The first step in the NSX infrastructure upgrade process is the NSX Manager appliance upgrade.


Do not uninstall a deployed instance of vShield Manager appliance.


  • Verify you have completed all the upgrade preparation tasks described in Preparing for the vCloud Networking and Security to NSX Upgrade, including checking system requirements and performing backups.

  • Verify that vShield Manager has sufficient disk space for the upgrade to NSX Manager. See System Requirements for NSX.

  • Increase the vShield Manager virtual appliance's reserved memory to at least 16 GB and allocate 4 vCPU before upgrading to NSX 6.2.x.

    See System Requirements for NSX.

  • Verify that vShield Edge instances prior to version 5.5, if any, have been upgraded to version vShield 5.5.


    Pre-5.5 vShield Edge instances cannot be managed or deleted after vShield Manager has been upgraded to NSX Manager.


  1. Download the NSX upgrade bundle to a location to which vShield Manager can browse. The name of the upgrade bundle file is similar to VMware-vShield-Manager-upgrade-bundle-to-NSX-release-buildNumber.tar.gz.
  2. From the vShield Manager 5.5 inventory panel, click Settings & Reports.
  3. Click the Updates tab and then click Upload Upgrade Bundle .
  4. Click Choose File, select the VMware-vShield-Manager-upgrade-bundle-to-NSX-release-buildNumber.tar.gz file, and click Open.
  5. Click Upload File.

    Uploading the file takes a few minutes.

  6. Click Install to begin the upgrade process.
  7. Click Confirm Install. The upgrade process reboots vShield Manager, so you might lose connectivity to the vShield Manager user interface. None of the other vShield components are rebooted.
  8. After the reboot, log in to the NSX Manager virtual appliance by opening a Web browser window and typing the IP address, for example, The upgraded NSX Manager has the same IP address as the vShield Manager.

    The Summary tab displays the version of NSX Manager that you just installed.

  9. Navigate to Home > Manage vCenter Registration and verify that the vCenter Server status is Connected.
  10. Close any existing browser sessions accessing the vSphere Web Client. Wait a few minutes and clear the browser cache before logging back in to the vSphere Web Client.
  11. If SSH was enabled on vShield Manager, you must enable it on NSX Manager after the upgrade. Log in to the NSX Manager virtual appliance and click View Summary. In System-level components, click Start for SSH service.



After upgrading from vCloud Networking and Security 5.x to NSX 6.x, you must use your CLI administrative login credentials to log in to the NSX Manager. Previously, in vCloud Networking and Security, two passwords were required, one for the CLI and another for the UI. Starting in NSX 6.x, only one password is required. For example:

Passwords in vCloud Networking and Security

  • mypassword#123 for the CLI

  • mypassword#456 for the UI

Passwords after upgrade to NSX

  • mypassword#123 for the CLI

  • mypassword#123 for the UI

After upgrading NSX Manager, you must log out and log back in to the vSphere Web Client.

If the NSX plug-in does not display correctly in the vSphere Web Client, clear your browser's cache and history. If this step is not done, you might see an error similar to "An internal error has occurred - Error #1009" when making NSX configuration changes in the vSphere Web Client.

If the Networking and Security tab does not appear in the vSphere Web Client, reset the vSphere web client server:

  • In vCenter 5.5, open https://<vcenter-ip>:5480 and restart the Web Client server.

  • In the vCenter Server Appliance 6.0, log into the vCenter Server shell as root and run the following commands:

    Command> shell.set --enabled True
    Command> shell
    localhost:~ # cd /bin
    localhost:~ # service-control --stop vsphere-client
    localhost:~ # service-control --start vsphere-client

  • In vCenter Server 6.0 on Windows, you can do this by running the following commands.

    cd C:\Program Files\VMware\vCenter Server\bin
    service-control --stop vspherewebclientsvc
    service-control --start vspherewebclientsvc

It is recommended to use different Web Clients to manage vCenter Servers running different versions of NSX Managers to avoid unexpected errors when different versions of NSX plug-ins are running.

After the NSX Manager is upgraded, create a new NSX Manager backup file. See NSX Backup and Restore . The previous NSX Manager backup is only valid for the previous release.

What to do next

Install and Assign an NSX License in a vCloud Director Environment