In a cross-vCenter environment there can be one primary NSX Manager and up to seven secondary NSX Managers. Some setup tasks are performed on every NSX Manager, whether it will become a primary NSX Manager, or a secondary NSX Manager. Install the NSX Manager Virtual ApplianceThe NSX Manager provides the graphical user interface (GUI) and the REST APIs for creating, configuring, and monitoring NSX components, such as controllers, logical switches, and edge services gateways. The NSX Manager provides an aggregated system view and is the centralized network management component of NSX. NSX Manager is installed as a virtual appliance on any ESX host in your vCenter environment. Configure Single Sign OnSSO makes vSphere and NSX more secure by allowing the various components to communicate with each other through a secure token exchange mechanism, instead of requiring each component to authenticate a user separately. You can configure lookup service on the NSX Manager and provide the SSO administrator credentials to register NSX Management Service as an SSO user. Integrating the single sign on (SSO) service with NSX improves the security of user authentication for vCenter users and enables NSX to authenticate users from other identity services such as AD, NIS, and LDAP. Register vCenter Server with NSX ManagerNSX Manager and vCenter have a one-to-one correspondence. For every instance of NSX Manager, there is one vCenter Server. This is true even if you are using cross-vCenter NSX . Configure a Syslog Server for NSX ManagerIf you specify a syslog server, NSX Manager sends all audit logs and system events to the syslog server. Install and Assign NSX for vSphere LicenseYou can install and assign an NSX for vSphere license after NSX Manager installation is complete by using the vSphere Web Client. Exclude Virtual Machines from Firewall ProtectionYou can exclude a set of virtual machines from NSX distributed firewall protection.