A complete uninstall of NSX removes host VIBs, the NSX Manager, controllers, all VXLAN configuration, logical switches, logical routers, NSX firewall, and the vCenter NSX plug in. Make sure to follow the steps for all hosts in the cluster. VMware recommends that you uninstall the network virtualization components from a cluster before removing the NSX plug-in from vCenter Server.
About this task
Do not remove any appliances that were deployed by NSX (such as Controllers and Edges) from vCenter directly. Always manage and remove NSX appliances using the Networking & Security tab of the vSphere Web Client.
You must have been assigned the Enterprise Administrator or NSX Administrator role.
Remove any registered partner solutions, as well as endpoint services before reversing host preparation so that service VMs in the cluster are removed gracefully.
Delete all NSX Edges. See Uninstall an NSX Edge Services Gateway or a Distributed Logical Router.
Detach virtual machines in the transport zone from the logical switches, and delete the logical switches. See Uninstall a Logical Switch.
Uninstall NSX from host clusters. See Uninstall NSX from Host Clusters.
- Delete the transport zone.
- Delete the NSX Manager appliance and all NSX controller appliance VMs from the disk.
- Delete any leftover VTEP vmkernel ports in your distributed switch by completing the following steps:
- Navigate to .
- In the Virtual switches table, select the vSphere Distributed Switch.
A diagram appears that shows the various dvPortgroups that are assigned on this switch. Scroll down this diagram to find any leftover VTEP vmkernel ports on the switch.
- Select the leftover vmkermel port, and click the Delete () icon.
Generally, the VTEP vmkernel interfaces are already deleted as a result of earlier uninstall operations.
- Delete any leftover dvPortgroups used for VTEPs in your distributed switch by completing the following steps:
- Navigate to .
- In the Navigator, click the datacenter, and then expand the vSphere Distributed Switches to view the leftover dvPortgroups.
- Right-click the leftover dvPortgroups and click Delete.
In most situations, the dvPortgroups used for VTEPs are already deleted as a result of earlier uninstall operations.
- If you removed VTEP vmkernel interfaces or dvPortgroups, reboot the hosts.
- For the vCenter on which you want to remove the NSX Manager plug-in, log in to the managed object browser at https://your_vc_server/mob.
- Click Content.
- Click ExtensionManager.
- Click UnregisterExtension.
- Enter the string com.vmware.vShieldManager and click on Invoke Method.
- Enter the string com.vmware.nsx.ui.h5 and click on Invoke Method.
- If you are running the vSphere 6 vCenter Appliance, launch the console and enable the BASH shell under Troubleshooting Mode Options.
Another way to enable the BASH shell is to log in as root and run the shell.set --enabled true command.
- Delete the vSphere Web Client directories and vSphere Client (HTML5) directories for NSX and then restart the client services.
The vSphere Web Client directories for NSX are called com.vmware.vShieldManager.* and are located at:
VMware vCenter Server for Windows - C:\ProgramData\VMware\vCenterServer\cfg\vsphere-client\vc-packages\vsphere-client-serenity\
VMware vCenter Server Appliance - /etc/vmware/vsphere-client/vc-packages/vsphere-client-serenity/
The vSphere Client directories are called com.vmware.nsx.ui.h5.* and are located at:
VMware vCenter Server for Windows – C:\ProgramData\VMware\vCenterServer\cfg\vsphere-ui\vc-packages\vsphere-client-serenity\
VMware vCenter Server Appliance - /etc/vmware/vsphere-ui/vc-packages/vsphere-client-serenity/
Restart the client services on vCenter Server Appliance or vCenter Server on Windows:
Table 1. Client Service Commands
vCenter Server Appliance
vCenter Server for Windows
Restart vSphere Web Client
On vSphere 6.0, 6.5, and 6.7
> shell.set --enabled True > shell # service-control --stop vsphere-client # service-control --start vsphere-client
> cd C:\Program Files\VMware\vCenter Server\bin > service-control --stop vspherewebclientsvc > service-control --start vspherewebclientsvc
Restart vSphere Client
On vSphere 6.5, and 6.7
> shell.set --enabled True > shell # service-control --stop vsphere-ui # service-control --start vsphere-ui
> cd C:\Program Files\VMware\vCenter Server\bin > service-control --stop vsphere-ui > service-control --start vsphere-ui
The NSX Manager plug-in is removed from vCenter. To confirm, log out of vCenter and log back in.
The NSX Manager plug-in Networking & Security icon no longer appears on the Home screen in the vCenter Web Client or vSphere Client.
Go to vShield Manager plugin.and verify that the list of plug-ins does not include