If you are using the DNE feature then you must manually upgrade the DNE Key Manager.

Prerequisites

Verify that the DNE Key Manager is properly installed and configured. See NSX-T Installation Guide and NSX-T Administration Guide.

Procedure

  1. Locate the NSX-T build on the VMware download portal.
  2. Navigate to the nsx-keymanager/exports/upgrade folder and expand that folder.
  3. Verify that the upgrade bundle filename extension ends with .nub.

    The upgrade bundle filename has a format similar to VMware-NSX-keymanager-ReleaseNumberNSXBuildNumber.nub.

  4. Download the DNE Key Manager upgrade bundle to an HTTP or FTP server which the DNE Key Manager can access.
  5. Log in to the DNE Key Manager CLI.
  6. Copy upgrade bundle file to the DNE Key Manager appliance.

    copy url <keymanager-upgrade-bundle-http/ftp-url-path>

  7. Verify that the upgrade bundle is the latest DNE Key Manager version.

    verify upgrade-bundle <bundle-name>

    The <bundle-name> is the DNE Key Manager upgrade bundle name in the file store. For example, VMware-NSX-keymanager-<ReleaseNumberNSXBuildNumber>.

  8. Start the upgrade process.

    start upgrade-bundle <bundle-name> playbook <playbook-file>

    The <bundle-name> is the DNE Key Manager upgrade bundle name in the file store. For example, VMware-NSX-keymanager-<ReleaseNumberNSXBuildNumber>.

    The <playbook-file> is the Playbook file name to use. For example, VMware-NSX-keymanager-<ReleaseNumberNSXBuildNumber>-playbook.

    DNE Key Manager restarts during the upgrade process.

    When the DNE Key Manager is restarting, avoid doing a manual DNE Key Manager rotate or revoke, do not add or delete a node, or perform a manual migration or HA.

  9. After the DNE Key Manager restarts, resume the upgrade process.

    resume upgrade-bundle <bundle-name> playbook

    The <bundle-name> is the DNE Key Manager upgrade bundle name in the file store. For example, VMware-NSX-keymanager-<ReleaseNumberNSXBuildNumber>.

Results

The DNE Key Manager upgrade completes with an upgrade success message.