Upgrade Your VMware Cloud Director Appliance by Using the VMware Update Repository

You can use the VMware Update Repository to upgrade your VMware Cloud Director appliance.

Note: You can use the VMware Update Repository only to upgrade VMware Cloud Director to the most recent VMware Cloud Director version. Only the most recent version is available in the VMware Update Repository. If you want to upgrade VMware Cloud Director to a different version, see Upgrade Your VMware Cloud Director Appliance by Using an Update Package.

During the upgrade of the VMware Cloud Director appliance deployment, the VMware Cloud Director service stops working and some downtime can be expected. The downtime depends on the time you need to upgrade each VMware Cloud Director appliance and to run the VMware Cloud Director database upgrade script. The number of working cells in the VMware Cloud Director server group reduces until you stop the VMware Cloud Director service on the last VMware Cloud Director appliance. A properly configured load balancer in front of the VMware Cloud Director HTTP endpoints should stop routing traffic to the cells that are stopped.

After you apply the upgrade to every VMware Cloud Director appliance and the database upgrade is complete, you must reboot each VMware Cloud Director appliance.

Prerequisites

Take a snapshot of the primary VMware Cloud Director appliance.
1. When upgrading from version 10.1 or later or when patching, if the automatic failover in case of a primary database service failure is enabled, change the failover mode to Manual for the duration of the upgrade. After the upgrade, you can set the failover mode to Automatic. See Automatic Failover of Your VMware Cloud Director Appliance.
2. Log in to the vCenter instance on which resides the primary VMware Cloud Director appliance of your database high availability cluster.
3. Navigate to the primary VMware Cloud Director appliance, right-click it, and click Power > Shut Down Guest OS.
4. Right-click the appliance and click Snapshots > Take Snapshot. Enter a name and, optionally, a description for the snapshot, and click OK.
5. Right-click the VMware Cloud Director appliance and click Power > Power On.
6. Verify that all nodes in your database high availability configuration are in a good state. See View Your VMware Cloud Director Appliance Cluster Health and Failover Mode.
Important: VMware Cloud Director 10.5.1 and later no longer accepts certificates whose signature algorithms use SHA-1.
For VMware Cloud Director 10.5.1 and later, verify that none of the certificates in the certificate chain use SHA-1 as their signature algorithm, for example, sha1WithRSAEncryption.
Verify that the VMware Cloud Director appliance has access to https://vapp-updates.vmware.com.
Familiarize yourself with the backup procedure for the VMware Cloud Director appliance. See Back Up the Embedded Database of Your VMware Cloud Director Appliance.

Procedure

In a Web browser, log in to the appliance management user interface of a VMware Cloud Director appliance instance to identify the primary appliance, https://appliance_ip_address:5480.
Make a note of the primary appliance name. You must use the primary appliance when backing up the database.
On all appliances in the cluster, shut down VMware Cloud Director by running the following command:
```
/opt/vmware/vcloud-director/bin/cell-management-tool -u <admin_username> cell --shutdown
```
Log in directly or by using an SSH client to the primary appliance console as root.
Reset the update repository to point to the VMware Update Repository.
```
vamicli update --repo ""
```
Check for updates to verify that the VMware Update Repository has the desired upgrade.
By default the vamicli command points to the VMware Update Repository.
```
vamicli update --check
```
The upgrade release appears as an Available Update.
Create a backup using the primary or standby appliance management UI.
You cannot use the application cell to perform a backup.
Note: You must backup the appliance only once. Do not back up the appliance after applying the available upgrade.
Apply the available upgrade.
```
vamicli update --install latest
```
Log in to the remaining standby and application cells and repeat steps 4, 5, and 7 on each appliance.
From any appliance, run the VMware Cloud Director database upgrade utility.
```
/opt/vmware/vcloud-director/bin/upgrade
```
Reboot each VMware Cloud Director appliance.
```
shutdown -r now
```

What to do next

Verify that the upgrade is successful.
- Log in to the VMware Cloud Director Service Provider Admin Portal.
- Log in to the VMware Cloud Director appliance management UI and confirm that all the appliances appear with a Healthy status.
For each cell, verify that there are no add-on upgrade errors in vcloud-container-info.log.
If there is a vamicli update --install latest command failure, see Installing the Latest Update of Your VMware Cloud Director Appliance Fails.
If the upgrade is successful, you can delete the snapshot of the VMware Cloud Director appliance.
If the upgrade is not successful, you can roll back the VMware Cloud Director appliance to the snapshot that you took before the upgrade. See Roll Back Your VMware Cloud Director Appliance When an Upgrade Fails.
Starting with version 10.5.1, the VMware Cloud Director appliance adds the SubjectKeyIdentifier and AuthorityKeyIdentifier certificate extensions to the self-signed certificates you generate. To generate self-signed certificates with the SubjectKeyIdentifier and AuthorityKeyIdentifier certificate extensions, see Replace or Renew the VMware Cloud Director Appliance Management Certificates.