So I opted to go with an external vRO7 server using vCenter authentication. I'm able to added it as the vRO in vRA, and am running most workflows, up until I added Active Directory Policies. I get an error that it must be registered with the https://vRA/component-registry/ Everywhere in the vray-7.1 documentation, it states if you are using an external vRO, you must register it with the component-registry. You know what I have yet to find? The documentation to do this. I found a KB article for vRA/vRO6 that says to run the workflow, "Register Orchestrator in vRealize Automation component registry”, but all of the methods in that workflow are no longer valid or are missing in vRO7.
Anytime a catalog VM is requested from the business group with the active directory policy, the error I am getting is the following:
sendEBSMessage15(workflow=eadcdd33-c688-4fd3-b996-eec873d684e0) Error in state VMPSMasterWorkflow32.BuildingMachine phase PRE event (queue = e5259088-2575-469b-a9ac-7fa592f2aa7b):
Extensibility consumer error(20999) - In order to use the session mode 'Per User Session' vCO must be registered in the vCAC component registry. (Dynamic Script Module name : getDefaultHostForTenant#8)
When I ran the “Register Orchestrator in vRealize Automation component registry” workflow, I received the following error:
[2017-01-24 13:29:06.117] [E] Error in (Workflow:Register Orchestrator in vRealize Automation component registry / Find the SSO URL (item3)#12758) ReferenceError: "ConfiguratorRetrieveSSOFromComponentRegistryAction" is not defined.
From vRA7/component-registry/services/status/current:
<serviceStatus serviceId="XXXX-XXX-XXX-XXX" serviceName="vco" serviceTypeId="com.vmware.vco.o11n" notAvailable="false">
<statusEndPointUrl>https://myvro.domain.local:8281/vco/api/status</statusEndPointUrl>
<serviceStatus>
<initialized>true</initialized>
<serviceInitializationStatus>NOT_REGISTERED</serviceInitializationStatus>
<startedTime>2017-01-24T20:54:17.285Z</startedTime>
<sslCertificateInfo>
<identityCertificateExists>false</identityCertificateExists>
<issuerName>CN=myvro.domain.local,OU=VMware,O=VMware,C=US
</issuerName>
<notValidAfter>2025-12-07T22:13:07Z</notValidAfter>
<notValidBefore>2015-12-09T22:13:07Z</notValidBefore>
</principalName>
<thumbprint>XX:XX:XX</thumbprint>
</sslCertificateInfo>
</serviceStatus>
</serviceStatus>