If the vCenter Server instance has been deployed with an embedded PSC and you want additional vCenter Server instances in your SSO domain, you can modify the vCenter Server instance configuration to point to an external PSC. This configuration is a one-way process only, and it's not possible to switch back to the previous configuration with an embedded PSC.

Before proceeding, take snapshots of both the vCenter Server with the embedded PSC and the external PSC, so that you can go back if anything goes wrong during configuration.

To point the vCSA with an embedded PSC to an external PSC, you should perform the following steps:

1. SSH the vCenter Server with the embedded PSC using the root credentials and enable the shell.
2. Verify that all services are running in the PSC using the following command:

service-control --status --all

The services that must be running are as follows:

• • VMware License Service
  • VMware Identity Management Service
  • VMware Security Token Service
  • VMware Certificate Service
  • VMware Directory Service

3. To reconfigure the vCenter Server, use the following command:

cmsso-util reconfigure --repoint-psc psc_fqdn --username username --domain-name domain --passwd password

4. Using the vSphere Client, log in to the vCenter Server instance to verify that the instance is running, and that you can manage it. If the procedure has completed successfully, the vCenter Server with the embedded PSC is now demoted and redirected to the external PSC.