The version of vCloud Director will determine the version of NSX you can upgrade to. VMware recommends upgrading to the latest supported NSX version that is compatible with the other solutions and tools in your environment.
See the VMware Product Interoperability Matrix at https://www.vmware.com/resources/compatibility/sim/interop_matrix.php.
To upgrade to NSX, you must upgrade the vCloud Networking and Security components in the order in which they are documented in this guide.
vCloud Networking and Security components must be upgraded in the following order:
vShield Manager to NSX Manager
Deploy NSX Controller Cluster - optional, required for logical (distributed) routers and changing control plane mode to hybrid or unicast
Upgrade Clusters and Hosts
Update Transport Zone - optional, if NSX Controller cluster is deployed, can change control plane mode to hybrid or unicast
NSX Edge - upgrade to NSX Edge only if you are using vCloud Director 8.10 or later.
Optional vCloud Networking and Security components not integrated with vCloud Director:
vShield App - see Upgrade vShield App to Distributed Firewall
vShield Endpoint - see Upgrade vShield Endpoint to NSX Guest Introspection.