This guide describes how to install VMware Tanzu Operations Manager (Ops Manager) on vSphere.

If you experience a problem while following the steps below, see Diagnosing Deployment Problems or the Known Issues sections of the following topics:


This section describes the resource requirements for installing Ops Manager.

Note: If you are using the Cisco Nexus 1000v Switch, see the Using the Cisco Nexus 1000v Switch with Ops Manager for more information.

Note: When installing Ops Manager on a vSphere environment with multiple ESXi hosts, you must use network-attached or shared storage devices. Local storage devices do not support sharing across multiple ESXi hosts.

Version Requirements

Ops Manager can be installed on and the BOSH Director tile within Ops Manager can be configured with the following versions of vSphere:

  • vSphere v8.0

  • vSphere v7.0

  • vSphere v6.7

  • vSphere v6.5

The BOSH Director tile within Ops Manager can optionally be configured with the following versions of NSX-T:

  • NSX-T v4.0

  • NSX-T v3.1

  • NSX-T v3.0

Resource Requirements

You can install Ops Manager with one of two runtimes. For more information about the requirements for each runtime, see the following:

Firewall Port Requirements

Ops Manager requires that the NSX firewall routes are not blocked. All communication between Ops Manager VMs and vCenter or ESXi hosts route through the NSX firewall and are blocked by default. For more information on which ports to allow, see VMware Ports and Protocols for vSphere.

vSphere Service Account Requirements

Ops Manager requires read/write permissions to the data center level of the vSphere Inventory Hierarchy to successfully install. VMware recommends defining a custom role for the service account that has all privileges for all objects in the data center, including propagating privileges to children.

Since Ops Manager passes all required credentials through to BOSH, you only need one service account with the required vSphere privileges to complete the installation. Setting up separate service accounts for Ops Manager and BOSH is not necessary or recommended.

For more information about service account requirements, see the following topics:

Note: You can also apply the default VMware Administrator System Role to the service account to achieve the appropriate permission level.

vSphere Security Documents

The following guides contain best practices for securing and managing a vSphere installation:


This section describes the steps for installing Ops Manager.

Step 1: Install Ops Manager

Complete the following procedures to install Ops Manager on vSphere:

  1. Deploying Ops Manager to vSphere

  2. Configuring BOSH Director on vSphere

Additional Configuration

See the following topics for additional configuration options:

Next Steps

After completing the procedures above, configure a runtime.

For information about installing and configuring a runtime, see the following:

check-circle-line exclamation-circle-line close-line
Scroll to top icon