Apologize for a lengthy explanation of the environment I am working on. Please go thru it fully for a complete understanding.
Okay, lets get directly on to the topic 
We have 3 Physical Sites
Site-A
Site-B
Site-C
SSO Info
A separate VM called Master-SSO-VM
vCenter info (Please don;t ask why we have so many VCs in the environment )
Site-A
- VC1 (SSO installed with “vCenter SSO for an additional vCenter in an existing site”)
- VC2 (SSO installed with “vCenter SSO for an additional vCenter in an existing site”)
- VC3 (VDI) ((SSO installed with “vCenter SSO for an additional vCenter in an existing site”)
Site-B
- VC4 (SSO installed with “vCenter SSO for an additional vCenter with a new site”)
- VC5 (SSO installed with “vCenter SSO for an additional vCenter in an existing site”)
Site-C
- VC6 (SSO installed with “vCenter SSO for an additional vCenter with a new site”)
Here is our SSO design,
I have a separate VM designated for Master SSO VM in Site-A.
All my VC will have SSO, Inventory, Web Client Installed on them. The SSO on each VC will point to master SSO in Site-A.
Why I decided to have a separate VM for Master SSO? There is no big reason for that, I just wanted to have a separate SSO VM where all other VC’s SSO can point to instead of pointing to a SSO installed on a specific VC.
Here is the attached diagram explaining SSO-Design.PNG
So my question is
1. Is this the appropriate design for my environment considering we want to have linked vCenters for all of them in the entire environment?
2. The other issue I encountered is, when I installed my first vCenter server VC3, the vCenter service won’t start and the vpxd.log would throw SSO errors. I fixed it after changing the SSO to the local vCenter address in vpxd.cfg file. It was pointing to the Master-SSO-VM address. Here is the Vmware KB article on the error http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2058080
Note:
- We will be Installing vSphere 5.5 and it’s components from scratch
- Right now we have only Master-SSO-VM and VC3 stood up, we will be slowly adding other VCs into this design if this design make sense.