You can create an NSX endpoint and associate its NSX settings to an existing vSphere endpoint.

If you upgraded or migrated a vSphere endpoint that was using an NSX manager, a new NSX endpoint is created that contains an association between the source vSphere endpoint and a new NSX endpoint.

For information about validating the NSX connection and certificate trust, see Considerations When Using Test Connection.


In preparation for using NSX network, security, and load balancing capabilities in vRealize Automation, when using NSX Manager credentials you must use the NSX Manager administrator account.


  1. Select Infrastructure > Endpoints > Endpoints.
  2. Select New > Network and Security > NSX.
  3. Enter a name in the Name text box.
  4. (Optional) Enter a description in the Description text box.
  5. Enter the URL for the NSX instance in the Address text box.

    The URL must be of the type: https://hostname or https://IP_address.

    For example, https://nsx-manager.local.

  6. Enter the NSX administrator-level user name and password that are stored for the NSX endpoint.
  7. (Optional) Click Properties and add supplied custom properties, property groups, or your own property definitions for the endpoint.
  8. To associate the NSX network and security settings to an existing vSphere endpoint, click Associations and select an existing vSphere endpoint.

    You must create the vSphere endpoint before you can create the association.

    You can only associate an NSX endpoint to one vSphere endpoint. This association constraint means that you cannot provision a universal on-demand network and attach it to vSphere machines that are provisioned on different vCenters.

  9. (Optional) Click Test Connection to validate the credentials, host endpoint address, and certificate trust. The action also checks that the manager service and agent are running so that endpoint can be data-collected. The OK action tests for these same conditions.

    The Test Connection action returns information about any of the following conditions:

    • Certificate error

      If the certificate is not found, trusted, or has expired, you are prompted to accept a certificate thumbprint. If you do not accept the thumbprint, you can still save the endpoint but machine provisioning might fail.

    • Agent error

      The associated vSphere agent is not found. The agent must be running for the test to succeed.

    • Host error

      The specified endpoint address is not reachable or the associated manager service is not running. The manager service must be running for the test to succeed.

    • Credentials error

      The specified user name and password combination is invalid for the endpoint at the specified address.

    • Timeout

      The test action could not complete in the allowed two-minute time period.

    If the Test Connection action fails, you can still save the endpoint but machine provisioning might fail.

    If there is a trusted certificate issue, for example the certificate has expired, you are prompted to accept a certificate thumbprint.

  10. Click OK to save the endpoint.

    The OK action tests for the same conditions as the Test Connection action. If it finds any of the preceding conditions, it returns a message. If it can save, it leaves the error on the screen for you to review.


vRealize Automation collects data from your endpoint and discovers your compute resources.

What to do next

Add the compute resources from your endpoint to a fabric group. See Create a Fabric Group.