In addition to creating a conditional workflow with a dynamic membership-based security tag, you can manually assign a security tag to virtual machines.

Security tags can be used as the matching criteria in security groups. In a cross-vCenter environment, security tags are synchronized between primary and secondary NSX managers.


  1. In the vSphere Web Client, click Networking & Security > Groups and Tags.
  2. Click the Security Tags tab.
  3. To assign security tag to virtual machine:
    • In NSX 6.4.1 and later, select the required security tag and click Assign VM.
    • In NSX 6.4.0, right-click a security tag and select Assign Security Tag.
    The Assign Security Tag to Virtual Machine window appears, populated with available VMs.
  4. Select one or more virtual machines to move them to the Selected Objects column.
  5. Click OK.
    The Security Tags tab appears with an updated VM count for the security tag.