One way to minimize the configuration of servers needed for the Auto Deploy infrastructure is to use the vCenter Server Appliance (vCSA) as the TFTP server.  Since Auto Deploy is built into the vCSA it has all the building blocks you need.

1. Deploy your new vCSA
2. Login and make sure all services are stopped (https://x.x.x.x:5480):
   
3. SSH into the vCSA:
   
   ssh root@x.x.x.x

   1	ssh root@x.x.x.x

4. Start the TFTP service:
   
   service atftp start

   1	service atftp start

5. Set chkconfig:
   
   chkconfig atftpd on

   1	chkconfig atftpd on

6. Verify Changes:
   
   chkconfig --list atftpd

   1	chkconfig --list atftpd

7. Your TFTP directory is located at /tftpboot/
   
8. The directory already contains the necessary files for Auto Deploy( tramp file, undionly.kpxe.vmw-hardwired, etc) with the exception of the deploy-tftp.zip.   This needs to be downloaded from you vCenter Server and scp’d to here.

There are many options for setting up a TFTP server. It can be Linux, Windows, or even ran right off of the vCenter Server Appliance (VCSA). Here are the steps I used to setup TFTP on CentOS:

1. yum update

   1	yum update

2. yum install emacs tftp-server -y

   1	yum install emacs tftp-server -y

3. chkconfig --level 345 tftp on

   1	chkconfig --level 345 tftp on

4. chkconfig --level 345 xinetd on

   1	chkconfig --level 345 xinetd on

5. chmod 777 /var/lib/tftpboot/

   1	chmod 777 /var/lib/tftpboot/

6. emacs /etc/xinetd.d/tftp

   1	emacs /etc/xinetd.d/tftp

   • Add the -c to this line:
     
     server_args = -c -s /var/lib/tftpboot

     1	server_args = -c -s /var/lib/tftpboot

7. service xinetd start

   1	service xinetd start

8. Check to see if the service is up:
   • netstat -ntulp

     1	netstat -ntulp

   • Make sure you see the :69 to verify that it is running?
9. Modify iptables to allow udp traffic or turn it off
   • Edit: /etc/sysconfig/iptables
     
     -A INPUT -m state --state NEW -m udp -p udp --dport 69 -j ACCEPT

     1	-A INPUT -m state --state NEW -m udp -p udp --dport 69 -j ACCEPT

   • Or turn iptables off completely (not the most secure option)
     
     service iptables stop

     1	service iptables stop