Upgrading vShield Manager to NSX Manager

VMware vCloud Networking and Security 5.5.x reaches end of life 19th September 2016, the vCloud Networking and Security suite is being replaced by NSX.

The final release of vCNS was compatible with vSphere 6, however with the caveat that any new vSphere 6 features have not been tested. This combined with the imminent end of general support means that customers using vShield Manager components to offload anti-virus and malware scanning should be upgrading to NSX Manager sooner rather than later.

With release 6.2.3 of NSX the default license upon install is ‘NSX for vShield Endpoint’ which allows management of vShield Endpoint from NSX Manager. This new feature is available to those who have already purchased vSphere with vShield Endpoint (Essential Plus and above) to assist with the transition from vCNS.


  • Both vCenter and vShield should be at version 5.5 or above.
  • NSX Manager requires a minimum of 16 GB RAM, 4 vCPU and a 60 GB disk. You will need to shut down the vShield Manager and increase resources accordingly prior to the upgrade.
  • Confirm compatibility of any third party products such as backup, monitoring, AV service appliances.
  • Ensure you have a good back up and take a snapshot of your existing vShield Manager.
  • Download the vShield Manager upgrade bundle from the VMware downloads portal.
  • NSX consolidates the UI and CLI passwords. Previous versions of vShield Manager could have different UI and CLI passwords, after upgrading to NSX only the CLI password will be used so make sure you have this.

If you are upgrading to NSX Manager with McAfee MOVE then see also the McAfee MOVE Setup Guide.


Open the vSphere client and select vShield Manager from the Home screen, login as an administrator.


Click Updates and Upload Upgrade Bundle. Upload the .gz bundle downloaded earlier, once complete click Install.


Review the change in software versions and click Confirm Install.


Once the installer is complete the virtual appliance will reboot.



When the virtual appliance comes back online browse to the IP or FQDN of your NSX Manager (this is the same management IP or FQDN as the vShield Manager).


Log in with the same admin details as the vShield Manager and select Manage vCenter Registration. Confirm the vCenter is connected.

The NSX manager can also be managed from the vSphere web client under Networking & Security > NSX Managers. You will need to restart the vSphere web client services on the vCenter server and you may need to clear your browsers cache if the NSX plugin is not present or does not display properly.

Finally we need to upgrade Guest Introspection to match the NSX Manager version.

Open the vSphere web portal and click Networking & Security > Installation > Service Deployments.


Select the cluster to upgrade and click the green upgrade icon. Confirm the details and click Ok. Once a cluster is upgraded you can go ahead and upgrade any partner solutions.

Update – NSX Manager 6.2.3 was replaced with NSX Manager 6.2.4, however all steps in this post remain the same. For further assistance with Guest Introspection see the post NSX Manager Guest Introspection.

One thought on “Upgrading vShield Manager to NSX Manager

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s