Share
5

List of Aria Automation Orchestrator System Properties [CB10123]

by Mayank Goyal · 30 May 2023

System Properties are special attributes that give users the ability to change Orchestrator internal system behavior directly by modifying\adding those properties from the Control Centre. These properties are basically part of a configuration file in Orchestrator. In this post, we will some of the important system properties that can help you to enhance your Orchestrator experience.

Process of adding these properties will be same as mentioned below. You don’t really have to add them until needed.

List of System Properties

UsageDescriptionKeyValue (example)
vRO API Call IssueIf the authentication provider has been registered using vracli vro authentication commands, this may fix the API related issues of Orchestratorcom.vmware.o11n.sso.svcaccount.ephemeral-cert-lifetime-ms7776000000
Disable Automatic Import of Trusted CertificatesIt disables importing the trusted certificates into Polyglot Runtime. Resolves ERROR rehash: warning: skipping duplicate certificate in imported-{SHA256}.pemcom.vmware.o11n.polyglot.import-trusted-certificatesfalse
Number of concurrent running policies
The number of policies that run simultaneously
com.vmware.o11n.policy.executor_queue_size300
OGNL ValidatorThis property enables the OGNL expression evaluation inside Orchestratorcom.vmware.o11n.forms.evalognl-validator.enabledfalse
Set the number of vAPI MetamodelsThis property will set the number of the vAPI metamodels that can be added from Orchestrator vAPI Plug-in. Adding more that 20 may use excessive memory and cause instabilityvapi.metamodels.count20 (default)
Enable safe modeIf safe mode is enabled, all running workflows are canceled and are not resumed on the next Orchestrator node start.ch.dunes.safe-modefalse
Number of concurrent running workflowsThe number of workflows that run simultaneously.com.vmware.vco.workflow-engine.executors-count300
Maximum amount of running workflows in the queueThe number of workflow run requests that the Orchestrator server accepts before becoming unavailable.com.vmware.vco.workflow-engine.executors-max-queue-size10000
Maximum number of preserved runs per workflowThe maximum number of finished workflow runs that are kept as history per workflow. If the number is exceeded, the oldest workflow runs are deleted.ch.dunes.task.max-workflow-tokens100
Log events expiration daysThe number of days that log events are kept in the database before they are purged.com.vmware.o11n.log-events-expiration-days15
Set JavaScript Access to Java ClassesAllow the JavaScript engine full access to the Java virtual machine (JVM) com.vmware.scripting.rhino-class-shutter-filevco/usr/lib/vco/your_configuration_file_subdirectory
Adding a JDBC Connector for the vRealize Orchestrator SQL Plug-InProvides the path to the JDBC connectoro11n.plugin.SQL.classpath/var/run/vco/plugins/SQL/lib/your_mysql_connector.jar
Set Custom Timeout PropertyThe number of milliseconds Orchestrator will wait for the response from vCentercom.vmware.vmo.plugin.vi4.waitUpdatesTimeout30000
Access to Operating System Commands for Workflows and ActionsGrant permission to use the Command class com.vmware.js.allow-local-processtrue
Scheduled Task and Policy Authentication Token RenewalTo make sure that the scheduled workflows or policies in the Orchestrator deployment continue running even after eight hourscom.vmware.o11n.auth.csp.renewTokenstrue (link)
Enables Basic Authenticationenables basic authentication in Orchestrator for Multi-Node plugin and REST API.com.vmware.o11n.sso.basic-authentication.enabledtrue
Purge workflow tokens at set intervalThe cron syntax to purge/delete workflow tokens automatically, changes the frequency of purgingcom.vmware.o11n.purge.execution.cron0 0/5 * * * ?
Enable Workflow Profiler in the vRealize Orchestrator ClientEnables profiler service to gather useful metric data about your workflow runscom.vmware.vro.extensions.profiler.enabledtrue
Enable Profiler for Every Workflow RunAfter you enable the Profile all workflow runs option, Workflow Profiler will generate statistics for every workflow runcom.vmware.o11n.extensions.profiler.profile-all-workflow-runstrue
Enable Profiler for Scripting APIShould the profiler record metrics for scripting API callscom.vmware.o11n.extensions.profiler.record-scriptingtrue
Enable Profiler for Action RunsShould the profiler record metrics for standalone action runscom.vmware.o11n.extensions.profiler.record-action-runstrue
Enable TokenReplayenables tokenreplay service by setting it to truecom.vmware.vro.extensions.tokenreplay.enabledtrue
Record token replay for all workflow runsAfter you enable the TokenReplay, it will record for every workflow runcom.vmware.o11n.extensions.tokenreplay.record-all-workflow-runstrue
Record scripting API callsit will record for every Scripting API callcom.vmware.o11n.extensions.tokenreplay.recordScriptingtrue
Enable Debugging for KerberosThis will enable debugging for Kerberos Authentication modesun.security.krb5.debugtrue
Socket Read Timeout periodThe number of milliseconds Orchestrator will wait for the read timeout during REST callcom.vmware.vmo.plugin.vi4.socketReadTimeout180000
Controls the delegation of authentication tokensAllowing scheduled tasks or policies to use the same credentials as the user who initiated themcom.vmware.o11n.auth.csp.delegate_tokenstrue
Increase Max Upload SizeIncrease the Maximum Upload Size from 50MB to 100MB (applies to vRO packages, resource elements, etc.)com.vmware.o11n.rest.maxUploadSize=100000000
Reduce the allowed maximum size of persisted token content (MB)https://knowledge.broadcom.com/external/article?articleNumber=369686com.vmware.o11n.token.content-size-hard-limit32 * 1024 * 1024 = 33554432 (actual value)
Reduce the allowed maximum size of persisted token content (MB)https://knowledge.broadcom.com/external/article?articleNumber=369686com.vmware.o11n.token.content-size-soft-limit4 * 1024 * 1024 = 4194304 (actual value)

Procedure to add in Orchestrator

For Aria Automation 8.18.1 and above

As Control Center is removed , use vracli command to set the value from CLI. Run the bellow command.

Bash
vracli vro properties set -k com.vmware.o11n.sso.basic-authentication.enabled -v true

Once this is done, the vro-app POD will be recreated.

For Aria Automation 8.18 and below

  1. Log in to Control Center as root.
  2. Click System Properties.
  3. Click New.
  4. In the Key text box, enter property.name (for eg. com.vmware.o11n.auth.csp.renewTokens).
  5. In the Value text box, enter value (for eg. true).
  6. In the Description text box, enter a description for the system property.
  7. Click Add.
  8. Click Save changes from the pop-up menu. A message indicates that you have saved successfully.
  9. Wait for the vRealize Orchestrator server to restart.
Procedure to add using REST Method (for 8.18 and below only)

You can also change these settings by control-center REST API.

HTTP
POST https://[vro-server]/vco-controlcenter/api/properties

Content-Type: application/json
Authorization: Basic [base64-encoded-credentials]

{
  "properties": [
    {
      "key": "com.vmware.js.allow-local-process",
      "value": "true"
    }
  ]
}

Properties File location

Bash
root@VRO [/data/vco/usr/lib/vco/app-server/conf]# cat vmo.properties

database.username=vco-db

database.url=jdbc:postgresql://pgpool:5432/vco-db

database.driverClassName=org.postgresql.Driver

encoded.vco.db.password=vcoencrypted:{riv}j8qSq+JDLEfzHhqf83KMHyb+XyLLrrZJBt2pfSYNYZP9kWpKLNh0F1NvAOtsbUBlLMxVkwiTVwXgtAra4CQ4mg==

com.vmware.o11n.policy.executor_queue_size=300

database.hibernate.dialect = org.hibernate.dialect.PostgreSQLDialect

vco.vsphere.lookup-service.url = https://X.X.X.X/lookupservice/sdk

vco.vsphere.lookup-service.cert.alias = vco.vsphere.lookup-service.ssl.certificate
ch.dunes.net.jboss-server.port = 8230
ch.dunes.authentication.provider = vsphere

ch.dunes.vso.client-keep-alive-disable = true
ch.dunes.task.max-workflow-tokens = 100
com.vmware.o11n.log-events-expiration-days = 15
com.vmware.vmo.plugin.vi4.socketReadTimeout = 180000

Discover more from Cloud Blogger

Subscribe to get the latest posts sent to your email.

You may also like