Chapter 5. Add vCenter sources and credentials
To run a scan on a vCenter Server deployment, you must add a source that identifies the vCenter Server server to scan. Then you must add a credential that contains the authentication data to access that server.
5.1. Add vCenter sources Copy linkLink copied to clipboard!
Define vCenter sources to identify vCenter Server instances and their managed virtual machines for Discovery scanning.
A vCenter source is only compatible with a vCenter deployment. You cannot use this source to scan other virtualization infrastructures, even those that are supported by Red Hat.
Procedure
Click the option to add a new credential based on your location:
- From the Credentials view, click Add Source.
- From the Sources view, click Add.
- On the Type page, select vCenter Server as the source type and click Next.
On the Credentials page, enter the following information:
- In the Name field, enter a descriptive name.
-
In the IP Address or Hostname field, enter the IP address or hostname of the vCenter Server for this source. Enter a different port if you do not want a scan for this source to run on the default port 443. For example, if the IP address of the vCenter Server is 192.0.2.15 and you want to change the port to 80, you would enter
192.0.2.15:80. -
Optional: In the Proxy URL field enter the proxy server needed to reach the vCenter host. This value is passed directly to the HTTP client and must match the format expected by your proxy setup, for example,
http://proxy.example.com:3128orhttps://proxy.example.com:443. - In the Credentials list, select the credential that is required to access the vCenter Server for this source. If a required credential does not exist, click the Add a credential icon to open the Add Credential view.
- In the Connection list, select the SSL protocol to be used for a secure connection during a scan of this source. Select Disable SSL to disable secure communication during a scan of this source.
- If you need to upgrade the SSL validation for the vCenter Server to check for a verified SSL certificate from a certificate authority, select the Verify SSL Certificate check box.
- Click Save to save the source and then click Close to close the Add Source view.
Verification
- In the Sources view, verify that the new source appears in the sources list with the correct name and type.
5.2. Add vCenter credentials Copy linkLink copied to clipboard!
Create vCenter credentials to authenticate Discovery scans against vCenter Server instances.
Procedure
Click the option to add a new credential based on your location:
-
From the Credentials view, click
. - From the Add Source wizard, click the Add a credential icon for the Credentials field.
The Add Credential wizard opens.
-
From the Credentials view, click
- In the Credential Name field, enter a descriptive name.
- Enter the username and password for a vCenter Server administrator.
- Click Save to save the credential and close the Add Credential wizard.
Verification
- In the Credentials view, verify that the new credential appears in the credentials list with the correct name and type.
5.3. Red Hat Discovery sources and credentials Copy linkLink copied to clipboard!
To run a scan, you must configure data for two basic structures: sources and credentials. The type of source that you are going to inspect during the scan determines the type of data that is required for both source and credential configuration.
A source contains a single asset or a set of multiple assets that are to be inspected during the scan. You can configure any of the following types of sources:
- Network source
- One or more physical machines, virtual machines, or containers. These assets can be expressed as hostnames, IP addresses, IP ranges, or subnets.
- vCenter source
- A vCenter Server systems management solution that is managing all or part of your IT infrastructure.
- Satellite source
- A Satellite systems management solution that is managing all or part of your IT infrastructure.
- Red Hat OpenShift source
- A Red Hat OpenShift Container Platform cluster that is managing all or part of your Red Hat OpenShift Container Platform nodes and workloads.
- Ansible source
- An Red Hat Ansible Automation Platform management solution that is managing your Red Hat Ansible Automation Platform nodes and workloads.
- Red Hat Advanced Cluster Security for Kubernetes source
- A RHACS security platform solution that secures your Kubernetes environments.
When you are working with network sources, you determine how many individual assets you should group within a single source. Currently, you can add multiple assets to a source only for network sources. The following list contains some of the other factors that you should consider when you are adding sources:
- Whether assets are part of a development, testing, or production environment, and if demands on computing power and similar concerns are a consideration for those assets.
- Whether you want to scan a particular entity or group of entities more often because of internal business practices such as frequent changes to the installed software.
A credential contains data such as the username and password or SSH key of a user with sufficient authority to run the scan on all or part of the assets in that source. As with sources, credentials are configured as the network, vCenter, satellite, OpenShift, Red Hat Ansible Automation Platform, or RHACS type. A network source might require multiple network credentials to access all assets in a broad IP range. Conversely, a vCenter or satellite source typically uses a single credential to access a particular system management solution server. An OpenShift, Red Hat Ansible Automation Platform, or RHACS source uses a single credential to access a single cluster.
You can add new sources from the Sources view and you can add new credentials from the Credentials view. You can also add new or select previously existing credentials during source creation. It is during source creation that you associate a credential directly with a source.
Because sources and credentials must have matching types, any credential that you add during source creation shares the same type as the source. If you want to use an existing credential during source creation, the list of available credentials contains only credentials of the same type. For example, during network source creation, only network credentials are available for selection.
5.4. vCenter Server authentication Copy linkLink copied to clipboard!
vCenter scans authenticate to vCenter Server by using a username and password encrypted over HTTPS. By default, scans run with certificate validation and secure communication through SSL or TLS protocols, which you can configure during source creation.
You might need to adjust the level of certificate validation to connect properly to the vCenter server during a scan. For example, your vCenter server might use a verified SSL certificate from a certificate authority. During source creation, you can upgrade SSL certificate validation to check for that certificate during a scan of that source.
Conversely, your vCenter server might use self-signed certificates. During source creation, you can leave the SSL validation at the default so that scan of that source does not check for a certificate. This choice, to leave the option at the default for a self-signed certificate, could possibly avoid scan errors.
You might also need to disable SSL as the method of secure communication during the scan if the vCenter server is not configured to use SSL communication for web applications. For example, your vCenter server might be configured to communicate with web applications by using HTTP with port 80. If so, then during source creation you can disable SSL communication for scans of that source.