The first step in the NSX infrastructure upgrade process is the NSX Manager appliance upgrade.


Do not uninstall a deployed instance of vShield Manager appliance.



  1. Download the NSX upgrade bundle to a location to which vShield Manager can browse. The name of the upgrade bundle file is similar to VMware-vShield-Manager-upgrade-bundle-to-NSX-release-buildNumber.tar.gz.
  2. From the vShield Manager 5.5 inventory panel, click Settings & Reports.
  3. Click the Updates tab and then click Upload Upgrade Bundle .
  4. Click Choose File, select the VMware-vShield-Manager-upgrade-bundle-to-NSX-release-buildNumber.tar.gz file, and click Open.
  5. Click Upload File.

    Uploading the file takes a few minutes.

  6. Click Install to begin the upgrade process.
  7. Click Confirm Install. The upgrade process reboots vShield Manager, so you might lose connectivity to the vShield Manager user interface. None of the other vShield components are rebooted.
  8. After the reboot, log in to the NSX Manager virtual appliance by opening a Web browser window and typing the IP address, for example, The upgraded NSX Manager has the same IP address as the vShield Manager.

    The Summary tab displays the version of NSX Manager that you just installed.

  9. Navigate to Home > Manage vCenter Registration and verify that the vCenter Server status is Connected.
  10. Close any existing browser sessions accessing the vSphere Web Client. Wait a few minutes and clear the browser cache before logging back in to the vSphere Web Client.
  11. If SSH was enabled on vShield Manager, you must enable it on NSX Manager after the upgrade. Log in to the NSX Manager virtual appliance and click View Summary. In System-level components, click Start for SSH service.



After upgrading from vCloud Networking and Security 5.x to NSX 6.x, you must use your CLI administrative login credentials to log in to the NSX Manager. Previously, in vCloud Networking and Security, two passwords were required, one for the CLI and another for the UI. Starting in NSX 6.x, only one password is required. For example:

Passwords in vCloud Networking and Security

  • mypassword#123 for the CLI

  • mypassword#456 for the UI

Passwords after upgrade to NSX

  • mypassword#123 for the CLI

  • mypassword#123 for the UI

After upgrading NSX Manager, you must log out and log back in to the vSphere Web Client.

If the NSX plug-in does not display correctly in the vSphere Web Client, clear your browser's cache and history. If this step is not done, you might see an error similar to "An internal error has occurred - Error #1009" when making NSX configuration changes in the vSphere Web Client.

If the Networking and Security tab does not appear in the vSphere Web Client, reset the vSphere web client server:

  • In vCenter 5.5, open https://<vcenter-ip>:5480 and restart the Web Client server.

  • In the vCenter Server Appliance 6.0, log into the vCenter Server shell as root and run the following commands:

    Command> shell.set --enabled True
    Command> shell
    localhost:~ # cd /bin
    localhost:~ # service-control --stop vsphere-client
    localhost:~ # service-control --start vsphere-client

  • In vCenter Server 6.0 on Windows, you can do this by running the following commands.

    cd C:\Program Files\VMware\vCenter Server\bin
    service-control --stop vspherewebclientsvc
    service-control --start vspherewebclientsvc

It is recommended to use different Web Clients to manage vCenter Servers running different versions of NSX Managers to avoid unexpected errors when different versions of NSX plug-ins are running.

What to do next

Create a backup of the NSX Manager. The previous NSX Manager backup is valid only for the previous release. See Back Up NSX Manager Data for vShield Endpoint.