Configuring SSL Termination for Ops Manager on vSphere
Page last updated:
To use SSL termination in Ops Manager, you must configure your own load balancer.
Production environments should use a highly-available customer-provided load balancing solution that:
- Provides SSL termination with wildcard DNS location
- Provides load balancing to each of the TAS for VMs Gorouter IPs
- Adds appropriate
To use your own load balancer:
Register one or more static IP address for Ops Manager with your load balancer.
Create an A record in your DNS that points to your load balancer IP address. The A record associates the System domain and Apps domain that you configure in the Domains pane of the TAS for VMs tile with the IP address of your load balancer.
For example, with
.example.comas the main subdomain for your Ops Manager installation and a load balancer IP address
198.51.100.1, you must create an A record in your DNS that serves
Name Type Data Domain *. A 198.51.100.1 example.com
Navigate to the Ops Manager Installation Dashboard.
Click the TAS for VMs tile.
In the Gorouter IPs field, enter the static IP address for Ops Manager that you have registered with your load balancer.
Provide your SSL certificate in the Certificates and private keys for the Gorouter fields. For more information, see Providing a Certificate for Your TLS Termination Point.
Note: When adding or removing TAS for VMs Gorouters, you must update your load balancing solution configuration with the appropriate IP addresses.