Upgrade. 13 FEB 2018 VMware Validated Design 4.2 VMware Validated Design for Software-Defined Data Center 4.2

Transcription

1 Upgrde 13 FEB 2018 VMwre Vlidted Design 4.2 VMwre Vlidted Design for Softwre-Defined Dt Center 4.2

2 Upgrde You cn find the most up-to-dte technicl documenttion on the VMwre wesite t: If you hve comments out this documenttion, sumit your feedck to VMwre, Inc Hillview Ave. Plo Alto, CA Copyright VMwre, Inc. All rights reserved. Copyright nd trdemrk informtion. VMwre, Inc. 2

3 Contents Aout VMwre Vlidted Design Upgrde 5 1 SDDC Upgrde Overview 6 Upgrde Policy 6 Upgrde Pths nd Appliction Upgrde Sequence 7 VMwre Softwre Versions in the Upgrde 9 System Requirements for the SDDC Upgrde 10 Best Prctices in SDDC Upgrdes 10 2 Upgrde the Cloud Mngement Lyer 12 Configurtion Chnges to the Cloud Mngement Lyer 12 Tennt User Groups, Accounts nd Ojects in VMwre Vlidted Design Assign Tennt Administrtive Roles to Locl Users 14 Assign Tennt Administrtive Roles to Active Directory Users 15 Configure User Roles in vrelize Automtion 16 Reconfigure Business Groups 18 Reconfigure Entitlements 18 Clen Up Osolete Tennt User Accounts nd Groups 19 3 Upgrde the Opertions Mngement Lyer 22 Configurtion Chnges of vrelize Opertions Mnger 22 Disle the vsan Dshords of the Mngement Pck for Storge Devices in Region A 23 Define User Role in vsphere for vcenter Adpters in vrelize Opertions Mnger in Region A 24 Upgrde vrelize Log Insight 25 Tke Snpshots of the vrelize Log Insight Nodes 27 Upgrde the vrelize Log Insight Clusters 28 Upgrde the Content Pcks on vrelize Log Insight 29 Delete the Snpshots of the vrelize Log Insight Applinces 30 Post-Upgrde Configurtion of the vrelize Log Insight 31 4 Upgrde the Virtul Infrstructure nd Business Continuity Lyers 35 Review nd Updte vsphere Storge APIs for Dt Protection Bsed Bckup Solution 36 Upgrde the NSX Components for the Mngement nd Shred Edge nd Compute Clusters 37 Upgrde the NSX Mnger Instnces 39 Upgrde the NSX Controller Instnces 42 Upgrde the NSX Components on the ESXi Hosts 44 Upgrde NSX Edge Instnces 47 VMwre, Inc. 3

4 Upgrde Upgrde the Components for the Mngement Cluster 50 Upgrde vspherecomponents for the Mngement Clusters 50 Complete vsphere Upgrde for the Mngement Cluster 60 Upgrde the Components for the Shred Edge nd Compute Cluster 77 Upgrde vsphere for the Shred Edge nd Compute Cluster 78 Upgrde the ESXi Hosts in the Shred Edge nd Compute Cluster 82 Glol Post-Upgrde Configurtion of the Virtul Infrstructure Lyer 86 Post-Upgrde Configurtion of the Virtul Infrstructure Components in Region A 87 Post-Upgrde Configurtion of the Virtul Infrstructure Components in Region B 89 Post-Upgrde Configurtion of the Business Continuity Lyer for the Mngement Cluster 92 Connect vrelize Opertions Mnger to Site Recover Mnger 92 Connect vrelize Log Insight to Site Recovery Mnger 95 5 SDDC Strtup nd Shutdown 99 Shutdown Order of the Mngement Virtul Mchines 99 Strtup Order of the Mngement Virtul Mchines 101 VMwre, Inc. 4

5 Aout VMwre Vlidted Design Upgrde The VMwre Vlidted Design Upgrde document provides step-y-step instructions for upgrding VMwre softwre in Softwre-Defined Dt Center (SDDC) tht re deployed ccording to the VMwre Vlidted Design for Softwre-Defined Dt Center. Before you strt n upgrde of your SDDC, mke sure tht you re fmilir with the updte or upgrde plnning guidnce tht is prt of this guide. Note The VMwre Vlidted Design Upgrde document is vlidted with certin product versions. See VMwre Vlidted Design Relese Notes nd Upgrde Policy for more informtion out supported product versions for this relese. Intended Audience The VMwre Vlidted Design Upgrde document is intended for infrstructure dministrtors nd cloud dministrtors who re fmilir with nd wnt to keep VMwre softwre up-to-dte with the ltest versions ville. Required VMwre Softwre VMwre Vlidted Design Upgrde is complint nd vlidted with certin product versions. See VMwre Vlidted Design Relese Notes for more informtion out supported product versions. VMwre, Inc. 5

6 SDDC Upgrde Overview 1 VMwre Vlidted Designs reduce risk nd time in performing updtes nd upgrdes y vlidting the procedures nd softwre versions ssocited with ech VMwre Vlidted Design relese. Consider the policy, upgrde pths, system requirements nd upgrde sequence for successful SDDC upgrde. This chpter includes the following topics: Upgrde Policy Upgrde Pths nd Appliction Upgrde Sequence VMwre Softwre Versions in the Upgrde System Requirements for the SDDC Upgrde Best Prctices in SDDC Upgrdes Upgrde Policy VMwre Vlidted Designs provide vlidted instructions for updte nd upgrde of the SDDC mngement products ccording to n upgrde vlidtion policy. Updtes Tht Are Vlidted y VMwre Vlidted Designs VMwre Vlidted Design follows the lifecycle mngement principles contextulized round the SDDC. Upgrde Updte Impcts the SDDC design nd implementtion, ensures interoperility, nd introduces new fetures, functionlity, nd ug fixes. Does not impct the SDDC design nd implementtion, includes ug fixes nd ensures interoperility. The upgrde of VMwre Vlidted Design provides prescriptive pth etween ech relese where, unless specific express ptches or hot fixes re required for n environment, devition is not supported. Updtes Tht Are Not Vlidted y VMwre Vlidted Designs VMwre Vlidted Design is not scled or functionlly tested ginst individul ptches, express ptches or hot fixes. To ptch your environment, follow the VMwre est prctices nd VMwre Knowledge Bse rticles out the ptch you wnt to pply. If n issue occurs during or fter pplying VMwre ptch, contct VMwre Technicl Support. VMwre, Inc. 6

7 Upgrde Upgrde Pths nd Appliction Upgrde Sequence You must follow the pth nd sequence for specified for SDDC upgrde to version 4.2 of this VMwre Vlidted Design. Upgrde Pths To upgrde to version 4.2, you must run version 4.1 of this VMwre Vlidted Design. Currently Instlled Version Upgrde Pth x x x x Upgrde Sequence The upgrde process of VMwre Vlidted Design follows prescriptive pth to properly isolte the VMwre components in their respective lyers. By following this pth, you cn incrementlly upgrde from one version to nother while minimizing context switching etween products nd user interfces nd minimizing the numer of product chmpions required during mintennce windows. At the sme time, the upgrde sequence reduces the overll upgrde window nd the impct in the event of filed upgrde or updte. Follow this sequence lso for interoperility with the roder components within the SDDC. In this wy, the upgrde sequence llows for progressive, grnulr upgrde over the course of time. Tle 1 1. VMwre Vlidted Design Upgrde Sequence Order Upgrded/Up dted Component Su-Component (in Order) Lyer 1 No vrelize Automtion vrelize Automtion Applinces Cloud Mngement vrelize Orchestrtor (Emedded) vrelize Automtion IS Components 2 No vrelize Business for Cloud vrelize Business for Cloud Applince VMwre, Inc. 7

8 Upgrde Tle 1 1. VMwre Vlidted Design Upgrde Sequence (Continued) Order Upgrded/Up dted Component Su-Component (in Order) Lyer vrelize Business for Cloud Dt Collectors 3 No vrelize Opertions Mnger - Opertions Mngement 4 Yes vrelize Log Insight vrelize Log Insight Applinces vrelize Log Insight Agents 5 Determined y Orgniztion VMwre vsphere Storge APIs for Dt Protectionsed Bckup Solution - Business Continuity (Bckup nd Restore) 6 Yes NSX for vsphere NSX Mngers instnces Virtul Infrstructure NSX Controller instnces NSX Networking Fric NSX Edges (Networking) 7 Yes Pltform Services Controller - Virtul Infrstructure (Mngement) vcenter Server - vsphere Repliction - Business Continuity (Disster Site Recovery Mnger - Recovery) Updte Mnger Downlod Service - Virtul Infrstructure (Mngement) ESXi - VMwre Tools - vsan - 8 Yes vcenter Server - Virtul Infrstructure (Shred - Edge nd Compute) ESXi - Note vsphere Dt Protection is deprected. VMwre Vlidted Design does not provide guidnce for its usge nd lifecycle mngement during the upgrde process. VMwre Vlidted Design requires comptile nd supported ckup solution. If the ckup solution is not comptile, upgrde the ckup solution efore you proceed with upgrding the rest of the components of VMwre Vlidted Design. VMwre, Inc. 8

9 Upgrde VMwre Softwre Versions in the Upgrde You upgrde ech mngement product of the SDDC to specific version ccording to the softwre ill of mterils of this vlidted design. Tle 1 2. Upgrde from VMwre Vlidted Design for Softwre-Defined Dt Center 4.1 to VMwre Vlidted Design for Softwre-Defined Dt Center 4.2 SDDC Lyer Product Nme Product Version in VMwre Vlidted Design 4.1 Product Version in VMwre Vlidted Design 4.2 Opertion Type Cloud Mngement vrelize Automtion with Emedded vrelize Orchestrtor vrelize Business Opertions Mngement vrelize Opertions Mnger vrelize Log Insight Upgrde vrelize Log Insight Agent Virtul Infrstructure NSX for vsphere Updte vcenter Server 6.5 Updte Updte 1 d Updte Pltform Services Controller Updte Mnger Downlod Service 6.5 Updte Updte 1 d Updte 6.5 Updte Updte 1 d Updte ESXi 6.5 Updte Updte 1 Ptch Relese ESXi Updte vsan Business Continuity nd Disster Recovery Site Recovery Mnger vsphere Repliction Bckup solution sed on VMwre vsphere Storge APIs for Dt Protection Comptile Version Comptile Version N/A For informtion out the softwre components tht re ville in VMwre Vlidted Design 4.1 nd VMwre Vlidted Design 4.2, see VMwre Vlidted Design Relese Notes. VMwre, Inc. 9

10 Upgrde System Requirements for the SDDC Upgrde Before you upgrde the lyers of the SDDC, verify tht your system meets the generl system requirements for this opertion. Review the relese notes for ech VMwre product in the SDDC. Review the VMwre Vlidted Design Plnning nd Preprtion documenttion nd the individul prerequisites for the upgrde of ech VMwre Vlidted Design lyer to understnd the hrdwre nd softwre requirements tht might impct the SDDC upgrde. Verify tht the server hrdwre hs een certified with vsphere 6.5 Updte 1 nd lter. For informtion, see the VMwre Comptiility Guide. Verify tht the VMwre vsphere Storge APIs for Dt Protection-sed ckup solution tht you selected is certified ginst vsphere 6.5 Updte 1. For more informtion, see the comptiility mtrix of your vendor. The vsphere Dt Protection product is deprected. VMwre Vlidted Design does not provide guidnce for its usge nd lifecycle mngement during the upgrde process. Review ny custom integrtion tht might hve occurred outside of the VMwre Vlidted Design frmework to ensure comptiility with the new versions of VMwre products within the SDDC. Review ny third-prty products tht might e used in your environment to ensure comptiility with the new versions of the VMwre products in the SDDC. Best Prctices in SDDC Upgrdes Prepre for the SDDC upgrde nd perform certin ctivities fter the upgrde is complete to gurntee the opertionl stte of the environment. Plnning for the SDDC Updte or Upgrde Schedule mintennce window tht is suitle for your orgniztion nd tennts. The VMwre Vlidted Design upgrde sequence is orgnized in such wy tht the upgrde of ech lyer cn e executed within mintennce window. Perform ckups nd snpshots of the VMwre mngement components. Ensure tht no mngement virtul mchines or virtul pplinces re running on snpshot efore you perform the upgrde of the respective lyer. Ech lyer's guidnce covers the use of snpshots. Allocte time in your mintennce window to run test cses nd vlidte tht ll integrtions, importnt usiness functionlity, nd system performnce re cceptle. Add time uffer for responding to errors without exceeding the chnge window. VMwre, Inc. 10

11 Upgrde Consider the impct of n updte or upgrde to tennt worklods. If you properly prepre for the upgrde, existing instnces, networking, nd storge must continue to operte. Use vsphere vmotion to temporrily migrte worklods to other compute nodes during upgrde. Performing n upgrde with opertionl worklods crries risks. Communicte the upgrde to your tennts so tht they cn pln ckups. If possile, communicte the upgrde to your VMwre Technicl Account Mnger nd/or Glol Support Service representtive. Considertions on Upgrde Filure Contct VMwre Technicl Support. Roll the components ck. In the event of filure while upgrding one of the components of the SDDC, the order in which the components re orgnized ensures tht ckwrds comptiility nd interoperility re sustined etween the lyers. You cn roll ck to previous version of the components within lyer. Importnt Rollck of n entire SDDC fter more thn one lyer hs een successfully upgrded is not supported. Post-Upgrde Opertions Consider the following est prctices fter you complete the updte or upgrde process. Еvlutе them on test environment similr to your production SDDC: Verify importnt functionlity, integrtion, nd system performnce. See the VMwre Vlidted Design Opertionl Verifiction documenttion. Conduct lessons lerned meeting. Document improvements nd ensure tht they re incorported in the next updte or upgrde cycle. VMwre, Inc. 11

12 Upgrde the Cloud 2 Mngement Lyer You strt the upgrde from VMwre Vlidted Design 4.1 to VMwre Vlidted Design 4.2 y reviewing nd implementing the chnges to the cloud mngement pltform lyer. This version of this vlidted design does not hve uild chnges to the cloud mngement pltform lyer. Implement minor configurtion chnges to sty ligned with VMwre Vlidted Design. Tle 2 1. Upgrde Sequence for the Cloud Mngement Pltform Lyer Order Components Su-Component 1 vrelize Automtion vrelize Automtion Applinces with Emedded vrelize Orchestrtor vrelize Automtion IS Components 2 vrelize Business for Cloud vrelize Business Server vrelize Business Dt Collectors 3 Configurtion Chnges - Configurtion Chnges to the Cloud Mngement Lyer Perform the configurtion chnges to the environment ccording to the ojectives nd deployment guidelines of this vlidted design, ensuring tht your environment remins ligned to VMwre Vlidted Design. 1 Tennt User Groups, Accounts nd Ojects in VMwre Vlidted Design 4.2 Erlier versions of VMwre Vlidted Design use the ITAC prefix in the nmes of tennt users, user groups, nd inventory ojects. To ensure lignment with the development nd stndrds of the VMwre Vlidted Design guidnce, the upgrde requires certin chnges. 2 Assign Tennt Administrtive Roles to Locl Users Add the newly-introduced locl ccounts for the dministrtors of the defult tennt nd of the Rinpole tennt. Assign them tennt nd infrstructure dministrtor roles. VMwre, Inc. 12

13 Upgrde 3 Assign Tennt Administrtive Roles to Active Directory Users After vrelize Automtion Directories Mngement is ssocited with your Active Directory domin, domin users cn dminister the tennt. Assign the ligned domin user groups to tennt nd infrstructure dministrtor roles. 4 Configure User Roles in vrelize Automtion You ssign user roles in the context of specific tennt. However, some roles for the defult tennt cn mnge system-wide configurtion settings tht pply to multiple tennts. 5 Reconfigure Business Groups Assign the group mnger role for the Production nd Development usiness groups to the ug-vrdmins user group to lign the configurtion of the Rinpole tennt with the new convention for the nmes of tennt ccounts nd ojects. 6 Reconfigure Entitlements Grnt ccess the ug-vr-dmins user group ccess to the single-mchine lueprint entitlements for the Production nd Development groups to lign the Rinpole tennt configurtion with the new convention for the nmes of tennt ccounts nd ojects. 7 Clen Up Osolete Tennt User Accounts nd Groups After you crete nd configure the tennt ccount nmes nd ojects ccording to the nming scheme in this version of the vlidted design, in the vrelize Automtion portl clen up the roles nd permissions ssigned to the osolete user ccounts nd groups. The nmes of the osolete ccounts nd groups hve the ITAC prefix. Tennt User Groups, Accounts nd Ojects in VMwre Vlidted Design 4.2 Erlier versions of VMwre Vlidted Design use the ITAC prefix in the nmes of tennt users, user groups, nd inventory ojects. To ensure lignment with the development nd stndrds of the VMwre Vlidted Design guidnce, the upgrde requires certin chnges. Trck the following chnges in VMwre Vlidted Design 4.2 to tennt user groups, ccounts nd ojects in the SDDC. Tle 2 2. Chnges in Account Nmes in VMwre Vlidted Design 4.2 Nme in VMwre Vlidted Design 4.1 Nme in VMwre Vlidted Design 4.2 ITAC-LoclDefultAdmin ITAC-LoclRinpoleAdmin ITAC-TenntAdmin ITAC-Tenntrchitect vr-locldefultdmin vr-loclrinpoledmin vr-dmin-rinpole vr-rch-rinpole VMwre, Inc. 13

14 Upgrde Tle 2 3. Chnges in User Group Nmes in VMwre Vlidted Design 4.2 Nme in VMwre Vlidted Design 4.1 Nme in VMwre Vlidted Design 4.2 ug-itac-tenntadmins ug-itac-tenntarchitects ug-vr-dmins-rinpole ug-vr-rchs-rinpole Tle 2 4. Chnges in Customiztion Specifictions in VMwre Vlidted Design 4.2 Nme in VMwre Vlidted Design 4.1 Nme in VMwre Vlidted Design 4.2 itc-linux-custom-spec itc-windows-joindomin-custom-spec os-linux-custom-spec os-windows-joindomin-custom-spec Assign Tennt Administrtive Roles to Locl Users Add the newly-introduced locl ccounts for the dministrtors of the defult tennt nd of the Rinpole tennt. Assign them tennt nd infrstructure dministrtor roles. 1 Log in to the vrelize Automtion portl. Open We rowser nd go to Log in using the following credentils. User nme Pssword Domin Vlue dministrtor vr_dministrtor_pssword vsphere.locl 2 On the Tennts pge, click the defult tennt vsphere.locl to edit its settings. 3 On the Locl users t, click New to dd locl user to the defult tennt. 4 In the User Detils dilog ox, specify the following settings, click OK, nd click Next. First nme Lst nme Emil User nme Pssword Confirm pssword Vlue vra LoclDefultAdmin vr-locldefultdmin@vsphere.locl vr-locldefultdmin vr-locldefultdmin_pssword vr-locldefultdmin_pssword VMwre, Inc. 14

15 Upgrde 5 On the Administrtors t, specify tennt nd infrstructure dministrtors. c In the Tennt dministrtors serch text ox, enter vr-locldefultdmin nd press Enter. In the IS dministrtors serch text ox, enter vr-locldefultdmin nd press Enter. Click Finish. 6 On the Tennts pge, click the Rinpole tennt to edit its settings. 7 On the Locl users t, click New to dd locl user to the defult tennt. 8 In the User Detils dilog ox, specify the following settings, click OK, nd click Next. First nme Lst nme Emil User nme Pssword Confirm pssword Vlue vra LoclRinpoleAdmin vr-loclrinpoledmin@vsphere.locl vr-loclrinpoledmin vr-loclrinpoledmin_pssword vr-loclrinpoledmin_pssword 9 On the Administrtors t, specify tennt nd infrstructure dministrtors. c In the Tennt dministrtors serch text ox, enter vr-loclrinpoledmin nd press Enter. In the IS dministrtors serch text ox, enter vr-loclrinpoledmin nd press Enter. Click Finish. 10 Log out of the vrelize Automtion portl Assign Tennt Administrtive Roles to Active Directory Users After vrelize Automtion Directories Mngement is ssocited with your Active Directory domin, domin users cn dminister the tennt. Assign the ligned domin user groups to tennt nd infrstructure dministrtor roles. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following credentils. User nme Pssword Domin Vlue vr-loclrinpoledmin vr-loclrinpoledmin_pssword vsphere.locl VMwre, Inc. 15

16 Upgrde 2 Nvigte to Administrtion > Directories Mngement > Directories. 3 Click the rinpole.locl directory. 4 On the s t for the rinpole.locl directory, click Sync s. 5 On the Groups t, under Specify the group DNs, click Select next to the dc=locl,dc=rinpole text ox. 6 Select the following groups nd click Sve & Sync. ug-vr-dmins-rinpole ug-vr-rchs-rinpole 7 Log out of the vrelize Automtion portl 8 Log in to the vrelize Automtion portl. Open We rowser nd go to Log in using the following credentils. User nme Pssword Domin Vlue dministrtor vr_dministrtor_pssword vsphere.locl 9 On the Tennts pge, click the Rinpole tennt to edit its settings. 10 On the Administrtors t, ssign domin user groups for tennt nd infrstructure dministrtors. Enter ug-vr-dmins-rinpole in the Tennt dministrtors serch text ox nd press Enter. Enter ug-vr-dmins-rinpole in the IS dministrtors serch text ox nd press Enter. 11 Log out of the vrelize Automtion portl. Configure User Roles in vrelize Automtion You ssign user roles in the context of specific tennt. However, some roles for the defult tennt cn mnge system-wide configurtion settings tht pply to multiple tennts. Roles re sets of privileges tht you ssocite with users to determine wht tsks they cn perform. Bsed on their responsiilities, individuls might hve one or more roles ssocited with their user ccount. You ssign tennt rchitect nd dministrtor roles to the ug-vr-dmins-rinpole nd ug-vr-rchsrinpole user groups. VMwre, Inc. 16

17 Upgrde 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following credentils. User nme Pssword Domin Vlue vr-dmin-rinpole vr-dmin-rinpole_pssword rinpole.locl 2 On the Administrtion t, nvigte to Users & Groups > Directory Users nd Groups. 3 Enter ug-vr-dmins-rinpole in the serch ox nd press Enter. The ug-vr-dmins-rinpole (ug-vr-dmins-rinpole@rinpole.locl) group nme ppers in the Nme text ox. 4 Click the ug-vr-dmins-rinpole (ug-vr-dmins-rinpole@rinpole.locl) user group. 5 In the Add Roles to this Group list, select the following roles, nd click Finish. Appliction Architect Approvl Administrtor Business Mngement Administrtor Continer Administrtor Continer Architect Infrstructure Architect Softwre Architect Tennt Administrtor XS Architect 6 Serch for ug-vr-rchs-rinpole in the Tennt Administrtors serch ox. The ug-vr-rchs-rinpole (ug-vr-rchs-rinpole@rinpole.locl) group ppers in the Nme text ox. 7 Click the ug-vr-rchs-rinpole (ug-vr-rchs-rinpole@rinpole.locl) user group. 8 In the Add Roles to this Group list, select the following user groups, nd click Finish. Appliction Architect Continer Architect Infrstructure Architect Softwre Architect VMwre, Inc. 17

18 Upgrde XS Architect Reconfigure Business Groups Assign the group mnger role for the Production nd Development usiness groups to the ug-vrdmins user group to lign the configurtion of the Rinpole tennt with the new convention for the nmes of tennt ccounts nd ojects. 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following credentils. User nme Pssword Domin Vlue vr-dmin-rinpole vr-dmin-rinpole_pssword rinpole.locl 2 Nvigte to Administrtion > Users nd Groups > Business Groups. 3 Click Production. 4 On the Generl t, chnge the vlue in the Send mnger emils to text ox to vr-dmin-rinpole@rinpole.locl. 5 On the Memers t, ssign the group mnger role to the ug-vr-dmins user group. Under Group mnger role, remove ug-itac-tenntadmins (ug-itac- TenntAdmins@rinpole.locl). Enter ug-vr-dmins-rinpole in the Group mnger role text ox nd click Finish. 6 Repet Step 3 to Step 5 for the Development usiness group Reconfigure Entitlements Grnt ccess the ug-vr-dmins user group ccess to the single-mchine lueprint entitlements for the Production nd Development groups to lign the Rinpole tennt configurtion with the new convention for the nmes of tennt ccounts nd ojects. VMwre, Inc. 18

19 Upgrde 1 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following credentils. User nme Pssword Domin Vlue vr-dmin-rinpole vr-dmin-rinpole_pssword rinpole.locl 2 Click the Administrtion t, nd click Ctlog Mngement > Entitlements. 3 Click Prod-SingleVM-Entitlement. The Edit Entitlement pge ppers. 4 On the Edit Entitlement pge, replce the osolete dministrtor user group for the Rinpole tennt with the new group. c Remove ug-itac-tenntadmins (ug-itac-tenntadmins@rinpole.locl) Enter ug-vr-dmins-rinpole in the Users & Groups text ox nd press Enter. Click Finish 5 Repet Step 3 nd Step 4 for Dev-SingleVM-Entitlement. Clen Up Osolete Tennt User Accounts nd Groups After you crete nd configure the tennt ccount nmes nd ojects ccording to the nming scheme in this version of the vlidted design, in the vrelize Automtion portl clen up the roles nd permissions ssigned to the osolete user ccounts nd groups. The nmes of the osolete ccounts nd groups hve the ITAC prefix. 1 Log in to the vrelize Automtion portl. Open We rowser nd go to Log in using the following credentils. User nme Pssword Domin Vlue dministrtor vr_dministrtor_pssword vsphere.locl 2 On the Tennts pge, click the Rinpole tennt to edit its settings. VMwre, Inc. 19

20 Upgrde 3 To remove the osolete dministrtor ccount of the Rinpole tennt from the locl user ccounts, on the Locl Users t, select the ITAC-LoclRinpoleAdmin nd delete it. 4 Remove the tennt dministrtor nd IS dministrtor roles from the osolete tennt dministrtor ccount. c d e f Click the Administrtors t. In the Tennt dministrtors tle, plce your mouse over ug-itac-tenntadmins. Click the delete icon tht ppers next to ug-itac-tenntadmins. In the IS dministrtors tle, plce your mouse over ug-itac-tenntadmins. Click the delete utton tht ppers next to ug-itac-tenntadmins. Click Finish. 5 Log in to the vrelize Automtion Rinpole portl. Open We rowser nd go to Log in using the following credentils. User nme Pssword Domin Vlue vr-loclrinpoledmin vr-loclrinpoledmin_pssword vsphere.locl 6 Disle the privileged ccess of the osolete tennt dministrtor ccount. On the Administrtion t, nvigte to Users & Groups > Directory Users nd Groups. Enter ug-itac-tenntadmins in the serch ox nd press Enter. The ug-itac-tenntadmins (ug-itac-tenntadmins@rinpole.locl) group nme ppers in the Nme text ox. c Click ug-itac-tenntadmins(ug-itac-tenntadmins@rinpole.locl). d In the Add Roles to this Group list, deselect the following roles nd click Finish. Appliction Architect Approvl Administrtor Business Mngement Administrtor Continer Administrtor Continer Architect Infrstructure Architect Softwre Architect XS Architect VMwre, Inc. 20

21 Upgrde 7 Disle the privileged ccess of the osolete tennt rchitect ccount. On the Administrtion t, nvigte to Users & Groups > Directory Users nd Groups. Enter ug-itac-tenntarchitects in the serch ox nd press Enter. The ug-itac-tenntarchitects (ug-itac-tenntarchitects@rinpole.locl) group nme ppers in the Nme text ox. c Click ug-itac-tenntarchitects (ug-itac-tenntarchitects@rinpole.locl). d In the Add Roles to this Group list, deselect the following roles nd click Finish. Appliction Architect Continer Architect Infrstructure Architect Softwre Architect XS Architect VMwre, Inc. 21

22 Upgrde the Opertions 3 Mngement Lyer After you upgrde the cloud mngement lyer, upgrde vrelize Opertions Mnger nd vrelize Log Insight which re the components of the opertions mngement lyer to continue monitoring the existing nd upgrded components y using the ltest cpilities in the new relese. Tle 3 1. Upgrde Sequence for the Opertions Mngement Lyer Order Component Su-Component 1 Reconfigurtion of vrelize Opertions Mnger - 2 vrelize Log Insight vrelize Log Insight Applinces vrelize Log Insight Agents 3 Post-Upgrde Reconfigurtion of vrelize Log Insight - Configurtion Chnges of vrelize Opertions Mnger Perform the configurtion chnges to the environment ccording to the ojectives nd deployment guidelines of this vlidted design so tht your environment remins ligned with VMwre Vlidted Design. Upgrde vrelize Log Insight Upgrde the vrelize Log Insight clusters nd gents in Region A nd Region B so tht you cn use the new fetures nd hve n environment tht is complint with VMwre Vlidted Design for Softwre-Defined Dt Center 4.2. Configurtion Chnges of vrelize Opertions Mnger Perform the configurtion chnges to the environment ccording to the ojectives nd deployment guidelines of this vlidted design so tht your environment remins ligned with VMwre Vlidted Design. VMwre, Inc. 22

23 Upgrde 1 Disle the vsan Dshords of the Mngement Pck for Storge Devices in Region A Use the vrelize Opertions Mngement Pck for Storge Devices to monitor fric-sed storge such s the NFS dtstores in this vlidted design. To monitor the vsan dtstores for the mngement pplictions, disle the vsan dshords of mngement pck for Storge Devices nd use the dshords of the vrelize Opertions Mngement Pck for vsan. The mngement pck for vsan comes pre-instlled with vrelize Opertions Mnger. 2 Define User Role in vsphere for vcenter Adpters in vrelize Opertions Mnger in Region A In vsphere, crete user role with privileges tht re required to query informtion from vcenter Server nd receive metric dt in vrelize Opertions Mnger. In vrelize Opertions Mnger, you cn lso run ctions or tsks on the ojects it mnges in vcenter Server. Add the privileges to the role tht re required for typicl virtul mchine lifecycle opertions, such s snpshot mngement nd virtul mchine resource configurtion. Disle the vsan Dshords of the Mngement Pck for Storge Devices in Region A Use the vrelize Opertions Mngement Pck for Storge Devices to monitor fric-sed storge such s the NFS dtstores in this vlidted design. To monitor the vsan dtstores for the mngement pplictions, disle the vsan dshords of mngement pck for Storge Devices nd use the dshords of the vrelize Opertions Mngement Pck for vsan. The mngement pck for vsan comes pre-instlled with vrelize Opertions Mnger. 1 Log in to vrelize Opertions Mnger y using Secure Shell (SSH) client. Open n SSH connection to vrops01svr01.rinpole.locl. Log in using the following credentils. User nme Pssword Vlue root vrops_root_pssword 2 Disle the vsan dshords provided y the vrelize Opertions Mnger Mngement Pck for Storge Devices y running the following commnds. cd /usr/li/vmwre-vcops/tools/opscli $VMWARE_PYTHON_BIN./ops-cli.py dshord hide ll 'VirtulSAN Hetmp' $VMWARE_PYTHON_BIN./ops-cli.py dshord hide ll 'VirtulSAN Entity Usge' $VMWARE_PYTHON_BIN./ops-cli.py dshord hide ll 'VirtulSAN Cluster Insights' $VMWARE_PYTHON_BIN./ops-cli.py dshord hide ll 'VirtulSAN Device Insights' $VMWARE_PYTHON_BIN./ops-cli.py dshord hide ll 'VirtulSAN Trouleshooting' VMwre, Inc. 23

24 Upgrde 3 Log in to vrelize Opertions Mnger y using the opertions interfce. Open We rowser nd go to Log in using the following credentils. User nme Pssword Vlue dmin vrops_dmin_pssword 4 On the min nvigtion r, click Dshords nd verify tht the following dshords re no longer visile. VirtulSAN Hetmp VirtulSAN Entity Usge VirtulSAN Cluster Insights VirtulSAN Device Insights VirtulSAN Trouleshooting Define User Role in vsphere for vcenter Adpters in vrelize Opertions Mnger in Region A In vsphere, crete user role with privileges tht re required to query informtion from vcenter Server nd receive metric dt in vrelize Opertions Mnger. In vrelize Opertions Mnger, you cn lso run ctions or tsks on the ojects it mnges in vcenter Server. Add the privileges to the role tht re required for typicl virtul mchine lifecycle opertions, such s snpshot mngement nd virtul mchine resource configurtion. 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following credentils. User nme Pssword Vlue dministrtor@vsphere.locl vsphere_dmin_pssword 2 On the Home pge of the vsphere We Client, click Roles under Administrtion. VMwre, Inc. 24

25 Upgrde 3 Crete role for collecting dt from nd performing ctions on vcenter Server. On the Roles pge, click the Crete role ction icon. In the Crete Role dilog ox, configure the role using the following configurtion settings, nd click OK. Role nme Vlue vsphere Actions User Privilege Virtul Mchine.Configurtion.Chnge CPU Count Virtul Mchine.Configurtion. Chnge Resource Virtul Mchine.Configurtion. Memory Virtul Mchine.Interction. Power Off Virtul Mchine.Interction. Power On Virtul Mchine.Snpshot Mngement. Crete Snpshot Virtul Mchine.Snpshot Mngement. Remove Snpshot This role inherits the System.Anonymous, System.View, nd System.Red privileges. The Mngement vcenter Server in Region A propgtes the role to the other linked vcenter Server instnces. 4 Updte the permissions of the svc-vrops-vsphere service ccount. c d In the Nvigtor pne, under Access Control, click Glol Permissions. Select the svc-vrops-vsphere service ccount nd click Edit. In the Glol Permissions Root Chnge Role On Permissions dilog ox, under Assigned Role, select vsphere Actions User. Verify tht Propgte to children is selected nd click OK. Upgrde vrelize Log Insight Upgrde the vrelize Log Insight clusters nd gents in Region A nd Region B so tht you cn use the new fetures nd hve n environment tht is complint with VMwre Vlidted Design for Softwre- Defined Dt Center 4.2. Upgrde oth of the vrelize Log Insight clusters in Region A nd Region B from the user interfce of the mster nodes; upgrde y using the Integrted Lod Blncer IP ddress is not supported. All the other nodes re upgrded utomticlly. You must lso upgrde the Log Insight gents on the mngement components tht send log dt to vrelize Log Insight over the Ingestion API. After the virtul pplinces nd gents re upgrded, upgrde ll instlled content pcks. VMwre, Inc. 25

26 Upgrde Tle 3 3. vrelize Log Insight Nodes in the SDDC Region Role IP Address FQDN Region A Integrted lod lncer VIP sfo01vrli01.sfo01.rinpole.locl Mster node sfo01vrli01.sfo01.rinpole.locl Worker node sfo01vrli01.sfo01.rinpole.locl Worker node sfo01vrli01c.sfo01.rinpole.locl Worker node x x sfo01vrli01x.sfo01.rinpole.locl Region B Integrted lod lncer VIP lx01vrli01.lx01.rinpole.locl Mster node lx01vrli01.lx01.rinpole.locl Worker node lx01vrli01.lx01.rinpole.locl Worker node lx01vrli01c.lx01.rinpole.locl Worker node x x lx01vrli01x.lx01.rinpole.locl Prerequisites Downlod the vrelize Log Insight product upgrde VMwre-vRelize-Log-Insight xxxxxxx.pk files for the pproprite version(s) on the Windows host tht hs ccess to the dt center. Tle 3 2. PAK Files Tht Are Required for vrelize Log Insight Upgrde PAK Type Softwre updte.pk file for version PAK File VMwre-vRelize-Log-Insight xxxxxxx.pk Verify tht you hve user ccount with the minimum of Edit Admin permission for the vrelize Log Insight We Interfce. Verify tht ckup of the vrelize Log Insight Virtul Applinces exists 1 Tke Snpshots of the vrelize Log Insight Nodes Before you strt the upgrde, tke snpshots of the nodes of vrelize Log Insight so tht you cn roll their stte ck in the cse of filure during the upgrde process. 2 Upgrde the vrelize Log Insight Clusters When you upgrde the vrelize Log Insight instnces in Region A nd Region B in the SDDC, strt the updte process from the vrelize Log Insight user interfce of the mster node. 3 Upgrde the Content Pcks on vrelize Log Insight After upgrding the vrelize Log Insight nodes, upgrde the content pcks in the environment to tke dvntge of the ltest fetures of the pcks while monitoring the environment. 4 Delete the Snpshots of the vrelize Log Insight Applinces After you complete the updte of the vrelize Log Insight nodes, clen up the virtul mchine snpshots. VMwre, Inc. 26

27 Upgrde 5 Post-Upgrde Configurtion of the vrelize Log Insight After you upgrde vrelize Log Insight components of the SDDC, configure the environment ccording to the ojectives nd deployment guidelines of this vlidted design. Wht to do next Verify tht vrelize Log Insight functions flwlessly fter the upgrde. See Vlidte vrelize Log Insight in the VMwre Vlidted Design Opertionl Verifiction documenttion. Tke Snpshots of the vrelize Log Insight Nodes Before you strt the upgrde, tke snpshots of the nodes of vrelize Log Insight so tht you cn roll their stte ck in the cse of filure during the upgrde process. Tle 3 4. vrelize Log Insight Virtul Mchines Region Folder Role Virtul Mchine Nme Region A sfo01-m01fd-vrli Mster Node sfo01vrli01 sfo01-m01fd-vrli Worker Node 1 sfo01vrli01 sfo01-m01fd-vrli Worker Node 2 sfo01vrli01c Region B lx01-m01fd-vrli Mster Node lx01vrli01 sfo01-m01fd-vrli Worker Node 1 lx01vrli01 sfo01-m01fd-vrli Worker Node 2 lx01vrli01c 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following credentils. User nme Pssword Vlue dministrtor@vsphere.locl vsphere_dmin_pssword 2 From the Home menu, click VMs nd Templtes. 3 In the Nvigtor, expnd the sfo01m01vc01.sfo01.rinpole.locl > sfo01-m01dc > sfo01-m01fdvrli tree. VMwre, Inc. 27

28 Upgrde 4 Tke snpshot of ech node in the cluster. Right-click the sfo01vrli01 virtul mchine nd select Snpshot > Tke Snpshot. In the Tke VM Snpshot dilog ox, enter the following settings nd click OK. Nme Vlue VMwre Vlidted Design 4.2 Opertions Upgrde Description - Snpshot the virtul mchine's memory Quiesce guest file system (Needs VMwre Tools instlled) Deselected Deselected c Repet these steps for the other virtul mchines in the cluster in Region A. 5 Repet the procedure for the nodes in Region B under the lx01m01vc01.lx01.rinpole.locl vcenter Server in the vsphere We Client. Upgrde the vrelize Log Insight Clusters When you upgrde the vrelize Log Insight instnces in Region A nd Region B in the SDDC, strt the updte process from the vrelize Log Insight user interfce of the mster node. When upgrding the two vrelize Log Insight clusters in Region A or Region B, you cn upgrde two vrelize Log Insight instnces one fter the other or in prllel. Tle 3 5. Upgrde Pth for vrelize Log Insight Upgrde From Upgrde To PAK File vrelize Log Insight 4.5 vrelize Log Insight VMwre-vRelize-Log-Insight xxxxxxx.pk 1 Open the vrelize Log Insight user interfce. Open We rowser nd go to the following URL. Region Region A Region B vrelize Log Insight URL Log in using the following credentils. User nme Pssword Vlue dmin vrli_dmin_pssword 2 Click the configurtion drop-down menu icon nd select Administrtion. 3 Under Mngement, click Cluster nd click Upgrde Cluster. VMwre, Inc. 28

29 Upgrde 4 Browse to the loction of the vrelize Log Insight.pk file for the first increment on your locl file system nd click Open. 5 In the Upgrde Log Insight dilog ox, click Upgrde nd wit until the.pk file uplods to the mster pplince. 6 On the End User License Agreement pge, click Accept. The Upgrde Log Insight progress dilog ox opens. 7 After the upgrde of the mster node completes, in the Upgrde Successful dilog ox tht ppers, click OK. The upgrde of ll other nodes in the cluster strts utomticlly. 8 After the upgrde process for the whole cluster completes, the Integrted Lod Blncer comes ck online. 9 After the Integrted Lod Blncer ecomes Avilile, repet this process using the vrelize Log Insight.pk file for the second increment. 10 Repet the upgrde on the cluster in Region B. Upgrde the Content Pcks on vrelize Log Insight After upgrding the vrelize Log Insight nodes, upgrde the content pcks in the environment to tke dvntge of the ltest fetures of the pcks while monitoring the environment. You downlod the ltest content pcks for the vrelize Log Insight clusters in ech region from the Content Pck Mrketplce. You cn strt with downloding nd updting the content pcks in Region A. Then repet this tsk with downloding nd updting the content pcks in Region B. 1 Log in to the vrelize Log Insight user interfce. Open We rowser nd go to Log in using the following credentils. User nme Pssword Vlue dmin vrli_dmin_pssword 2 Click the configurtion drop-down menu icon nd select Content Pck. 3 In the Content Pck pne, under Content Pck Mrket Plce, click Updtes. 4 In the Log Insight Content Pck Mrketplce pne, click Updte All to upgrde ll content pcks to their ltest version. 5 Once the content pcks hve een upgrded, click ech of the items under Instlled Content Pcks on the left nd verify tht the Version numer of ech content pck mtches the version for this vlidted design. VMwre, Inc. 29

30 Upgrde 6 Repet the procedure on the cluster in Region B y logging in to the Delete the Snpshots of the vrelize Log Insight Applinces After you complete the updte of the vrelize Log Insight nodes, clen up the virtul mchine snpshots. Tle 3 6. vrelize Log Insight Virtul Mchines Region Folder Role Virtul Mchine Nme Region A sfo01-m01fd-vrli Mster Node sfo01vrli01 sfo01-m01fd-vrli Worker Node 1 sfo01vrli01 sfo01-m01fd-vrli Worker Node 2 sfo01vrli01c Region B lx01-m01fd-vrli Mster Node lx01vrli01 sfo01-m01fd-vrli Worker Node 1 lx01vrli01 sfo01-m01fd-vrli Worker Node 2 lx01vrli01c 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following credentils. User nme Pssword Vlue dministrtor@vsphere.locl vsphere_dmin_pssword 2 From the Home menu of the vsphere We Client, 3 In the Nvigtor, click VMs nd Templtes nd expnd the sfo01m01vc01.sfo01.rinpole.locl > sfo01-m01fd-vrli tree. 4 Right-click the sfo01vrli01 virtul mchine nd select Mnge Snpshots. 5 On the Snpshots t, click the snpshot tht you creted efore the vrelize Log Insight updte nd select Delete. 6 Click Yes in the confirmtion dilog ox nd click Close. 7 Repet the procedure on the other virtul mchines of vrelize Log Insight in Region A. 8 Repet the procedure on the virtul mchines of vrelize Log Insight in Region B under the lx01m01vc01.lx01.rinpole.locl vcenter Server. VMwre, Inc. 30

31 Upgrde Post-Upgrde Configurtion of the vrelize Log Insight After you upgrde vrelize Log Insight components of the SDDC, configure the environment ccording to the ojectives nd deployment guidelines of this vlidted design. 1 Renme Agent Groups in vrelize Log Insight In the VMwre Vlidted Design 4.2, to simplify the Agent Groups for future comptiility, the nming convention hs een updted for oth Region A nd Region B. 2 Configure Privileges for the Service Account for vrelize Log Insight in vsphere In this version of VMwre Vlidted Design, ll service ccount nmes re ligned to nming convention where the ccount nme indictes the direction of ppliction-to-ppliction communiction. Assign vcenter Single Sign-On dministrtive glol permissions to the new service ccount svc-vrli-vsphere so tht you cn receive log informtion from vsphere in vrelize Log Insight in Region A nd Region B. 3 Updte vrelize Log Insight with the New Service Account After you configure the svc-vrli-vsphere Active Directory user with the vsphere privileges tht re required for retrieving log informtion from the vcenter Server instnces nd ESXi hosts, re-connect vrelize Log Insight to vsphere y using the svc-vrli-vsphere service ccount. Renme Agent Groups in vrelize Log Insight In the VMwre Vlidted Design 4.2, to simplify the Agent Groups for future comptiility, the nming convention hs een updted for oth Region A nd Region B. Updte the gent group nmes within vrelize Log Insight to remin ligned to the VMwre Vlidted Design. Region URL Old Agent Group Nme New Agent Group Nme Region A vrops6 - Agent Group vrops - Applince Agent Group vra7 - Windows Agent Group vra7 - Linux Agent Group vra7 - Microsoft SQL Server Agent Group vro7 - Agent Group vapplinces - Agent Group vra - Windows Agent Group vra - Applince Agent Group vra - SQL Agent Group vro - Applince Agent Group VA - Linux Agent Group Region B vrops6 - Agent Group vrops - Applince Agent Group vra7 - Windows Agent Group vapplinces - Agent Group vra - Windows Agent Group VA - Linux Agent Group VMwre, Inc. 31

32 Upgrde 1 Open the vrelize Log Insight user interfce. Open We rowser nd go to the following URL. Region Region A Region B vrelize Log Insight URL Log in using the following credentils. User nme Pssword Vlue dmin vrli_dmin_pssword 2 Click the configurtion drop-down menu icon nd select Administrtion. 3 Under Mngement, click Agents. 4 In the All Agents drop-down menu, select the vrops6 - Agent Group gent group nd click the pencil icon to edit it. 5 In the Edit Agent Group dilog, chnge the Nme field from vrops6 - Agent Group to vrops - Applince Agent Group, nd click Sve. 6 Repet the procedure for the remining Agent Groups in Region A nd the Agent Groups in Region B. Configure Privileges for the Service Account for vrelize Log Insight in vsphere In this version of VMwre Vlidted Design, ll service ccount nmes re ligned to nming convention where the ccount nme indictes the direction of ppliction-to-ppliction communiction. Assign vcenter Single Sign-On dministrtive glol permissions to the new service ccount svc-vrlivsphere so tht you cn receive log informtion from vsphere in vrelize Log Insight in Region A nd Region B. 1 Log in to vcenter Server y using the vsphere We Client. Open We rowser nd go to Log in using the following credentils. User nme Pssword Vlue dministrtor@vsphere.locl vsphere_dmin_pssword VMwre, Inc. 32

33 Upgrde 2 From the Home menu, select Administrtion. 3 In the vsphere We Client, select Administrtion from the Home menu nd click Users nd Groups under Users nd Groups. 4 On the Groups t, click the Administrtors group nd click the Add Memer icon under Group Memers. 5 In the Add Principls dilog ox, from the Domin drop-down menu, select rinpole.locl, in the filter ox type svc, nd press Enter. 6 From the list of users nd groups, select the svc-vrli-vsphere user, click Add, nd click OK. The glol vcenter Single Sign-On dministrtive permissions of the svc-vrli-vsphere ccount propgte to ll other linked vcenter Server instnces. Updte vrelize Log Insight with the New Service Account After you configure the svc-vrli-vsphere Active Directory user with the vsphere privileges tht re required for retrieving log informtion from the vcenter Server instnces nd ESXi hosts, re-connect vrelize Log Insight to vsphere y using the svc-vrli-vsphere service ccount. 1 Log in to the vrelize Log Insight user interfce. Open We rowser nd go to Log in using the following credentils. User nme Pssword Vlue dmin vrli_dmin_pssword 2 Click the configurtion drop-down menu icon nd select Administrtion. 3 Under Integrtion, click vsphere. VMwre, Inc. 33

34 Upgrde 4 In the vcenter Servers pne, updte the service ccount for connection to the vcenter Server instnces in the region. Updte the user nme to svc-vrli-vsphere@rinpole.locl, click Updte Pssword nd then click Test Connection. vcenter Server Option Vlue Hostnme sfo01m01vc01.sfo01.rinpole.locl for Mngement vcenter Server sfo01w01vc01.sfo01.rinpole.locl for Compute vcenter Server Usernme Pssword Collect vcenter Server events, tsks nd lrms Configure ESXi hosts to send logs to Log Insight svc-vrli-vsphere@rinpole.locl svc-vrli-vsphere_user_pssword Selected Selected c Click View Detils nd exmine the list of ESXi hosts tht re connected to the vcenter Server instnce to verify tht they re still connected to the correct vcenter Server. In the Advnced Options configurtion window, select Automticlly configure ll ESXi hosts, select UDP under Syslog protocol, nd click OK. 5 Repet the steps to updte the settings for the second vcenter Server instnce in Region A. 6 Click Sve. A progress dilog ox ppers. 7 Click OK in the confirmtion dilog ox tht ppers fter vrelize Log Insight contcts the vcenter Server instnces. 8 Repet the procedure for Region B using the following informtion. vcenter Server Option Vlue Hostnme lx01m01vc01.lx01.rinpole.locl for Mngement vcenter Server lx01w01vc01.lx01.rinpole.locl for Compute vcenter Server Usernme Pssword Collect vcenter Server events, tsks nd lrms Configure ESXi hosts to send logs to Log Insight svc-vrli-vsphere@rinpole.locl svc-vrli-vsphere_user_pssword Selected Selected You see the vsphere dshords under the VMwre - vsphere content pck dshord ctegory. VMwre, Inc. 34

35 Upgrde the Virtul Infrstructure nd Business Continuity Lyers 4 After you upgrde the cloud mngement pltform lyer nd opertions mngement lyer, you must upgrde the components of the virtul infrstructure nd usiness continuity lyers of the SDDC. 1 Review nd Updte vsphere Storge APIs for Dt Protection Bsed Bckup Solution Before you upgrde the vsphere components in the virtul infrstructure lyer, verify tht the ckup solution tht is sed on vsphere Storge APIs for Dt Protection (VADP) in your orgniztion is comptile with version 4.2 of VMwre Vlidted Design. 2 Upgrde the NSX Components for the Mngement nd Shred Edge nd Compute Clusters When you upgrde the NSX instnces in the SDDC, you upgrde ech functionl group of components of the NSX deployment in Region A nd Region B. 3 Upgrde the Components for the Mngement Cluster When you upgrde the virtul infrstructure lyer of the SDDC, you upgrde the components tht support the mngement cluster first. 4 Upgrde the Components for the Shred Edge nd Compute Cluster After you upgrde the components tht support the mngement cluster, you upgrde the components for the shred edge nd compute cluster to complete the upgrde of the SDDC virtul infrstructure lyer. 5 Glol Post-Upgrde Configurtion of the Virtul Infrstructure Lyer After you upgrde ll virtul infrstructure lyer, perform glol post-upgrde configurtion ccording to ddress the dependencies etween these components nd to lign your environment to the guidnce in this vlidted design. 6 Post-Upgrde Configurtion of the Business Continuity Lyer for the Mngement Cluster After you upgrde the usiness continuity nd virtul infrstructure lyers of the SDDC, configure the environment ccording to the ojectives nd deployment guidelines of this vlidted design. VMwre, Inc. 35

36 Upgrde Tle 4 1. VMwre Vlidted Design Upgrde Sequence for the Virtul Infrstructure nd Business Continuity Lyers Order Component Su-Component 1 Bckup solution sed on VMwre vsphere Storge APIs - 2 NSX for vsphere NSX Mnger instnces NSX Controller instnces NSX Networking Fric NSX Edges 3 Post-upgrde reconfigurtion for virtul infrstructure (networking) - 4 Pltform Services Controller instnces - vcenter Server 5 Post-upgrde reconfigurtion for virtul infrstructure (compute infrstructure) - 6 vsphere Updte Mnger Downlod Service - 7 ESXi - 8 Post-upgrde reconfigurtion for virtul infrstructure (compute infrstructure) - Review nd Updte vsphere Storge APIs for Dt Protection Bsed Bckup Solution Before you upgrde the vsphere components in the virtul infrstructure lyer, verify tht the ckup solution tht is sed on vsphere Storge APIs for Dt Protection (VADP) in your orgniztion is comptile with version 4.2 of VMwre Vlidted Design. Perform the upgrde outside of the usul ckup windows. Prerequisites Ensure tht VADP-sed Bckup Solution is comptile with vsphere 6.5 Updte 1 nd lter. See the VMwre Vlidted Design Relese Notes for version 4.2 for specific versions. Ensure tht ny customiztion or integrtion tht might hve een configured outside of wht is prescried in VMwre Vlidted Design with the VADP-sed Bckup Solution hs een vlidted y the vendor nd is comptile with the ckup solution, for exmple, ckup integrtion for vrelize Automtion lueprints. Engge your ckup solution vendor or tem to verify tht the system is fully opertionl nd comptile with ny other clients, such s reporting tools, We rowser, nd so on. Allocte dequte time for the durtion of mintennce window efore strting the upgrde. Engge your ckup vendor to get n estimte on the upgrde durtion. VMwre, Inc. 36