Enter a name for the NSX Advanced Load Balancer.

The IP address of the NSX Advanced Load Balancer Controller.

The default port is 443.

The user name that is configured with the NSX Advanced Load Balancer. You use this user name to access the Controller.

The password for the user name.

The certificate used by the Controller.

You can provide the certificate that you assigned during the configuration.

For more information, see Assign a Certificate to the Controller.

To use Default-Cloud, leave this field empty.

For more information, see Configure the Controller.

The IP address and port of the HAProxy Data Plane API, which is the management IP address of the HAProxy appliance. This component controls the HAProxy server and runs inside the HAProxy VM.

The user name that is configured with the HAProxy OVA file. You use this name to authenticate with the HAProxy Data Plane API.

The password for the user name.

Range of IP addresses that is used in the Workload Network by TKG clusters. This IP range comes from the list of IPs that were defined in the CIDR you configured during the HAProxy appliance deployment. You can set the entire range configured in the HAProxy deployment, but you can also set a subset of that CIDR if you want to create multiple Supervisors and use IPs from that CIDR range. This range must not overlap with the IP range defined for the Workload Network in this wizard. The range must also not overlap with any DHCP scope on this Workload Network.

The certificate in PEM format that is signed or is a trusted root of the server certificate that the Data Plane API presents.

• Option 1: If root access is enabled, SSH to the HAProxy VM as root and copy /etc/haproxy/ca.crt to the Server Certificate Authority. Do not use escape lines in the \n format.

• Option 2: Right-click the HAProxy VM and select Edit Settings. Copy the CA cert from the appropriate field and convert it from Base64 using a conversion tool such as https://www.base64decode.org/.

• Option 3: Run the following PowerCLI script. Replace the variables $vc,$vc_user, and $vc_password with appropriate values.

  $vc = "10.21.32.43"
  $vc_user = "administrator@vsphere.local"
  $vc_password = "PASSWORD"
  Connect-VIServer -User $vc_user -Password $vc_password -Server $vc
  $VMname = "haproxy-demo"
  $AdvancedSettingName = "guestinfo.dataplaneapi.cacert"
  $Base64cert = get-vm $VMname |Get-AdvancedSetting -Name $AdvancedSettingName
  while ([string]::IsNullOrEmpty($Base64cert.Value)) {
       Write-Host "Waiting for CA Cert Generation... This may take a under 5-10
  minutes as the VM needs to boot and generate the CA Cert
  (if you haven't provided one already)."
       $Base64cert = get-vm $VMname |Get-AdvancedSetting -Name $AdvancedSettingName
       Start-sleep -seconds 2
       }
       Write-Host "CA Cert Found... Converting from BASE64" 
       $cert = [Text.Encoding]::Utf8.GetString([Convert]::FromBase64String($Base64cert.Value))
  Write-Host $cert