This topic describes how to upgrade BOSH Director for VMware Tanzu Operations Manager (Ops Manager) on Amazon Web Services (AWS).

Complete the tasks in this topic as part of the Ops Manager upgrade process. For more information, see Task 2: Upgrade Ops Manager and Installed Products to v3.0 in Upgrading Ops Manager.


In this procedure, you create an Ops Manager VM instance to host the upgraded version of Ops Manager. Then, to complete the Ops Manager upgrade, you export your existing Ops Manager installation onto this new VM.

For Ops Manager installations on AWS, the VM that hosts the new version of Ops Manager uses an Amazon Machine Image (AMI) specific to your region.

To create an Ops Manager VM instance:

  1. Retrieve the Ops Manager AMI ID. For more information, see Retrieve Ops Manager AMI ID below.

  2. Launch the AMI. For more information, see Launch Ops Manager AMI below.

  3. Edit the Ops Manager DNS A Record. For more information, see Edit Ops Manager DNS A Record below.


To complete the Ops Manager upgrade, you must have your Ops Manager decryption passphrase. You defined this decryption passphrase during the initial installation of Ops Manager.

Retrieve Ops Manager AMI ID

Ops Manager has a different AMI ID for each region. Retrieve and record the AMI ID for your region. You use this AMI ID when launching the Ops Manager AMI instance.

To retrieve the AMI ID for Ops Manager:

  1. Navigate to the Ops Manager page on VMware Tanzu Network.

  2. Select the version of Ops Manager you want to install from the Releases dropdown.

  3. In the Release Download Files, click the file named Ops Manager for AWS to download a PDF.

  4. Open the PDF and record the AMI ID for your region.

Launch Ops Manager AMI

Use the AMI ID for your region to launch an AMI instance that hosts the new version of Ops Manager.

To launch the AMI for Ops Manager:

  1. Navigate to your EC2 Dashboard.

  2. In the Images menu, select AMIs.

  3. In the Owned by me drop-down filter, select Public images.

  4. Paste the AMI ID for your region into the search bar and press enter.

    Note: There is a different AMI for each region. If you cannot locate the AMI for your region, verify that you have set your AWS Management Console to your desired region. If you still cannot locate the AMI, log in to the VMware Tanzu Network and file a support ticket.

  5. (Optional) If you want to encrypt the VM that runs Ops Manager with AWS Key Management Service (KMS):

    1. Right-click the row that lists your AMI and click Copy AMI.
    2. Select your Destination region.
    3. Enable Encryption. For more information about AMI encryption, see Encryption and AMI Copy in Copying an AMI in the AWS documentation.
    4. Select your Master Key. To create a new custom key, see Creating Keys in the AWS documentation.
    5. Click Copy AMI. You can use the new AMI you copied for the next steps.
  6. Select the row that lists your Ops Manager AMI and click Launch.

  7. Choose m5.large for your instance type.

  8. Click Next: Configure Instance Details.

  9. Configure the following fields for your instance:

    • Network: Select the VPC that you created.
    • Subnet: Select pcf-public-subnet-az0.
    • Auto-assign for Public IP: Select Enable.
    • IAM role: Select the IAM role associated with your pcf-user profile. If you have not created one, click Create new IAM role and follow the procedures in AWS Permissions Guidelines.
    • For all other fields, accept the default values.
  10. Click Next: Add Storage.

  11. Adjust the Size (GiB) value. The default persistent disk value is 50 GB. VMware recommends increasing this value to a minimum of 100 GB.

  12. Click Next: Tag Instance

  13. On the Add Tags page, add a tag with the key Name and value pcf-ops-manager.

  14. Click Next: Configure Security Group.

  15. Select the pcf-ops-manager-security-group that you created in Configure a Security Group for Ops Manager in Preparing to Deploy Ops Manager on AWS.

  16. Click Review and Launch and confirm the instance launch details.

  17. Click Launch.

  18. Select the pcf-ops-manager-key key pair, confirm that you have access to the private key file, and click Launch Instances. You use this key pair to access the Ops Manager VM.

Edit Ops Manager DNS A Record

After you deploy the new Ops Manager VM, edit the Ops Manager DNS record in the EC2 dashboard to point to the IP address for the new VM.

To edit the Ops Manager DNS A record:

  1. Click View Instances to access the Instances page on the EC2 Dashboard.

  2. Select the VM that you created in the previous section.

  3. Locate the IPv4 Public IP value in the instance Description tab, and record this value for use in the next step.

  4. In your DNS provider, edit the A record for pcf.SYSTEM-DOMAIN to point to the IP address recorded in the previous step, where SYSTEM-DOMAIN is the system domain of your Ops Manager deployment.

Next Steps

After you complete this procedure, continue to the upgrade instructions in Upgrading Ops Manager.

check-circle-line exclamation-circle-line close-line
Scroll to top icon