In a cross-vCenter environment there can be one primary NSX Manager and up to seven secondary NSX Managers. Some setup tasks are performed on every NSX Manager, whether it will become a primary NSX Manager, or a secondary NSX Manager. Install the NSX Manager Virtual ApplianceThe NSX Manager provides the graphical user interface (GUI) and the REST APIs for creating, configuring, and monitoring NSX components, such as controllers, logical switches, and edge services gateways. The NSX Manager provides an aggregated system view and is the centralized network management component of NSX. NSX Manager is installed as a virtual appliance on any ESX host in your vCenter environment. Configure Single Sign OnSSO makes vSphere and NSX more secure by allowing the various components to communicate with each other through a secure token exchange mechanism, instead of requiring each component to authenticate a user separately. You can configure lookup service on the NSX Manager and provide the SSO administrator credentials to register NSX Management Service as an SSO user. Integrating the single sign on (SSO) service with NSX improves the security of user authentication for vCenter users and enables NSX to authenticate users from other identity services such as AD, NIS, and LDAP. Register vCenter Server with NSX ManagerNSX Manager and vCenter have a one-to-one relationship. For every instance of NSX Manager, there is one vCenter Server. This is true even if you are using the NSX cross-vCenter feature. After you install NSX Manager and ensure that the NSX management service is running, the next step is to register a vCenter Server with the NSX Manager. Specify a Syslog ServerIf you specify a syslog server, NSX Manager sends all audit logs and system events to the syslog server. Install and Assign NSX for vSphere LicenseYou can install and assign an NSX for vSphere license after NSX Manager installation is complete by using the vSphere Web Client. Exclude Virtual Machines from Firewall ProtectionYou can exclude a set of virtual machines from NSX distributed firewall protection.