A tenant-enabled

Workspace ONE Access

can only be accessed by tenant FQDNs. Scaling out a tenant-enabled

Workspace ONE Access

from a single node to a three node cluster behind a load balancer requires changes to its DNS and certificate requirements.

All the

Workspace ONE Access

tenant FQDNs must point to the load balancer IP address instead of a single node IP address. The

Workspace ONE Access

load balancer certificate must hold all the tenant FQDNs. For more information on mandatory certificates and DNS requirements, see Multi-tenancy model for VMware Aria Suite Lifecycle products.

The same recommendations are provided in the

VMware Aria Suite Lifecycle

user interface as a pre-requisite before scaling out the

Workspace ONE Access

global environment. For more information, see Multi-tenancy model for VMware Aria Suite Lifecycle products.