSphere Cluster Services virtual machines in the vSphere with Tanzu workload
domain.

In an SDDC deployed according to VMware Validated Design, to ensure availability of services

such as vSphere DRS and vSphere HA to the workloads running on the clusters independent
of the vCenter Server instance availability, there is a locally managed deployment of vSphere
Cluster Services.

Procedure

1 In a Web browser, log in to the workload domain ESXi host that runs the first vSphere Cluster
Services virtual machine by using the VMware Host Client.

Setting Value

URL https://<ESXi host running vSphere Cluster Services

VM>

User name root

Password esxi_root_password

2 In the navigation pane, click Virtual machines.

3 Right-click the first vSphere Cluster Services virtual machine and select Guest OS > Shut
down.

4 In the confirmation dialog box, click Yes.

5 Repeat the procedure to shut down the remaining vSphere Cluster Services virtual machines
on the workload domain ESXi hosts that run them.

Shut Down the NSX-T Edge Nodes in the vSphere with Tanzu
Workload Domain
You begin shutting down the NSX-T Data Center infrastructure in the vSphere with Tanzu
workload domain by shutting down the NSX-T Edge nodes that provide north-south traffic
connectivity between the physical data center networks and the NSX-T SDN networks.

In an SDDC deployed according to VMware Validated Design, to provide services such as load
balancing and north-south connectivity, there are two NSX-T Edge nodes sfo-w01-en01 and sfo-
w01-en02 deployed in the sfo-w01-fd-edge virtual machine folder in the sfo-w01-cl01 supervisor
cluster.

VMware, Inc. 14
Shutdown and Startup

Procedure

1 Log in to the ESXi host that runs the first NSX-T Edge node by using the vSphere Host Client.

Setting Value

URL https://<ESXi host running NSX Edge VM>

User name root

Password esxi_root_password

2 In the navigation pane, click Virtual machines.

3 Right-click the sfo-w01-en01 NSX-T Edge node, and select Guest OS > Shut down

4 In the confirmation dialog box, click Yes.

5 Repeat this procedure to shut down the second NSX-T edge node sfo-w01-en02.

Shut Down the NSX-T Managers in the vSphere with Tanzu

Workload Domain
You continue shutting down the NSX-T Data Center infrastructure in the vSphere with Tanzu
workload domain by shutting down the NSX-T Manager cluster that provides management and
control plane capabilities to Tanzu workloads.

In a VMware Validated Design SDDC, to configure and manage network services for workloads in
the vSphere with Tanzu workload domain, there are three NSX-T Manager nodes sfo-w01-nsx01a,
sfo-w01-nsx01b, and sfo-w01-nsx01c deployed in the sfo-m01-fd-nsx virtual machine folder in the
sfo-m01-cl01 cluster in the management domain.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the sfo-m01-fd-nsx folder.

4 Right-click the sfo-w01-nsx01a NSX-T Manager and select Power > Shut down Guest OS.

5 On the confirmation dialog box, click Yes.

6 Wait for the VM to power off.

VMware, Inc. 15
Shutdown and Startup

7 Repeat the steps to shut down the remaining vSphere with Tanzu workload domain NSX-T
Managers sfo-w01-nsx01b and sfo-w01-nsx01c.

Shut Down vSAN and the ESXi Hosts in the vSphere with Tanzu
Workload Domain
You shut down vSAN and the ESXi hosts in the vSphere with Tanzu workload domain by
preparing the vSAN cluster for shutdown, placing each ESXi host in maintenance mode to
prevent any virtual machines being deployed to or starting up on the host, and shutting down the
host.

In a VMware Validated Design SDDC, to provide a virtualized infrastructure layer to the SDDC
components there are four ESXi hosts sfo01-w01-esx01, sfo01-w01-esx02, sfo01-w01-esx03, and
sfo01-w01-esx04 deployed in the sfo-w01-cl01 cluster in the vSphere with Tanzu workload
domain.

Procedure

1 Log in to the first ESXi host for the workload domain by using a Secure Shell (SSH) client.

Setting Value

FQDN sfo01-w01-esx01.sfo.rainpole.io

User name root

Password esxi_root_user_password

2 Disable vSAN cluster member updates by running the command.

esxcfg-advcfg -s 1 /VSAN/IgnoreClusterMemberListUpdates

3 Prepare the vSAN cluster for shutdown by running the command.

python /usr/lib/vmware/vsan/bin/reboot_helper.py prepare

The command returns Cluster preparation is done.

Important You perform this step on the first ESXi host only.

4 Place the first ESXi host in maintenance mode by running the command.

esxcli system maintenanceMode set -e true -m noAction

VMware, Inc. 16
Shutdown and Startup

5 Shut down the ESXi host.

a In a Web browser, log in to the first ESXi host for the workload domain by using the
VMware Host Client.

Setting Value

URL https://sfo01-w01-esx01.sfo.rainpole.io/ui

User name root

Password esxi_root_user_password

b In the navigation pane, right-click Host and, from the drop-down menu, select Shut down.

c In the confirmation dialog box, click Shut down.

6 Repeat the procedure to shut down the remaining ESXi hosts in the vSphere with Tanzu
workload domain.

Shut Down the Virtual Infrastructure Workload Domain

In an SDDC deployed according to VMware Validated Design, in addition to the management
domain you deploy a single workload domain. If you deployed a virtual infrastructure workload
domain, you start shutting down the SDDC management components in the virtual infrastructure
workload domain before shutting down the SDDC components in the management domain.

If you deployed a vSphere with Tanzu workload domain, you skip this chapter and proceed with
shutting down the vSphere with Tanzu workload domain. See Shut Down the vSphere with Tanzu
Workload Domain.

You shut down the SDDC management components in the virtual infrastructure workload domain
in a specific order to keep components operational by maintaining the necessary infrastructure,
networking, and management services before shutdown.

Table 2-2. Shutdown Order of the Virtual Infrastructure Workload Domain

Shutdown Order SDDC Component

1 NSX-T Edge nodes

2 NSX-T Managers

VMware, Inc. 17
Shutdown and Startup

Table 2-2. Shutdown Order of the Virtual Infrastructure Workload Domain (continued)

Shutdown Order SDDC Component

4 vCenter Server

5 ESXi hosts and vSAN

Procedure

1 Get Virtual Machine to Host Mapping in the Virtual Infrastructure Workload Domain
Before you begin shutting down the virtual infrastructure workload domain, you get a
mapping between virtual machines in the workload domain and the ESXi hosts on which
they are deployed. You later use this mapping to log in to specific ESXi hosts and shut
specific management virtual machines down.

2 Shut Down the NSX-T Edge Nodes in the Virtual Infrastructure Workload Domain
You begin shutting down the NSX-T Data Center infrastructure in the virtual infrastructure
workload domain by shutting down the NSX-T Edge nodes that provide north-south traffic
connectivity between the physical data center networks and the NSX-T SDN networks.

3 Shut Down the NSX-T Managers in the Virtual Infrastructure Workload Domain
You continue shutting down the NSX-T Data Center infrastructure in the virtual infrastructure
workload domain by shutting down the NSX-T Manager cluster that provides management
and control plane capabilities to tenant workloads.

4 Shut Down the vCenter Server Instance in the Virtual Infrastructure Workload Domain
After you shut down the NSX-T Data Center infrastructure and ESXi hosts, you complete the
shutdown of the virtual infrastructure workload domain by checking the vSAN cluster health
and shutting down the workload domain vCenter Server..

5 Shut Down the vSphere Cluster Services Virtual Machines in the Virtual Infrastructure
Workload Domain
You shut down the vSphere Cluster Services (vCLS) virtual machines in the virtual
infrastructure workload domain.

6 Shut Down vSAN and the ESXi Hosts in the Virtual Infrastructure Workload Domain
You shut down vSAN and the ESXi hosts in the virtual infrastructure workload domain by
preparing the vSAN cluster for shutdown, placing each ESXi host in maintenance mode to
prevent any virtual machines being deployed to or starting up on the host, and shutting
down the host.

Get Virtual Machine to Host Mapping in the Virtual Infrastructure

Workload Domain
Before you begin shutting down the virtual infrastructure workload domain, you get a mapping
between virtual machines in the workload domain and the ESXi hosts on which they are

VMware, Inc. 18
Shutdown and Startup

deployed. You later use this mapping to log in to specific ESXi hosts and shut specific
management virtual machines down.

Procedure

1 Start Windows PowerShell.

2 Connect to the vSphere with Tanzu workload domain vCenter Server by running the
command.

Connect-VIServer -Server sfo-w01-vc01.sfo.rainpole.io -User [email protected] -Password

vsphere_admin_password

3 Generate the virtual machine to host mapping by running the command.

Get-VM | Select Name,VMHost | Export-Csv -Path C:\VMToHostMapping.csv -NoTypeInformation

The C:\VMToHostMapping.csv file, containing the virtual machines to hosts mapping, is

created

Shut Down the NSX-T Edge Nodes in the Virtual Infrastructure

Workload Domain
You begin shutting down the NSX-T Data Center infrastructure in the virtual infrastructure
workload domain by shutting down the NSX-T Edge nodes that provide north-south traffic
connectivity between the physical data center networks and the NSX-T SDN networks.

In a VMware Validated Design SDDC, to provide services such as load balancing and north-south
connectivity, there are two NSX-T Edge nodes sfo-w01-en01 and sfo-w01-en02 deployed in the
sfo-w01-fd-edge virtual machine folder in the sfo-w01-cl01 cluster in the virtual infrastructure
workload domain.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-w01-vc01.sfo.rainpole.io tree and
expand the sfo-w01-dc01 data center.

3 Expand the sfo-w01-fd-edge folder.

4 Right-click the sfo-w01-en01 NSX-T Edge node and select Power > Shut down Guest OS.

5 In the confirmation dialog box, click Yes.

VMware, Inc. 19
Shutdown and Startup

6 Wait for the virtual machine to power off.

7 Repeat the steps to shut down the sfo-w01-en02 NSX-T Edge node.

Shut Down the NSX-T Managers in the Virtual Infrastructure

Workload Domain
You continue shutting down the NSX-T Data Center infrastructure in the virtual infrastructure
workload domain by shutting down the NSX-T Manager cluster that provides management and
control plane capabilities to tenant workloads.

In a VMware Validated Design SDDC, to configure and manage network services for tenant
workloads in the virtual infrastructure workload domain, there are three NSX-T Manager nodes
sfo-w01-nsx01a, sfo-w01-nsx01b, and sfo-w01-nsx01c deployed in the sfo-m01-fd-nsx virtual
machine folder in the sfo-m01-cl01 cluster in the management domain.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the sfo-m01-fd-nsx folder.

4 Right-click the sfo-w01-nsx01a NSX-T Manager and select Power > Shut down Guest OS.

5 On the confirmation dialog box, click Yes.

6 Wait for the virtual machine to power off.

7 Repeat the steps to shut down the remaining virtual infrastructure workload domain NSX-T
Managers sfo-w01-nsx01b and sfo-w01-nsx01c.

Shut Down the vCenter Server Instance in the Virtual Infrastructure

Workload Domain
After you shut down the NSX-T Data Center infrastructure and ESXi hosts, you complete the
shutdown of the virtual infrastructure workload domain by checking the vSAN cluster health and
shutting down the workload domain vCenter Server..

In a VMware Validated Design SDDC, to provide centralized management of the vSphere

infrastructure there is one workload domain vCenter Server Appliance sfo-w01-vc01 deployed
in the sfo-m01-fd-mgmt folder in the sfo-m01-cl01 cluster in the management domain.

VMware, Inc. 20
Shutdown and Startup

Prerequisites

Shut down any additional virtual machines running on the virtual infrastructure workload domain
ESXi hosts.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the Hosts and clusters inventory, expand the sfo-w01-vc01.sfo.rainpole.io tree and
expand the sfo-w01-dc01 data center.

3 Verify the vSAN health and resynchronization status.

a Select the sfo-w01-cl01 cluster and click the Monitor tab.

b In the left pane, navigate to vSAN > Skyline health and verify the status of each vSAN
health check category.

c In the left pane, navigate to vSAN > Resyncing objects and verify that all syncrhonization
tasks are complete.

4 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

5 Expand the sfo-m01-fd-mgmt folder.

6 Right-click the sfo-w01-vc01 workload domain vCenter Server virtual machine and select
Power > Shut down Guest OS.

7 In the confirmation dialog box, click Yes.

Shut Down the vSphere Cluster Services Virtual Machines in the

Virtual Infrastructure Workload Domain
You shut down the vSphere Cluster Services (vCLS) virtual machines in the virtual infrastructure
workload domain.

In an SDDC deployed according to VMware Validated Design, to ensure availability of services

such as vSphere DRS and vSphere HA to the workloads running on the clusters independent
of the vCenter Server instance availability, there is a locally managed deployment of vSphere
Cluster Services.

VMware, Inc. 21
Shutdown and Startup

Procedure

1 In a Web browser, log in to the virtual infrastructure workload domain ESXi host that runs the
first vSphere Cluster Services virtual machine by using the VMware Host Client.

Setting Value

URL https://<ESXi host running vSphere Cluster Services

VM>

User name root

Password esxi_root_password

2 In the navigation pane, click Virtual machines.

3 Right-click the first vSphere Cluster Services virtual machine and select Guest OS > Shut
down.

4 In the confirmation dialog box, click Yes.

5 Repeat the procedure to shut down the remaining vSphere Cluster Services virtual machines
on the virtual infrastructure workload domain ESXi hosts that run them.

Shut Down vSAN and the ESXi Hosts in the Virtual Infrastructure
Workload Domain
You shut down vSAN and the ESXi hosts in the virtual infrastructure workload domain by
preparing the vSAN cluster for shutdown, placing each ESXi host in maintenance mode to
prevent any virtual machines being deployed to or starting up on the host, and shutting down the
host.

In a VMware Validated Design SDDC, to provide a virtualized infrastructure layer to the SDDC
components there are four ESXi hosts sfo01-w01-esx01, sfo01-w01-esx02, sfo01-w01-esx03, and
sfo01-w01-esx04 deployed in the sfo-w01-cl01 cluster in the virtual infrastructure workload
domain.

If you deployed additional clusters in the virtual infrastructure workload domain, repeat this
procedure for all ESXi hosts in each cluster.

Prerequisites

Shut down any additional virtual machines running on the virtual infrastructure workload domain
ESXi hosts.

VMware, Inc. 22
Shutdown and Startup

Procedure

1 Log in to the first ESXi host for the workload domain by using a Secure Shell (SSH) client.

Setting Value

FQDN sfo01-w01-esx01.sfo.rainpole.io

User name root

Password esxi_root_user_password

2 Disable vSAN cluster member updates by running the command.

esxcfg-advcfg -s 1 /VSAN/IgnoreClusterMemberListUpdates

3 Prepare the vSAN cluster for shutdown by running the command.

python /usr/lib/vmware/vsan/bin/reboot_helper.py prepare

The command returns Cluster preparation is done.

Note You perform this step on the first ESXi host only.

4 Place the ESXi host in maintenance mode by running the command.

esxcli system maintenanceMode set -e true -m noAction

5 Shut down the ESXi host.

a In a Web browser, log in to the first ESXi host for the workload domain by using the
VMware Host Client.

Setting Value

URL https://sfo01-w01-esx01.sfo.rainpole.io/ui

User name root

Password esxi_root_user_password

b In the navigation pane, right-click Host and, from the drop-down menu, select Shut down.

c In the confirmation dialog box, click Shut down.

6 Repeat this procedure to place the remaining ESXi hosts in the virtual infrastructure workload
domain in maintenance mode and shut them down.

Shut Down the Management Domain

After you shut down the SDDC components in the workload domain, you begin shutting down
the management domain.

VMware, Inc. 23
Shutdown and Startup

You shut down the SDDC management components in the management domain in a specific
order to keep components operational by maintaining the necessary infrastructure, networking,
and management services prior before shutdown.

Table 2-3. Shutdown Order of the Management Domain

Shutdown Order SDDC Component

1 vRealize Automation cluster

2 vRealize Operations Manager cluster

3 Cross-region Workspace ONE Access cluster

4 vRealize Suite Lifecycle Manager

5 vRealize Log Insight cluster

6 Region-specific Workspace ONE Access

7 NSX-T Edge nodes

8 NSX-T Managers

9 SDDC Manager

10 vCenter Server

11 vSphere Cluster Services (vCLS) virtual machines

12 ESXi hosts and vSAN

Procedure

1 Shut Down the vRealize Automation Virtual Machines in the Management Domain
You begin shutting down the management domain by gracefully powering off the vRealize
Automation cluster nodes using the vRealize Suite Lifecycle Manager administration
interface.

2 Shut Down the vRealize Operations Manager Virtual Machines in the Management Domain
You shut down vRealize Operations Manager by first taking the cluster offline, then
shutting down the virtual machines of the vRealize Operations Manager cluster and remote
collectors.

3 Shut Down the Cross-Region Workspace ONE Access Virtual Machines in the Management
Domain
Shut down the cross-region Workspace ONE Access cluster by using the vRealize Suite
Lifecycle Manager administration interface.

4 Shut Down the vRealize Suite Lifecycle Manager Virtual Machine in the Management Domain
Shut down the vRealize Suite Lifecycle Manager virtual machine in the management domain.

VMware, Inc. 24
Shutdown and Startup

5 Shut Down the vRealize Log Insight Virtual Machines in the Management Domain
Shut down the three vRealize Log Insight nodes in the analytics cluster in the management
domain .

6 Shut Down the Region-Specific Workspace ONE Access Virtual Machine in the Management
Domain
Shut down the region-specific Workspace ONE Access virtual machine in the management
domain.

7 Shut Down the NSX-T Edge Nodes in the Management Domain

You begin shutting down the NSX-T Data Center infrastructure in the management domain
by shutting down the NSX-T Edge nodes that provide north-south traffic connectivity
between the physical data center networks and the NSX-T SDN networks

8 Shut Down the NSX-T Managers in the Management Domain

You continue shutting down the NSX-T Data Center infrastructure in the management
domain by shutting down the NSX-T Manager cluster that provides management and control
plane capabilities to the management applications.

9 Shut Down the SDDC Manager Virtual Machine in the Management Domain
Shut down the SDDC Manager virtual machine in the management domain.

10 Set DRS Automation Level of the Management Domain to Manual

You set the DRS automation level of the management domain cluster to manual to prevent
vSphere HA migrating the vCenter Server Appliance from the first ESXi host to a different
host once you power it on again.

11 Shut Down the vCenter Server Instance in the Management Domain

The management domain vCenter Server resides on the first ESXi host in the first
management cluster. You check the vSAN cluster health and shut down the vCenter Server
virtual machine by using the vSphere Host Client.

12 Shut Down the vSphere Cluster Services Virtual Machines in the Management Domain
You shut down the vSphere Cluster Services (vCLS) virtual machines in the management
domain.

13 Shut Down vSAN and the ESXi Hosts in the Management Domain
You shut down vSAN and the ESXi hosts in the management domain by preparing the vSAN
cluster for shutdown, placing each ESXi host in maintenance mode to prevent any virtual
machines being deployed to or starting up on the host, and shutting down the host.

Shut Down the vRealize Automation Virtual Machines in the

Management Domain
You begin shutting down the management domain by gracefully powering off the vRealize
Automation cluster nodes using the vRealize Suite Lifecycle Manager administration interface.

VMware, Inc. 25
Shutdown and Startup

In a VMware Validated Design SDDC, to provide workload provisioning to end users in an

automated way there are three clustered vRealize Automation nodes xreg-vra01a, xreg-vra01b,
and xreg-vra01c deployed in the xreg-m01-fd-vra virtual machine folder in the sfo-m01-cl01
cluster in the management domain.

You complete this procedure if you deployed an SDDC by following VMware Validated Design.

Procedure

1 In a Web browser, log in to vRealize Suite Lifecycle Manager by using the administration
interface.

Setting Value

URL https://xreg-vrslcm01.rainpole.io

User name vcfadmin@local

Password vrslcm_vcfadmin_password

2 On the My services page, click Lifecycle operations.

3 In the navigation pane, click Environments.

4 On the Environments page, in the Cross-Region-Env card, click View details.

5 In the vRealize Automation section, click the ellipsis icon, and, from the drop-down menu,
select Power off.

6 In the Power off vRealize Automation dialog box, click Submit.

7 On the Requests page, ensure that the request completes successfully.

Shut Down the vRealize Operations Manager Virtual Machines in the

Management Domain
You shut down vRealize Operations Manager by first taking the cluster offline, then shutting
down the virtual machines of the vRealize Operations Manager cluster and remote collectors.

In a VMware Validated Design SDDC, to provide metrics collection and analysis there are
three clustered vRealize Operations Manager nodes (xreg-vrops01a, xreg-vrops01b, and xreg-
vrops01c) deployed in the xreg-m01-fd-vrops folder and two remote collector nodes (sfo-
vropsc01a and sfo-vropsc01b) in the sfo-m01-fd-vropsrc folder in the sfo-m01-cl01 cluster in the
management domain.

You complete this procedure if you deployed an SDDC by following VMware Validated Design.

VMware, Inc. 26
Shutdown and Startup

Procedure

1 In a Web browser, log in to the vRealize Operations Manager by using the administration
interface.

Settings Value

URL https://xreg-vrops01.rainpole.io/admin

User name admin

Password vrops_admin_password

2 Take the vRealize Operations Manager cluster offline.

a On the System status page, click Take cluster offline.

b In the Take cluster offline dialog box, provide the reason for the shutdown and click Ok.

Wait for the vRealize Operations Manager cluster to become offline.

3 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

4 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

5 Expand the xreg-m01-fd-vrops folder.

6 Shut down the vRealize Operations Manager cluster nodes.

a Right-click the xreg-vrops01a vRealize Operations Manager node and select Power >
Shut down Guest OS.

b In the confirmation dialog box, click Yes.

c Wait for the virtual machine to power off.

d Repeat the steps for the remaining vRealize Operations Manager cluster nodes xreg-
vrops01b and xreg-vrops01c.

7 Shut down the vRealize Operations Manager collector nodes.

a Expand the sfo-m01-fd-vropsrc folder.

b Right-click the sfo-vropsc01a remote collector node and select Power > Shut down Guest
OS.

c Repeat this step for the sfo-vropsc01b remote collector node.

VMware, Inc. 27
Shutdown and Startup

Shut Down the Cross-Region Workspace ONE Access Virtual

Machines in the Management Domain
Shut down the cross-region Workspace ONE Access cluster by using the vRealize Suite Lifecycle
Manager administration interface.

In a VMware Validated Design SDDC, to provide identity and access management services to
cross-region components there are three clustered Workspace ONE Access nodes xreg-wsa01a,
xreg-wsa01b, and xreg-wsa01c deployed in the xreg-m01-fd-wsa folder in the sfo-m01-cl01
cluster in the management domain.

You complete this procedure if you deployed an SDDC by following VMware Validated Design.

Procedure

1 In a Web browser, log in to vRealize Suite Lifecycle Manager by using the administration
interface.

Setting Value

URL https://xreg-vrslcm01.rainpole.io

User name vcfadmin@local

Password vrslcm_vcfadmin_password

2 Power off the cross-region Workspace ONE Access cluster.

a On the My services page, click Lifecycle operations.

b In the navigation pane, click Environments.

c On the Environments page, in the globalenvironment card, click View details.

d In the VMware Identity Manager section, click the ellipsis icon, and, from the drop-down
menu, select Power off.

e In the Power off VMware Identity Manager dialog box, click Submit.

f On the Requests page, ensure that the request completes successfully.

Shut Down the vRealize Suite Lifecycle Manager Virtual Machine in

the Management Domain
Shut down the vRealize Suite Lifecycle Manager virtual machine in the management domain.

In a VMware Validated Design SDDC, to provide life-cycle management capabilities for vRealize
components, including automated deployment, there is one vRealize Suite Lifecycle Manager
node xreg-vrslcm01 deployed in the xreg-m01-fd-vrslcm folder in the sfo-m01-cl01 cluster in the
management domain.

You complete this procedure if you deployed an SDDC by following VMware Validated Design.

VMware, Inc. 28
Shutdown and Startup

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the xreg-m01-fd-vrslcm folder.

4 Right-click the xreg-vrslcm01 virtual machine and select Power > Shut down Guest OS.

5 In the confirmation dialog box, click Yes.

Shut Down the vRealize Log Insight Virtual Machines in the

Management Domain
Shut down the three vRealize Log Insight nodes in the analytics cluster in the management
domain .

In a VMware Validated Design SDDC, to provide log collection and aggregation there are three
clustered vRealize Log Insight nodes sfo-vrli01a, sfo-vrli01b, and sfo-vrli01c deployed in the sfo-
m01-fd-vrli folder in the sfo-m01-cl01 cluster in the management domain.

You complete this procedure if you deployed an SDDC by following VMware Validated Design.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the sfo-m01-fd-vrli folder.

4 Right-click the sfo-vrli01a virtual machine and select Power > Shut down Guest OS.

5 In the confirmation dialog box, click Yes.

VMware, Inc. 29
Shutdown and Startup

6 Wait for the virtual machine to power off.

7 Repeat the steps for the remaining vRealize Log Insight virtual machines sfo-vrli01b and
sfo-vrli01c.

Shut Down the Region-Specific Workspace ONE Access Virtual

Machine in the Management Domain
Shut down the region-specific Workspace ONE Access virtual machine in the management
domain.

In a VMware Validated Design SDDC, to provide identity and access management services to
region-specific SDDC solutions there is one Workspace ONE Access node sfo-wsa01 deployed in
the sfo-m01-fd-wsa folder in the first cluster in the management domain.

You complete this procedure if you deployed an SDDC by following VMware Validated Design.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the sfo-m01-fd-wsa folder.

4 Right-click the region-specific Workspace ONE Access sfo-wsa01 virtual machine and click
Power > Shut down Guest OS.

5 In the confirmation dialog box, click Yes.

Shut Down the NSX-T Edge Nodes in the Management Domain

You begin shutting down the NSX-T Data Center infrastructure in the management domain by
shutting down the NSX-T Edge nodes that provide north-south traffic connectivity between the
physical data center networks and the NSX-T SDN networks

In a VMware Validated Design SDDC, to provide services such as load balancing and north-south
connectivity, there are two NSX-T Edge nodes deployed in the sfo-m01-fd-edge virtual machine
folder in the first cluster in the management domain.

VMware, Inc. 30
Shutdown and Startup

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the sfo-m01-fd-edge folder.

4 Right-click the sfo-m01-en01 virtual machine and select Power > Shut down Guest OS.

5 In the confirmation dialog box, click Yes.

6 Wait for the virtual machine to power off.

7 Repeat the steps for the sfo-m01-en02 NSX-T Edge node.

Shut Down the NSX-T Managers in the Management Domain

You continue shutting down the NSX-T Data Center infrastructure in the management domain
by shutting down the NSX-T Manager cluster that provides management and control plane
capabilities to the management applications.

In a VMware Validated Design SDDC, to configure and manage network services for
management SDDC components in the management domain, there are three NSX-T Manager
nodes sfo-m01-nsx01a, sfo-m01-nsx01b, and sfo-m01-nsx01c deployed in the sfo-m01-fd-nsx
virtual machine folder in the sfo-m01-cl01 cluster in the management domain.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the sfo-m01-fd-nsx folder.

VMware, Inc. 31
Shutdown and Startup

4 Right-click the sfo-m01-nsx01a virtual machine and select Power > Shut down Guest OS.

5 In the confirmation dialog box, click Yes.

6 Wait for the virtual machine to power off.

7 Repeat the steps for the remaining NSX-T Manager virtual machines sfo-m01-nsx01b and
sfo-m01-nsx01c.

Shut Down the SDDC Manager Virtual Machine in the Management

Domain
Shut down the SDDC Manager virtual machine in the management domain.

In a VMware Validated Design SDDC, to provide full lifecycle management to core components
of VMware Cloud Foundation there is one SDDC Manager node sfo-vcf01 deployed in the sfo-
m01-fd-mgmt folder in the sfo-m01-cl01 cluster in the management domain.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the sfo-m01-fd-mgmt folder.

4 Right-click the sfo-vcf01 virtual machine and click Power > Shut down Guest OS.

5 In the confirmation dialog box, click Yes.

6 Wait for the virtual machine to power off.

Set DRS Automation Level of the Management Domain to Manual

You set the DRS automation level of the management domain cluster to manual to prevent
vSphere HA migrating the vCenter Server Appliance from the first ESXi host to a different host
once you power it on again.

VMware, Inc. 32
Shutdown and Startup

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the Hosts and clusters inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Select the sfo-m01-cl01 cluster and click the Configure tab.

4 In the left pane, select Services > vSphere DRS and click the Edit button.

5 On the Edit cluster settings dialog box, click the Automation tab, and, from the drop-down
menu, in the Automation level section, select Manual, and click Ok.

Shut Down the vCenter Server Instance in the Management Domain

The management domain vCenter Server resides on the first ESXi host in the first management
cluster. You check the vSAN cluster health and shut down the vCenter Server virtual machine by
using the vSphere Host Client.

In a VMware Validated Design SDDC, to provide centralized management of the vSphere

infrastructure there is one vCenter Server Appliance sfo-m01-vc01 deployed in the sfo-m01-fd-
mgmt folder in the first cluster in the management domain.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the Hosts and clusters inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

VMware, Inc. 33
Shutdown and Startup

3 Verify the vSAN health and resynchronization status.

a Select the sfo-m01-cl01 cluster and click the Monitor tab.

b In the left pane, navigate to vSAN > Skyline health and verify the status of each vSAN
health check category.

c In the left pane, navigate to vSAN > Resyncing objects and verify that all syncrhonization
tasks are complete.

4 In a Web browser, log in to the first ESXi host for the management domain by using the
VMware Host Client.

Setting Value

URL https://sfo01-m01-esx01.sfo.rainpole.io/ui

User name root

Password esxi_root_user_password

5 In the navigation pane, click Virtual machines.

6 Right-click the sfo-m01-vc01 management domain vCenter Server and select Guest OS >
Shut down.

7 In the confirmation dialog box, click Yes.

Shut Down the vSphere Cluster Services Virtual Machines in the

Management Domain
You shut down the vSphere Cluster Services (vCLS) virtual machines in the management domain.

In an SDDC deployed according to VMware Validated Design, to ensure availability of services

such as vSphere DRS and vSphere HA to the workloads running on the clusters independent
of the vCenter Server instance availability, there is a locally managed deployment of vSphere
Cluster Services.

Procedure

1 In a Web browser, log in to the management domain ESXi host that runs the first vSphere
Cluster Services virtual machine by using the VMware Host Client.

Setting Value

URL https://<ESXi host running vSphere Cluster Services

VM>

User name root

Password esxi_root_password

2 In the navigation pane, click Virtual machines.

VMware, Inc. 34
Shutdown and Startup

3 Right-click the first vSphere Cluster Services virtual machine and select Guest OS > Shut
down.

4 In the confirmation dialog box, click Yes.

5 Repeat the procedure to shut down the remaining vSphere Cluster Services virtual machines
on the management domain ESXi hosts that run them.

Shut Down vSAN and the ESXi Hosts in the Management Domain
You shut down vSAN and the ESXi hosts in the management domain by preparing the vSAN
cluster for shutdown, placing each ESXi host in maintenance mode to prevent any virtual
machines being deployed to or starting up on the host, and shutting down the host.

In a VMware Validated Design SDDC, to provide a virtualized infrastructure layer to the SDDC
components there are four ESXi hosts sfo01-m01-esx01, sfo01-m01-esx02, sfo01-m01-esx03, and
sfo01-m01-esx04 deployed in the sfo-m01-cl01 cluster in the management domain.

Prerequisites

Shut down any additional virtual machines running on the management domain ESXi hosts.

Procedure

1 Log in to the first ESXi host for the management domain by using a Secure Shell (SSH) client.

Setting Value

FQDN sfo01-m01-esx01.sfo.rainpole.io

User name root

Password esxi_root_user_password

2 Disable vSAN cluster member updates by running the command.

esxcfg-advcfg -s 1 /VSAN/IgnoreClusterMemberListUpdates

3 On the first host only, prepare the vSAN cluster for shutdown by running the command.

python /usr/lib/vmware/vsan/bin/reboot_helper.py prepare

The command returns Cluster preparation is done.

4 Place the ESXi host in maintenance mode by running the command.

esxcli system maintenanceMode set -e true -m noAction

VMware, Inc. 35
Shutdown and Startup

5 Shut down the ESXi host.

a In a Web browser, log in to the first ESXi host for the workload domain by using the
VMware Host Client.

Setting Value

URL https://sfo01-m01-esx01.sfo.rainpole.io/ui

User name root

Password esxi_root_user_password

b In the navigation pane, right-click Host and, from the drop-down menu, select Shut down.

c In the confirmation dialog box, click Shut down.

6 Repeat the procedure for the remaining ESXi hosts in the management domain.

VMware, Inc. 36
SDDC Startup
3
To maintain the components integration and avoid operation faults, you follow the specified
order to start up the management components in the SDDC.

Prerequisites

n Verify that external services for the SDDC, such as Active Directory, DNS, NTP, SMTP, and
FTP/SFTP are available.

n If a vSphere Storage APIs for Data Protection (VADP) based backup solution is deployed on
the management cluster, verify that the solution is properly started and operational, following
the vendor guidance.

n Start the Management Domain

To perform the startup of the SDDC components, you begin with starting up the stack from
the Management Domain.

n Start the Virtual Infrastructure Workload Domain

If you deployed a virtual infrastructure workload domain, after you start the SDDC
components in the management domain, you begin starting the SDDC stack in the virtual
infrastructure workload domain.

n Start the vSphere with Tanzu Workload Domain

If you deployed a vSphere with Tanzu workload domain, after you start the SDDC
components in the management domains, you begin starting the SDDC stack in the vSphere
with Tanzu workload domain.

What to do next

Verify the operational state of the SDDC components. See VMware Validated Design Operational
Verification.

Start the Management Domain

To perform the startup of the SDDC components, you begin with starting up the stack from the
Management Domain.

VMware, Inc. 37
Shutdown and Startup

You start the SDDC management components in the management domain in a specific order to
provide the necessary infrastructure, networking, and management services prior powering on
each component.

Table 3-1. Startup Order of the Management Domain

Startup Order SDDC Component

1 ESXi hosts and vSAN

2 vSphere Cluster Services (vCLS) virtual machines

3 vCenter Server

4 SDDC Manager

5 NSX-T Managers

6 NSX-T Edge nodes

7 Region-specific Workspace ONE Access

8 vRealize Log Insight cluster

9 vRealize Suite Lifecycle Manager

10 Cross-region Workspace ONE Access cluster

11 vRealize Operations Manager cluster

12 vRealize Automation cluster

Procedure

1 Start vSAN and the ESXi Hosts in the Management Domain

You begin the startup process of the SDDC components by starting the ESXi hosts in the
management domain. You use the out-of-band management interface (Ex: ILO, iDRAC) to
connect to the ESXi host and power it on. You then exit maintenance mode for the ESXi
hosts and prepare the vSAN cluster for startup.

2 Start the vSphere Cluster Services in the Management Domain

You start the vSphere Cluster Services (vCLS) virtual machines in the management domain.

3 Start the vCenter Server Instance in the Management Domain

The management domain vCenter Server resides on the first ESXi host in the first
management cluster. You log in to this ESXi host by using the VMware Host Client and
start the vCenter Server virtual machine.

4 Set DRS Automation Level of the Management Domain to Automatic

After you power on the vCenter Server for the management domain, you set the DRS
automation level of the management domain cluster to automatic to provide management
virtual machine placement instructions based on anti-affinity rules.

VMware, Inc. 38
Shutdown and Startup

5 Start the SDDC Manager Virtual Machine in the Management Domain

Start the SDDC Manager virtual machine in the management domain.

6 Start the NSX-T Manager Virtual Machines in the Management Domain

You begin powering on the NSX-T Data Center infrastructure in the management domain by
starting the NSX-T Manager cluster that provides management and control plane capabilities
to the management applications.

7 Start the NSX-T Edge Nodes in the Management Domain

You continue power on the NSX-T Data Center infrastructure in the management domain
by starting the NSX-T Edge nodes that provide north-south traffic connectivity between the
physical data center networks and the NSX-T SDN networks

8 Start the Region-Specific Workspace ONE Access Virtual Machine in the Management
Domain
Start the region-specific Workspace ONE Access virtual machine in the management
domain.

9 Start the vRealize Log Insight Virtual Machines in the Management Domain
Start the vRealize Log Insight analytics cluster nodes in the management domain.

10 Start the vRealize Suite Lifecycle Manager Virtual Machine in the Management Domain
Start the vRealize Suite Lifecycle Manager virtual machine in the management domain.

11 Start the Cross-Region Workspace ONE Access Virtual Machines in the Management Domain
You start the Workspace ONE Access cluster by using the vRealize Suite Lifecycle Manager
administration interface.

12 Start the vRealize Operations Manager Virtual Machines in the Management Domain
You start vRealize Operations Manager by first powering on the analytics cluster nodes and
remote collectors, then bringing the cluster online in the vRealize Operations Manager user
interface.

13 Start the vRealize Automation Virtual Machines in the Management Domain

You start the vRealize Automation cluster nodes in the management domain by powering on
them using the vRealize Suite Lifecycle Manager administration interface.

Start vSAN and the ESXi Hosts in the Management Domain

You begin the startup process of the SDDC components by starting the ESXi hosts in the
management domain. You use the out-of-band management interface (Ex: ILO, iDRAC) to
connect to the ESXi host and power it on. You then exit maintenance mode for the ESXi hosts
and prepare the vSAN cluster for startup.

In a VMware Validated Design SDDC, to provide a virtualized infrastructure layer to the SDDC
components there are four ESXi hosts sfo01-m01-esx01, sfo01-m01-esx02, sfo01-m01-esx03, and
sfo01-m01-esx04 deployed in the sfo-m01-cl01 cluster in the management domain.

VMware, Inc. 39
Shutdown and Startup

Procedure

1 Power on the first ESXi host for the management domain.

a In a Web browser, log in to the first ESXi host in the management domain by using the
out-of-band management interface.

Setting Value

URL https://<Out-of-band IP of the first ESXi host on the

management domain>

User name esxi_user_name

Password esxi_password

b On the Dashboard page, power on the ESXi host.

c Wait for the ESXi host to power on.

2 Log in to the first ESXi host for the management domain by using a Secure Shell (SSH) client.

Setting Value

FQDN sfo01-m01-esx01.sfo.rainpole.io

User name root

Password esxi_root_user_password

3 Take the ESXi host out of maintenance mode by running the command.

esxcli system maintenanceMode set -e false

4 Repeat Step Step 1 to Step Step 3 for the remaining ESXi hosts in the management domain.

5 Prepare the vSAN cluster for starting by running the command.

python /usr/lib/vmware/vsan/bin/reboot_helper.py recover

The command returns Cluster reboot/power-on is completed successfully!

Note You perform this step on the first ESXi host only.

6 Verify that all hosts in the vSAN cluster are available by running the command.

esxcli vsan cluster get

7 Enable vSAN cluster member updates by running the command.

esxcfg-advcfg -s 0 /VSAN/IgnoreClusterMemberListUpdates

8 Repeat these steps to for the remaining ESXi host in the management domain.

VMware, Inc. 40
Shutdown and Startup

Start the vSphere Cluster Services in the Management Domain

You start the vSphere Cluster Services (vCLS) virtual machines in the management domain.

In an SDDC deployed according to VMware Validated Design, to ensure availability of services

such as vSphere DRS and vSphere HA to the workloads running on the clusters independent
of the vCenter Server instance availability, there is a locally managed deployment of vSphere
Cluster Services.

Procedure

1 In a Web browser, log in to the management domain ESXi host that runs the first vSphere
Cluster Services virtual machine by using the VMware Host Client.

Setting Value

URL https://<ESXi host running vSphere Cluster Services

VM>

User name root

Password esxi_root_password

2 In the navigation pane, click Virtual machines.

3 Right-click the first vSphere Cluster Services virtual machine and select Guest OS > Power on.

4 Repeat the procedure to start the remaining vSphere Cluster Services virtual machines on the
management domain ESXi hosts that run them.

Start the vCenter Server Instance in the Management Domain

The management domain vCenter Server resides on the first ESXi host in the first management
cluster. You log in to this ESXi host by using the VMware Host Client and start the vCenter Server
virtual machine.

In a VMware Validated Design SDDC, to provide centralized management of the vSphere

infrastructure there is one vCenter Server Appliance sfo-m01-vc01 deployed in the sfo-m01-fd-
mgmt folder in the sfo-m01-cl01 cluster in the management domain.

Procedure

1 In a Web browser, log in to the first ESXi host for the management domain by using the
VMware Host Client.

Setting Value

URL https://sfo01-m01-esx01.sfo.rainpole.io/ui

User name root

Password esxi_root_user_password

VMware, Inc. 41
Shutdown and Startup

2 In the navigation pane, click Virtual machines.

3 Right-click the sfo-m01-vc01 management domain vCenter Server, and, from the drop-down
menu, select Power > Power on.

Wait for the virtual machine to start and for vSphere services to become available.

4 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

5 In the Hosts and clusters inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

6 Verify the vSAN health and resynchronization status.

a Select the sfo-m01-cl01 cluster and click the Monitor tab.

b In the left pane, navigate to vSAN > Skyline health and verify the status of each vSAN
health check category.

c In the left pane, navigate to vSAN > Resyncing objects and verify that all syncrhonization
tasks are complete.

Set DRS Automation Level of the Management Domain to Automatic

After you power on the vCenter Server for the management domain, you set the DRS automation
level of the management domain cluster to automatic to provide management virtual machine
placement instructions based on anti-affinity rules.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the Hosts and clusters inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Select the sfo-m01-cl01 cluster and click the Configure tab.

VMware, Inc. 42
Shutdown and Startup

4 In the left pane, select Services > vSphere DRS and click the Edit button.

5 On the Edit cluster settings dialog box, click the Automation tab, and, from the drop-down
menu, in the Automation level section, select Fully automated, and click OK.

Start the SDDC Manager Virtual Machine in the Management Domain

Start the SDDC Manager virtual machine in the management domain.

In a VMware Validated Design SDDC, to provide full lifecycle management to core components
of VMware Cloud Foundation there is one SDDC Manager node (sfo-vcf01) deployed in the
sfo-m01-fd-mgmt folder in the sfo-m01-cl01 cluster in the management domain.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the sfo-m01-fd-mgmt folder.

4 Right-click the sfo-vcf01 virtual machine and click Power > Power on.

5 Wait for the virtual machine to power on.

Start the NSX-T Manager Virtual Machines in the Management

Domain
You begin powering on the NSX-T Data Center infrastructure in the management domain by
starting the NSX-T Manager cluster that provides management and control plane capabilities to
the management applications.

In a VMware Validated Design SDDC, to configure and manage network services for
management SDDC components in the management domain, there are three NSX-T Manager
nodes sfo-m01-nsx01a, sfo-m01-nsx01b, and sfo-m01-nsx01c deployed in the sfo-m01-fd-nsx
virtual machine folder in the sfo-m01-cl01 cluster in the management domain.

VMware, Inc. 43
Shutdown and Startup

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the sfo-m01-fd-nsx folder.

4 Power on the NSX-T Manager.

a Right-click the sfo-m01-nsx01a NSX-T Manager and select Power > Power on.

b Wait for the virtual machine to power on.

c Repeat the steps to power on the remaining NSX-T Managers sfo-m01-nsx01b and sfo-
m01-nsx01c.

5 In a Web browser, log in to NSX-T Manager for the management domain by using the user
interface.

Setting Value

URL https://sfo-m01-nsx01.sfo.rainpole.io/login.jsp?
local=true

User name admin

Password nsx-t_admin_password

6 Verify the system status of NSX-T Managers.

a On the main navigation bar, click System.

b In the left pane, navigate to Configuration > Appliances.

c On the Appliances page, verify that the NSX-T Managers cluster has a Stable status and
all NSX-T Manager nodes are available.

Start the NSX-T Edge Nodes in the Management Domain

You continue power on the NSX-T Data Center infrastructure in the management domain by
starting the NSX-T Edge nodes that provide north-south traffic connectivity between the physical
data center networks and the NSX-T SDN networks

VMware, Inc. 44
Shutdown and Startup

In a VMware Validated Design SDDC, to provide services such as load balancing and north-south
connectivity, there are two NSX-T Edge nodes sfo-m01-en01 and sfo-m01-en02 deployed in the
sfo-m01-fd-edge virtual machine folder in the sfo-m01-cl01 cluster in the management domain.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the sfo-m01-fd-edge folder.

4 Right-click the sfo-m01-en01 virtual machine and select Power > Power on.

5 Wait for the virtual machine to power on.

6 Repeat this procedure to power on the sfo-m01-en02 NSX-T Edge node.

Start the Region-Specific Workspace ONE Access Virtual Machine in

the Management Domain
Start the region-specific Workspace ONE Access virtual machine in the management domain.

In a VMware Validated Design SDDC, to provide identity and access management services to
region-specific SDDC solutions there is one Workspace ONE Access node sfo-wsa01 deployed in
the sfo-m01-fd-wsa folder in the sfo-m01-cl01 cluster in the management domain.

You complete this procedure if you deployed an SDDC by following VMware Validated Design.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

VMware, Inc. 45
Shutdown and Startup

3 Expand the sfo-m01-fd-wsa folder.

4 Right-click the region-specific Workspace ONE Access sfo-wsa01 virtual machine and click
Power > Power on.

5 Configure the domain and domain search parameters on the region-specific Workspace ONE
Access appliance.

a Log in to the region-specific Workspace ONE Access instance by using a Secure Shell
(SSH) client.

Setting Value

FQDN sfo-wsa01

User name sshuser

Password region-specific_wsa_sshuser_password

b Switch to the super user by running the su command.

c Edit the /etc/resolv.conf file.

vi /etc/resolv.conf

d Add the following entries to the end of the file and save the file.

Domain rainpole.io
search rainpole.io sfo.rainpole.io

Start the vRealize Log Insight Virtual Machines in the Management

Domain
Start the vRealize Log Insight analytics cluster nodes in the management domain.

In a VMware Validated Design SDDC, to provide log collection and aggregation there are three
clustered vRealize Log Insight nodes (sfo-vrli01a, sfo-vrli01b, and sfo-vrli01c) deployed in the
sfo-m01-fd-vrli folder in the sfo-m01-cl01 cluster in the management domain.

You complete this procedure if you deployed an SDDC by following VMware Validated Design.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

VMware, Inc. 46
Shutdown and Startup

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the sfo-m01-fd-vrli folder.

4 Right-click the sfo-vrli01a virtual machine and select Power > Power on.

5 Wait for the virtual machine to power on.

6 Repeat the steps for the remaining vRealize Log Insight virtual machines sfo-vrli01b and
sfo-vrli01c.

Start the vRealize Suite Lifecycle Manager Virtual Machine in the

Management Domain
Start the vRealize Suite Lifecycle Manager virtual machine in the management domain.

In a VMware Validated Design SDDC, to provide life-cycle management capabilities for vRealize
components including automated deployment there is one vRealize Suite Lifecycle Manager
node (xreg-vrslcm01) deployed in the xreg-m01-fd-vrslcm folder in the sfo-m01-cl01 cluster in
the management domain.

You complete this procedure if you deployed an SDDC by following VMware Validated Design.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the xreg-m01-fd-vrslcm folder.

4 Right-click the xreg-vrslcm01 virtual machine and select Power > Power on.

Start the Cross-Region Workspace ONE Access Virtual Machines in

the Management Domain
You start the Workspace ONE Access cluster by using the vRealize Suite Lifecycle Manager
administration interface.

VMware, Inc. 47
Shutdown and Startup

In a VMware Validated Design SDDC, to provide identity and access management services to
cross-region components there are three clustered Workspace ONE Access nodes xreg-wsa01a,
xreg-wsa01b, and xreg-wsa01c deployed in the xreg-m01-fd-wsa folder in the sfo-m01-cl01
cluster in the management domain.

You complete this procedure if you deployed an SDDC by following VMware Validated Design.

Procedure

1 In a Web browser, log in to vRealize Suite Lifecycle Manager by using the administration
interface.

Setting Value

URL https://xreg-vrslcm01.rainpole.io

User name vcfadmin@local

Password vrslcm_vcfadmin_password

2 Power on the cross-region Workspace ONE Access cluster and verify the status.

a On the My services page, click Lifecycle operations.

b In the navigation pane, click Environments.

c On the Environments page, in the globalenvironment card, click View details.

d In the VMware Identity Manager section, click the ellipsis icon, and, from the drop-down
menu, select Power on.

e In the Power on VMware Identity Manager dialog box, click Submit.

f On the Requests page, ensure that the request completes successfully.

3 Configure the domain and domain search parameters on the cross-region Workspace ONE
Access appliances.

a Log in to the cross-region Workspace ONE Access instance by using a Secure Shell (SSH)
client.

Setting Value

FQDN xreg-wsa01a.rainpole.io

User name sshuser

Password cross-region_wsa_sshuser_password

b Switch to the super user by running the su command.

c Edit the /etc/resolv.conf file.

vi /etc/resolv.conf

VMware, Inc. 48
Shutdown and Startup

d Add the following entries to the end of the file and save the file.

Domain rainpole.io
search rainpole.io sfo.rainpole.io

e Repeat this step to configure the domain and domain search parameters on the xreg-
wsa01b.rainpole.io and xreg-wsa01c.rainpole.io appliances.

4 In the vRealize Suite Lifecycle Manager administration interface, check the health of the
cross-region Workspace ONE Access cluster.

a In the navigation pane, click Environments.

b On the Environments page, in the globalenvironment card, click View details.

c In the VMware Identity Manager section, click the ellipsis icon, and, from the drop-down
menu, select Trigger cluster health.

d In the Trigger health collection dialog box, click Submit.

e On the Requests page, ensure that the request completes successfully.

Start the vRealize Operations Manager Virtual Machines in the

Management Domain
You start vRealize Operations Manager by first powering on the analytics cluster nodes and
remote collectors, then bringing the cluster online in the vRealize Operations Manager user
interface.

In a VMware Validated Design SDDC, to provide metrics collection and analysis there are three
clustered vRealize Operations Manager nodes xreg-vrops01a, xreg-vrops01b, and xreg-vrops01c
deployed in the xreg-m01-fd-vrops folder and two remote collector nodes sfo-vropsc01a and
sfo-vropsc01b in the sfo-m01-fd-vropsrc folder in the sfo-m01-cl01 cluster in the management
domain.

You complete this procedure if you deployed an SDDC by following VMware Validated Design.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the xreg-m01-fd-vrops folder.

VMware, Inc. 49
Shutdown and Startup

4 Power on the vRealize Operations Manager analytics cluster nodes.

a Right-click the xreg-vrops01a vRealize Operations Manager node and select Power >
Power on.

b Repeat the steps for the remaining vRealize Operations Manager cluster nodes xreg-
vrops01b and xreg-vrops01c.

5 Power on the vRealize Operations Manager collector nodes.

a Expand the sfo-m01-fd-vropsrc folder.

b Right-click the sfo-vropsc01a remote collector node, and elect Power > Power on.

c Repeat this step for the sfo-vropsc01b remote collector node.

6 In a Web browser, log in to the vRealize Operations Manager primary node by using the
operations interface.

Settings Value

URL https://xreg-vrops01a.rainpole.io

User name admin

Password vrops_admin_password

7 On the System status page, click Bring cluster online.

Wait for the vRealize Operations Manager cluster to go online.

Start the vRealize Automation Virtual Machines in the Management

Domain
You start the vRealize Automation cluster nodes in the management domain by powering on
them using the vRealize Suite Lifecycle Manager administration interface.

In a VMware Validated Design SDDC, to provide workload provisioning to end users in an

automated way there are three clustered vRealize Automation nodes xreg-vra01a, xreg-vra01b,
and xreg-vra01c deployed in the xreg-m01-fd-vra virtual machine folder in the sfo-m01-cl01
cluster in the management domain.

You complete this procedure if you deployed an SDDC by following VMware Validated Design.

VMware, Inc. 50
Shutdown and Startup

Procedure

1 In a Web browser, log in to vRealize Suite Lifecycle Manager by using the administration
interface.

Setting Value

URL https://xreg-vrslcm01.rainpole.io

User name vcfadmin@local

Password vrslcm_vcfadmin_password

2 Power on the vRealize Automation cluster and verify the status.

a On the My services page, click Lifecycle operations.

b In the navigation pane, click Environments.

c On the Environments page, in the Cross-Region-Env card, click View details.

d In the vRealize Automation section, click the ellipsis icon, and, from the drop-down menu,
select Power on.

e In the Power on vRealize Automation dialog box, click Submit.

f On the Requests page, ensure that the request completes successfully.

3 Check the health of the vRealize Automation cluster.

a In the navigation pane, click Environments.

b On the Environments page, in the Cross-Region-Env card, click View details.

c In the vRealize Automation section, click the ellipsis icon, and, from the drop-down menu,
select Trigger cluster health.

d In the Trigger health collection dialog box, click Submit.

e On the Requests page, ensure that the request completes successfully.

Start the Virtual Infrastructure Workload Domain

If you deployed a virtual infrastructure workload domain, after you start the SDDC components in
the management domain, you begin starting the SDDC stack in the virtual infrastructure workload
domain.

If you deployed a vSphere with Tanzu workload domain, you skip this chapter and proceed with
starting the vSphere with Tanzu workload domain. See Start the vSphere with Tanzu Workload
Domain.

You start the SDDC management components in the virtual infrastructure workload domain in
a specific order to provide the necessary infrastructure, networking, and management services
prior powering on each component.

VMware, Inc. 51
Shutdown and Startup

Table 3-2. Startup Order of the Virtual Infrastructure Workload Domain

Startup Order SDDC Component

1 ESXi hosts and vSAN

2 vSphere Cluster Services (vCLS) virtual machines

3 vCenter Server

4 NSX-T Managers

5 NSX-T Edge nodes

Procedure

1 Start vSAN and the ESXi Hosts in the Virtual Infrastructure Workload Domain
You begin the startup process of the SDDC components by starting the ESXi hosts in the
virtual infrastructure workload domain. You use the out-of-band management interface (Ex:
ILO, iDRAC) to connect to the ESXi host and power it on. You then exit maintenance mode
for the ESXi hosts and prepare the vSAN cluster for startup.

2 Start the vSphere Cluster Services in the Virtual Infrastructure Workload Domain
You start the vSphere Cluster Services (vCLS) virtual machines in the virtual infrastructure
workload domain.

3 Start vCenter Server in the Virtual Infrastructure Workload Domain

You begin powering on the virtual infrastructure workload domain by starting the vCenter
Server instance.

4 Start the NSX-T Manager Virtual Machines in the Virtual Infrastructure Workload Domain
You begin powering on the NSX-T Data Center infrastructure in the virtual infrastructure
workload domain by starting the NSX-T Manager cluster that provides management and
control plane capabilities to tenant workloads.

5 Start the NSX-T Edge Nodes in the Virtual Infrastructure Workload Domain
You continue powering on the NSX-T Data Center infrastructure in the virtual infrastructure
workload domain by starting the NSX-T Edge nodes that provide north-south traffic
connectivity between the physical data center networks and the NSX-T SDN networks.

Start vSAN and the ESXi Hosts in the Virtual Infrastructure Workload
Domain
You begin the startup process of the SDDC components by starting the ESXi hosts in the virtual
infrastructure workload domain. You use the out-of-band management interface (Ex: ILO, iDRAC)
to connect to the ESXi host and power it on. You then exit maintenance mode for the ESXi hosts
and prepare the vSAN cluster for startup.

VMware, Inc. 52
Shutdown and Startup

In a VMware Validated Design SDDC, to provide a virtualized infrastructure layer to the SDDC
components there are four ESXi hosts (sfo01-w01-esx01, sfo01-w01-esx02, sfo01-w01-esx03, and
sfo01-w01-esx04) deployed in the first cluster in the virtual infrastructure workload domain.

If you deployed additional clusters in the virtual infrastructure workload domain, repeat this
procedure for all ESXi hosts in each cluster.

Procedure

1 Power on the first ESXi host in the virtual infrastructure workload domain.

a In a Web browser, log in to the first ESXi host by using the out-of-band management
interface.

Setting Value

URL https://<Out-of-band IP of the first ESXi host on the

VI workload domain>

User name esxi_user_name

Password esxi_password

b On the Dashboard page, power on the ESXi host.

c Wait for the ESXi host to power on.

2 Log in to the first ESXi host for the workload domain by using a Secure Shell (SSH) client.

Setting Value

FQDN sfo01-w01-esx01.sfo.rainpole.io

User name root

Password esxi_root_user_password

3 Take the ESXi host out of maintenance mode by running the command.

esxcli system maintenanceMode set -e false

4 Repeat Step Step 1 to Step Step 3 for the remaining ESXi hosts in the virtual infrastructure
workload domain.

5 Prepare the vSAN cluster for starting by running the command.

python /usr/lib/vmware/vsan/bin/reboot_helper.py recover

The command returns Cluster reboot/power-on is completed successfully!

Note You perform this step on the first ESXi host only.

VMware, Inc. 53
Shutdown and Startup

6 Verify that all hosts in the vSAN cluster are available by running the command.

esxcli vsan cluster get

7 Enable vSAN cluster member updates by running the command.

esxcfg-advcfg -s 0 /VSAN/IgnoreClusterMemberListUpdates

8 Repeat these steps to for the remaining ESXi host in the virtual infrastructure workload
domain.

Start the vSphere Cluster Services in the Virtual Infrastructure

Workload Domain
You start the vSphere Cluster Services (vCLS) virtual machines in the virtual infrastructure
workload domain.

In an SDDC deployed according to VMware Validated Design, to ensure availability of services

such as vSphere DRS and vSphere HA to the workloads running on the clusters independent
of the vCenter Server instance availability, there is a locally managed deployment of vSphere
Cluster Services.

Procedure

1 In a Web browser, log in to the virtual infrastructure workload domain ESXi host that runs the
first vSphere Cluster Services virtual machine by using the VMware Host Client.

Setting Value

URL https://<ESXi host running vSphere Cluster Services

VM>

User name root

Password esxi_root_password

2 In the navigation pane, click Virtual machines.

3 Right-click the first vSphere Cluster Services virtual machine and select Guest OS > Power on.

4 In the confirmation dialog box, click Yes.

5 Repeat the procedure to start the remaining vSphere Cluster Services virtual machines on the
virtual infrastructure workload domain ESXi hosts that run them.

Start vCenter Server in the Virtual Infrastructure Workload Domain

You begin powering on the virtual infrastructure workload domain by starting the vCenter Server
instance.

In a VMware Validated Design SDDC, to provide centralized management of the vSphere

infrastructure there is one workload domain vCenter Server Appliance sfo-w01-vc01 deployed
in the sfo-m01-fd-mgmt folder in the sfo-m01-cl01 cluster in the management domain.

VMware, Inc. 54
Shutdown and Startup

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the sfo-m01-fd-mgmt folder.

4 Right-click the sfo-w01-vc01 workload domain vCenter Server virtual machine and select
Power > Power on.

Wait for the virtual machine to start and for vSphere services to become available.

5 In the Hosts and clusters inventory, expand the sfo-w01-vc01.sfo.rainpole.io tree and
expand the sfo-w01-dc01 data center.

6 Verify the vSAN health and resynchronization status.

a Select the sfo-w01-cl01 cluster and click the Monitor tab.

b In the left pane, navigate to vSAN > Skyline health and verify the status of each vSAN
health check category.

c In the left pane, navigate to vSAN > Resyncing objects and verify that all syncrhonization
tasks are complete.

Start the NSX-T Manager Virtual Machines in the Virtual

Infrastructure Workload Domain
You begin powering on the NSX-T Data Center infrastructure in the virtual infrastructure
workload domain by starting the NSX-T Manager cluster that provides management and control
plane capabilities to tenant workloads.

In a VMware Validated Design SDDC, to configure and manage network services for tenant
workloads in the virtual infrastructure workload domain, there are three NSX-T Manager nodes
sfo-w01-nsx01a, sfo-w01-nsx01b, and sfo-w01-nsx01c deployed in the sfo-m01-fd-nsx virtual
machine folder in the first cluster in the management domain.

VMware, Inc. 55
Shutdown and Startup

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the sfo-m01-fd-nsx folder.

4 Right-click the sfo-w01-nsx01a NSX-T Manager and select Power > Power on.

5 Repeat the steps to power on the remaining workload domain NSX-T Managers sfo-w01-
nsx01b and sfo-w01-nsx01c.

6 In a Web browser, log in to the NSX-T Local Manager for the workload domain by using the
user interface.

Setting Value

URL https://sfo-w01-nsx01.sfo.rainpole.io/login.jsp?local=true

User name admin

Password nsx-t_admin_password

7 Verify the system status of the NSX-T Managers.

a On the main navigation bar, click System.

b In the left pane, navigate to Configuration > Appliances.

c On the Appliances page, verify that the cluster is Stable and all NSX-T Managers have a
green status.

Start the NSX-T Edge Nodes in the Virtual Infrastructure Workload

Domain
You continue powering on the NSX-T Data Center infrastructure in the virtual infrastructure
workload domain by starting the NSX-T Edge nodes that provide north-south traffic connectivity
between the physical data center networks and the NSX-T SDN networks.

In a VMware Validated Design SDDC, to provide services such as load balancing and north-south
connectivity, there are two NSX-T Edge nodes (sfo-w01-en01 and sfo-w01-en02) deployed in the
sfo-w01-fd-edge virtual machine folder in the first cluster in the virtual infrastructure workload
domain.

VMware, Inc. 56
Shutdown and Startup

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-w01-vc01.sfo.rainpole.io tree and
expand the sfo-w01-dc01 data center.

3 Expand the sfo-w01-fd-edge folder.

4 Right-click the sfo-w01-en01 virtual machine and click Power > Power on.

5 Repeat the steps to power on the sfo-w01-en02 NSX-T Edge node.

Start the vSphere with Tanzu Workload Domain

If you deployed a vSphere with Tanzu workload domain, after you start the SDDC components
in the management domains, you begin starting the SDDC stack in the vSphere with Tanzu
workload domain.

If you deployed a virtual infrastructure workload domain, you skip this chapter and proceed with
starting the virtual infrastructure workload domain. See Start the Virtual Infrastructure Workload
Domain.

You start the SDDC management components in the vSphere with Tanzu workload domain in
a specific order to provide the necessary infrastructure, networking, and management services
prior powering on each component.

Table 3-3. Startup Order of the vSphere with Tanzu Workload Domain

Startup Order SDDC Component

1 ESXi hosts and vSAN

vSphere Cluster Services (vCLS) virtual machines

2 vCenter Server

VMware, Inc. 57
Shutdown and Startup

Table 3-3. Startup Order of the vSphere with Tanzu Workload Domain (continued)

Startup Order SDDC Component

3 NSX-T Managers

4 NSX-T Edge nodes

Procedure

1 Start vSAN and the ESXi Hosts in the vSphere with Tanzu Workload Domain
You begin the startup process of the SDDC components by starting the ESXi hosts in the
vSphere with Tanzu workload domain. You use the out-of-band management interface (Ex:
ILO, iDRAC) to connect to the ESXi host and power it on. You then exit maintenance mode
for the ESXi hosts and prepare the vSAN cluster for startup.

2 Start the vSphere Cluster Services in the vSphere with Tanzu Workload Domain
You start the vSphere Cluster Services (vCLS) virtual machines in the vSphere with Tanzu
workload domain.

3 Start vCenter the Server Instance in the vSphere with Tanzu Workload Domain
You begin powering on the vSphere with Tanzu workload domain by starting the workload
domain vCenter Server instance.

4 Start the NSX-T Manager Virtual Machines in the vSphere with Tanzu Workload Domain
You begin powering on the NSX-T Data Center infrastructure in the vSphere with Tanzu
workload domain by starting the NSX-T Manager cluster that provides management and
control plane capabilities to Tanzu workloads.

5 Start the NSX-T Edge Nodes in the vSphere with Tanzu Workload Domain
You continue powering on the NSX-T Data Center infrastructure in the vSphere with
Tanzu workload domain by starting the NSX-T Edge nodes that provide north-south traffic
connectivity between the physical data center networks and the NSX-T SDN networks.

Start vSAN and the ESXi Hosts in the vSphere with Tanzu Workload
Domain
You begin the startup process of the SDDC components by starting the ESXi hosts in the
vSphere with Tanzu workload domain. You use the out-of-band management interface (Ex: ILO,
iDRAC) to connect to the ESXi host and power it on. You then exit maintenance mode for the
ESXi hosts and prepare the vSAN cluster for startup.

In a VMware Validated Design SDDC, to provide a virtualized infrastructure layer to the

Kubernetes workloads, there are four ESXi hosts sfo01-w01-esx01, sfo01-w01-esx02, sfo01-w01-
esx03, and sfo01-w01-esx04 deployed in the sfo-w01-cl01 cluster in the vSphere with Tanzu
workload domain.

VMware, Inc. 58
Shutdown and Startup

Procedure

1 Power on the first ESXi host in the vSphere with Tanzu workload domain.

a In a Web browser, log in to the first ESXi host by using the out-of-band management
interface.

Setting Value

URL https://<Out-of-band IP of the first ESXi host on the

vSphere with Tanzu workload domain>

User name esxi_user_name

Password esxi_password

b On the Dashboard page, power on the ESXi host.

c Wait for the ESXi host to power on.

2 Log in to the first ESXi host for the workload domain by using a Secure Shell (SSH) client.

Setting Value

FQDN sfo01-w01-esx01.sfo.rainpole.io

User name root

Password esxi_root_user_password

3 Take the ESXi host out of maintenance mode by running the command.

esxcli system maintenanceMode set -e false

4 Repeat Step Step 1 to Step Step 3 for the remaining ESXi hosts in the vSphere with Tanzu
workload domain.

5 Prepare the vSAN cluster for starting by running the command.

python /usr/lib/vmware/vsan/bin/reboot_helper.py recover

The command returns Cluster reboot/power-on is completed successfully!

Note You perform this step on the first ESXi host only.

6 Verify that all hosts in the vSAN cluster are available by running the command.

esxcli vsan cluster get

7 Enable vSAN cluster member updates by running the command.

esxcfg-advcfg -s 0 /VSAN/IgnoreClusterMemberListUpdates

8 Repeat these steps for the remaining ESXi hosts in the vSphere with Tanzu workload domain.

VMware, Inc. 59
Shutdown and Startup

Start the vSphere Cluster Services in the vSphere with Tanzu

Workload Domain
You start the vSphere Cluster Services (vCLS) virtual machines in the vSphere with Tanzu
workload domain.

In an SDDC deployed according to VMware Validated Design, to ensure availability of services

such as vSphere DRS and vSphere HA to the workloads running on the clusters independent
of the vCenter Server instance availability, there is a locally managed deployment of vSphere
Cluster Services.

Procedure

1 In a Web browser, log in to the vSphere with Tanzu workload domain ESXi host that runs the
first vSphere Cluster Services virtual machine by using the VMware Host Client.

Setting Value

URL https://<ESXi host running vSphere Cluster Services

VM>

User name root

Password esxi_root_password

2 In the navigation pane, click Virtual machines.

3 Right-click the first vSphere Cluster Services virtual machine and select Guest OS > Power on.

4 In the confirmation dialog box, click Yes.

5 Repeat the procedure to start the remaining vSphere Cluster Services virtual machines on the
vSphere with Tanzu workload domain ESXi hosts that run them.

Start vCenter the Server Instance in the vSphere with Tanzu

Workload Domain
You begin powering on the vSphere with Tanzu workload domain by starting the workload
domain vCenter Server instance.

In a VMware Validated Design SDDC, to provide centralized management of the vSphere

infrastructure in the vSphere with Tanzu workload domain there is one vCenter Server
Appliance sfo-w01-vc01 deployed in the sfo-m01-fd-mgmt folder in the sfo-m01-cl01 cluster in
the management domain.

VMware, Inc. 60
Shutdown and Startup

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the sfo-m01-fd-mgmt folder.

4 Right-click the sfo-w01-vc01 vCenter Server virtual machine and select Power > Power on.

Wait for the virtual machine to start and for vSphere services to become available.

5 In the Hosts and clusters inventory, expand the sfo-w01-vc01.sfo.rainpole.io tree and
expand the sfo-w01-dc01 data center.

6 Verify the vSAN health and resynchronization status.

a Select the sfo-w01-cl01 cluster and click the Monitor tab.

b In the left pane, navigate to vSAN > Skyline health and verify the status of each vSAN
health check category.

c In the left pane, navigate to vSAN > Resyncing objects and verify that all syncrhonization
tasks are complete.

7 Log in to the workload domain vCenter Server by using a Secure Shell (SSH) client.

Setting Value

FQDN sfo-w01-vc01.sfo.rainpole.io

User name root

Password vcenter_server_root_password

8 Verify that the state of the Kubernetes services is STARTED by running the command.

vmon-cli -s wcp

VMware, Inc. 61
Shutdown and Startup

Start the NSX-T Manager Virtual Machines in the vSphere with Tanzu
Workload Domain
You begin powering on the NSX-T Data Center infrastructure in the vSphere with Tanzu workload
domain by starting the NSX-T Manager cluster that provides management and control plane
capabilities to Tanzu workloads.

In a VMware Validated Design SDDC, to configure and manage network services for workloads in
the vSphere with Tanzu workload domain, there are three NSX-T Manager nodes sfo-w01-nsx01a,
sfo-w01-nsx01b, and sfo-w01-nsx01c deployed in the sfo-m01-fd-nsx virtual machine folder in the
sfo-m01-cl01 cluster in the management domain.

Procedure

1 In a Web browser, log in to the Workload domain vCenter Server by using the vSphere Client.

Setting Value

URL https://sfo-w01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-m01-vc01.sfo.rainpole.io tree and
expand the sfo-m01-dc01 data center.

3 Expand the sfo-m01-fd-nsx folder.

4 Power on the NSX-T Managers.

a Right-click the sfo-w01-nsx01a NSX-T Manager and select Power > Power on.

b Wait for the virtual machine to power on.

c Repeat the steps to power on the remaining NSX-T Managers sfo-w01-nsx01b and sfo-
w01-nsx01c.

5 In a Web browser, log in to the NSX-T Local Manager for the workload domain by using the
user interface.

Setting Value

URL https://sfo-w01-nsx01.sfo.rainpole.io/login.jsp?local=true

User name admin

Password nsx-t_admin_password

VMware, Inc. 62
Shutdown and Startup

6 Verify the system status of the NSX-T Managers.

a On the main navigation bar, click System.

b In the left pane, navigate to Configuration > Appliances.

c On the Appliances page, verify that the cluster is Stable and all the NSX-T Managers
have green status.

Start the NSX-T Edge Nodes in the vSphere with Tanzu Workload
Domain
You continue powering on the NSX-T Data Center infrastructure in the vSphere with Tanzu
workload domain by starting the NSX-T Edge nodes that provide north-south traffic connectivity
between the physical data center networks and the NSX-T SDN networks.

In a VMware Validated Design SDDC, to provide services such as load balancing and north-south
connectivity, there are two NSX-T Edge nodes sfo-w01-en01 and sfo-w01-en02 deployed in the
sfo-w01-fd-edge virtual machine folder in the sfo-w01-cl01 cluster in the vSphere with Tanzu
workload domain.

Procedure

1 In a Web browser, log in to the management domain vCenter Server by using the vSphere
Client.

Setting Value

URL https://sfo-m01-vc01.sfo.rainpole.io/ui

User name [email protected]

Password vsphere_admin_password

2 In the VMs and templates inventory, expand the sfo-w01-vc01.sfo.rainpole.io tree and
expand the sfo-w01-dc01 data center.

3 Expand the sfo-w01-fd-edge folder.

4 Right-click the sfo-w01-en01 virtual machine and click Power > Power on.

5 Repeat the steps to power on the sfo-w01-en02 NSX-T Edge node.

Results

After the vSphere with Tanzu services and the NSX-T Data Center infrastructure are operational,
the following virtual machines will automatically start:

n Supervisor Control Plane virtual machines

n Tanzu Kubernetes Cluster control plane virtual machines

n Tanzu Kubernetes Cluster worker virtual machines

n Harbor registry virtual machines

VMware, Inc. 63