Upgrading Wmware Vshere
Upgrading Wmware Vshere
Upgrading Wmware Vshere
Contents
What’s New in VMware vSphere 6.7................................ 3
How to Make the Most of This eBook............................. 5
Phase 1: Pre-Upgrade.............................................................. 6
Phase 2: Upgrade...................................................................... 10
Upgrade Process Overview................................................................10
Upgrade Components...........................................................................16
Resources....................................................................................................16
Phase 3: Post-Upgrade........................................................... 35
vCenter Server Converge Tool .........................................................35
Cross-Domain Repoint..........................................................................36
File-Based Backup and Restore.......................................................36
vCenter Server High Availability (VCHA)....................................37
Transitioning to the vSphere Client................................................37
Resource Repository............................................................... 38
About the Authors................................................................... 39
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 3
Throughout this eBook are helpful resources, which also are listed in in the Resources Repository.
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 6
Phase 1: Pre-Upgrade
Phase 1: Pre-Upgrade includes the key information to be reviewed prior to beginning the upgrade process:
Product Release Notes, Product Documentation, Interoperability Matrices, and the VMware Compatibility
Guide. It is also important to verify the health of the environment using a health check, and to understand Find more information
what is involved to perform a rollback in the event of a migration or upgrade issue. in the Using the
VMware Product
Product Release Notes Interoperability
Product Release Notes, which are published for every product released by VMware, are a key resource and Matrices knowledge
must be reviewed before getting started. base article
KB2006028.
Here is a summary of what you will find in the vCenter Server 6.7 Product Release Notes referenced
throughout this eBook:
Product Documentation
Be sure to review product documentation prior to beginning an install, an upgrade, or patching. Product
documentation contains links to product release notes, configuration maximums, vCenter and VMware
ESXi™ install and upgrade guides, and more. The process to perform common tasks can change between
releases, so it is helpful to review the documentation for any updated or deprecated workflows.
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 7
Interoperability Matrices
VMware Interoperability Matrices are a key component to a successful upgrade, and can help confirm that
your upgrade path or product versions will be compatible when performing an upgrade.
There are three kinds of Interoperability Matrices: Product, Database, and Upgrade Path interoperability.
• Product Interoperability Matrices verify that two VMware product versions are compatible with one
another.
- Example: Can I run vCenter Server 6.0 Update 3 and Site Recovery Manager 8.1?
• Database Interoperability Matrices verify that when a solution requires an external database you are
using a supported version and edition.
- Example: Can I use Microsoft SQL Server 2016 for vCenter Server?
• Upgrade Path Interoperability Matrices validate that when doing an in-place upgrade you are executing
an upgrade between supported versions.
- Example: Can I upgrade from vCenter Server 6.5 Update 2 to vCenter Server 6.7?
You should also back up the configuration of your ESXi Server. In the event you perform an upgrade or
patching process and it fails that change, you will have the ability to restore the configuration from a known
good backup. Currently the backup can only be triggered through CLI tools. Learn more about backing up
ESXi host configurations in the VMware Knowledge Base article KB2042141.
Resources
• vSphere 6.7 Upgrade FAQs on vSphere Central
• vCheck vSphere
• vSphere Optimization Assessment
• File-Based Backup Walkthrough
• VMware Professional Services – Certified members of the VMware Professional Services team are available
to conduct a vSphere health check on your environment. Check with your VMware representative for more
information or visit the website.
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 10
Phase 2: Upgrade
In Phase 2: Upgrade, we will review four sample upgrade scenarios that each include popular VMware
products. Keep in mind, however, that these are not reflective of all vSphere environments.
2 1
VMware Platform Services Step 1: Platform Services Controller
VMware vCenter Server
Controller Step 2: vCenter Server
vCenter vCenter
BLOG POST:
Virtual Machine Virtual Machine
Server Server Understanding
the Impacts of
Mixed-Version vCenter
vCenter vCenter Server Deployments
Server Server
If using an external PSC, then first upgrade the PSCs within the vSphere single sign-on (SSO) domain
before moving on to the vCenter Server. If the topology consists of multiple external PSCs, then all PSCs
within the same SSO domain must be upgraded prior to upgrading any vCenter Servers within that SSO
domain.
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 12
When the vCenter Server is deployed in an embedded topology, the PSC is no longer another VM. Rather,
it runs as a set of services within the vCenter Server. When upgrading an embedded vCenter Server, start
with Step 2 and complete the upgrade of the Platform Services Controller and the vCenter Server in a
single step.
Mixed versions are when vCenter Server or PSC versions do not match with each other in the environment.
A mixed-version vCenter Server configuration is only supported during upgrades and not for production
environments. This happens when upgrading the vCenter Server with an external PSC, and is the reason
we require all external PSCs to be upgraded before starting any vCenter Server upgrades. Using vCenter
Servers with embedded PSCs in enhanced linked mode is also considered a mixed-version configuration,
and we recommend upgrading these within the same maintenance window if possible.
VM Compatibility determines the virtual hardware available to the VM, which corresponds to the physical
hardware available on the vSphere host. Upgrading the compatibility level will allow the VM to take
advantage of additional features available to the virtual machine. For example, hardware version 14,
introduced with vSphere 6.7, supports 256 virtual disks as well as per-VM Enhanced vMotion Compatibility
(EVC).
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 14
Block size 1 MB 1 MB
Upgrading from VMFS-5 to VMFS-6 requires a datastore migration, which can be done in one of two ways:
• If enough capacity exists on your existing storage array, you can create a new datastore and do a vSphere
Storage vMotion of virtual machines from the old datastore to the new datastore.
• If space is limited, you can use Storage DRS to empty an existing datastore. At this point you can delete
the datastore and recreate it as a VMFS-6 version. Using Storage vMotion, you can migrate those VMs and
repeat until all datastores have been upgraded. This can be done manually through the GUI, or automated
via a PowerCLI cmdlet that has been created for this called Update-VMFSDatastore.
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 15
Upgrading to VDS version 6.0 or 6.5 can be done with no disruption. However, upgrading to VDS version
6.6 requires some additional steps.
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 16
Find out more about upgrading to VDS version 6.6 in the VMware knowledge base article, Known issues
while upgrading to DVS version 6.6 (52621).
Note that there is not a version 6.7 of VDS because vSphere 6.7 is based on similar code as VMware Cloud
on AWS and there were no new features introduced for a version change.
Upgrade Components
A successful vSphere upgrade includes the following five steps:
1. Environment Discovery and Assessment – It is important that we properly discover all components
and their associated current version and upgrade version within our vSphere environment.
2. Requirements and Decision – Another key component of a successful upgrade is to meet with stake-
holders and compile a list of requirements that could impact our decisions. This could include SSO
domain architecture, as well as introducing any new features such as enhanced linked mode of VMware
vCenter Server High Availability.
3. Compatibility – In Step 1, it was important that we properly discovered all of our components. Once we
have gathered that data, it is important to use the Interoperability Matrices to ensure compatibility.
4. Upgrade Order – Once we have discovered our environment, met with stakeholders to identify require-
ments, and validated our version compatibility, the next step is to plan our upgrade order. This can be
validated using our KB on the update sequence for vSphere and its supported products.
5. Validation – Last but not least, to understand we had a successful upgrade, we want to make sure it is
validated. Here we can follow some of the health assessment steps we performed in our pre-upgrade
check to make sure everything is still functioning as needed.
Resources
• Distributed Switch documentation
Compatibility
Making sure all products are compatible is the best way to have a successful upgrade the first time. Failure
to confirm product interoperability can lead to issues during and after upgrades that could also result in
requiring a rollback of systems.
Upgrade Order
Upgrade order is once again an important piece of the upgrade process. Upgrade vCenter Server first,
before upgrading the ESXi hosts. Because VUM is now part of the vCenter Server Appliance (VCSA), it will
be part of the vCenter Server upgrade and migration. The vCenter Server in this environment is running on
Windows, so this will require a vCenter Server Migration to the vCenter Server Appliance.
To begin our upgrade, we will download and mount the vCenter Server Appliance installer ISO to our
management machine. Using the ISO we will run the installer, which launches the workflow to migrate our
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 19
vCenter Server for Windows to the new vCenter Server Appliance. When the migrate wizard is finished, the
installer deploys a new appliance using a temporary IP. It will then export data from the Windows vCenter
Server instance and import it into the new vCenter Server Appliance. At this point, the appliance is
reconfigured to use the same information such as the FQDN, IP, certificates, and all reference IDs.
The next step is to import the ESXi ISO into vSphere Update Manager and create an upgrade baseline to
remediate our hosts to the latest version.
When hosts are upgraded to ESXi 6.7, we will upgrade our distributed switch version to vSphere 6.6. Now
the vSphere upgrade is complete and we can move to validation.
Validation
A complete vSphere health assessment was completed prior to executing the upgrade and migration. The
environment running vSphere 6.0 Update 3 was reviewed for any issues, as well as for the presence of
third-party tools or VMware products such as VMware Site Recovery Manager™ (SRM) or View Composer.
Any discovered products were noted to be externalized prior to executing the upgrade.
To validate the upgraded environment, we perform the same tasks using the vSphere health assessment
tool make sure no new faults exist within your vSphere 6.7 Update 1 environment. It is also a good practice
to rename the original vCenter Server for Windows that was migrated to the VCSA, and also remove or
disconnect the network card of the virtual machine to mitigate the risk of any accidental power operations.
If any issues are encountered during validation, you have some options. Depending on the severity of the
issue and the time in your maintenance window, you can open a support case with Global Support Services
(GSS). An alternate solution might be to initiate a rollback, but remember that this might be more impactful
because the entire environment has been upgraded at this point.
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 20
Compatibility
Because vSphere 6.7 GA was released before vSphere 6.5 Update 2, there previously was no supported
upgrade path. Now, with the introduction of vSphere 6.7 Update 1, there is a supported upgrade path to
move forward to the latest release.
Upgrade Order
Simplified deployments using the vCenter Server with Embedded Platform Services Controller make
upgrade easy. The inclusion of VMware vSphere Update Manager in the appliance also makes this a single-
step process.
To begin our upgrade, we will download and mount the vCenter Server Appliance installer ISO to our
management machine. Using the ISO we will run the installer, which launches the workflow to upgrade our
appliance. When the upgrade wizard is completed, the installer deploys a new appliance using a temporary
IP. We will then export data from the vCenter Server 6.5 instance and import it into the new vCenter Server
6.7. At this point, the appliance is reconfigured to use the same information such as the FQDN, IP,
certificates, and all reference IDs.
The next step of our upgrade is to import the ISO into vSphere Update Manager and create an upgrade
baseline to remediate our hosts to the latest version. Because we are upgrading from version 6.5 to version
6.7, we will be able to take advantage of the Single Reboot Upgrade enhancements to reduce our
maintenance windows.
Once all of our hosts are upgraded to the ESXi 6.7, we will proceed to upgrade our distributed switch
version to 6.6, making sure to keep in mind the considerations we mentioned previously when we upgrade
as there is a chance disruption can occur.
Now, the vSphere Upgrade is complete and we can proceed with validation.
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 22
Validation
A complete vSphere health assessment was completed prior to executing the upgrade and migration.
We determined that no faults existed in the environment and thus we were able to successfully log in to the
vSphere Client.
To validate our upgraded environment, we will perform the same tasks using your health assessment tool to
make sure you do not see any faults in your vSphere 6.7 Update 1 environment. If the assessment is
successful, then the upgrade is now complete.
If any issues are encountered during validation, you have some options. Depending on the severity of the
issue and the time in your maintenance window, you can open a support case with Global Support Services
(GSS). An alternate solution might be to initiate a rollback, but remember this might be more impactful
because the entire environment has been upgraded at this point.
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 23
Environment Overview
During the discovery phase, we were able to identify the current versions of vCenter Server, VUM, ESXi,
and Horizon 7 in the environment. The customer is currently running the vCenter Server Appliance and will
not need to plan a vCenter Server migration. The VUM server is external to the VCSA of course, and must
be migrated to the 6.7 vCenter Server during the upgrade. A VUM migration will save the current baselines
and move them to the VCSA for use later. No installation files (VIBs, ISOs, EXEs, etc.) will be migrated
during this process as that would only increase the upgrade and migration times.
Compatibility
Making sure products are compatible is the best way to have a successful upgrade the first time around,
instead of finding out later and requiring a rollback.
Our first steps are to make sure that versions are compatible. vCenter Server 6.0 U3 can be upgraded to
vCenter Server 6.7 and Horizon 7 version 7.2 can be upgraded to version 7.5, as shown in the VMware
Product Interoperability Matrices.
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 26
We can also see that Horizon 7 version 7.5 is compatible with VMware vSphere ESXi 6.7. These
confirmations assure us that vSphere 6.7 and Horizon 7 version 7.5 are compatible before moving
forward with an upgrade.
Upgrade Order
Upgrade order could be considered one of the most important things to understand during a vSphere
upgrade. Along with upgrade order, backup verification is also critical. Now is the best time to review
any required backups on systems to be upgraded. (Examples: View Composer database, View
Composer TLS/SSL certificates, Horizon Connection Server LDAP database, Horizon Connection and
Security Server VMs, vCenter Server.)
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 27
In order to identify the proper upgrade order, we will consult the VMware knowledge base article Update
sequence for vSphere 6.7 and its compatible VMware products (KB53710) as well as the Horizon 7.5
Upgrades guide. Horizon 7 has some components that will be upgraded prior to the vCenter Server and
ESXi hosts. Please review this order as it is important to follow it for success.
1. View Composer Upgrade
a. Disable provisioning on desktop pools that leverage linked clones.
b. Change any desktop pools that are set to refresh the OS disk on logout. Change the setting “Delete
or refresh machine on logoff” to Never.
c. Run the View Composer installer and be sure to verify port 18443 when prompted for Composer
operations.
2. Connection Server Upgrade
a. Export the LDAP database via the vdmexport.exe utility.
b. Disable the Connection Server via Horizon Administrator if the Connection Servers to be upgraded
are behind a load balancer.
c. Run the Connection Server installer from the Connection Server to be upgraded.
d. Verify the new Horizon 7 version installed from the Horizon Administrator.
e. If the Connection Server that was upgraded is behind a load balancer, re-enable the Connection
Server via Horizon Administrator before moving to the next Connection Server.
3. Security Server Upgrade
a. Disable or remove IPSec rules for the paired Security Server via Horizon Administrator, and also re-
move the server from any load-balancing groups.
b. Run the Connection Server installer and choose Security Server from the menu during the upgrade.
c. Return the server to its load-balancing groups, if required.
d. From the Horizon Administrator, verify the new Security Server version installed.
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 28
Validation
A complete vSphere health assessment was completed prior to executing the upgrade and migration. The
environment running vSphere 6.0 Update 3 was reviewed for any issues, as well as for the presence of
third-party tools or VMware products such as Site Recovery Manager (SRM) or View Composer. Any
discovered products were noted to be externalized prior to executing the upgrade.
To validate the upgraded environment, we perform the same tasks using the vSphere health assessment
tool make sure no new faults exist within your vSphere 6.7 Update 1 environment. It is also a good practice
to rename the original vCenter Server for Windows that was migrated to the VCSA and also remove or
disconnect the network card of the virtual machine to mitigate the risk of any accidental power operations.
If any issues are encountered during validation, you have some options. Depending on the severity of the
issue and the time in your maintenance window, you can open a support case with Global Support
Services (GSS). An alternate solution might be to initiate a rollback, but remember this might be more
impactful because the entire environment has been upgraded at this point.
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 29
Environment Overview
During our discovery phase, we were able to identify the current versions of vCenter Server, ESXi, and
SRM in our environment. Through discovery we also found out the customer was not currently using VUM
as they currently were upgrading ESXI hosts via the CLI. Also, because the customer is currently running
the vCenter Server Appliance, we do not need to plan any migration steps.
Compatibility
Making sure products are compatible is the best way to have a successful upgrade the first time around,
instead of finding out later and requiring a rollback.
In this scenario, we want to make sure that our versions are compatible. As we can see from the first
image that follows, we are able to upgrade from vCenter Server 6.0 U2 to vCenter Server 6.7 U1.
However, in the second image, we can see SRM 6.1.1 is unable to upgrade directly to SRM 8.1; it requires
us to be at 6.1.2.
Through our first compatibility check, we have identified our first issue. If we look at the vCenter
Compatibility Matrix for SRM 6.1.2 we can also see that it is not compatible with vCenter Server 6.0 U2;
it requires us to be at vCenter Server 6.0 U3. The good news is that we can see that SRM 8.1 is
compatible with both vCenter Server 6.0 U3 and vCenter Server 6.7 U1, so that upgrade will be
compatible once we are at that step. Based on this information, we can establish the correct upgrade
order to maintain compatibility.
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 32
Upgrade Order
Through our compatibility checks we have identified that we must be at SRM 6.1.2 prior to upgrading to
SRM 8.1. We also identified that in order to get to SRM 6.1.2, we must first upgrade our vCenter Server from
6.0 U2 to vCenter Server 6.0 U3. Because the customer will not have VUM in their environment until the
vCenter is at vCenter Server 6.7 U1, we will hold off patching until the final step. ESXI 6.0 U2 is compatible
with vCenter Server 6.0 U3 and vCenter Server 6.7 U1.
In order to identify the proper upgrade order we will consult the VMware knowledge base article,
Update sequence for vSphere 6.7 and its compatible VMware products (53710).
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 33
Validation
Prior to executing our upgrade, we were able to successfully complete a health assessment. We reviewed
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 34
that no faults existed in the environment and that we were able to successfully fail over workloads between
sites using Site Recovery Manager.
To validate our upgraded environment, perform the same tasks using the health assessment tool to make
sure you do not see any faults in your vSphere 6.7 Update 1 environment. At this point, you will also
perform a test failover of your SRM workloads and make sure everything is functioning. If this is successful,
your upgrade is now complete.
If you encounter an issue with your validation, you have two options. Depending on the severity of the issue
and the time in your maintenance window, you can open a support case. An alternative solution is to
rollback, but because you have upgraded all components an upgrade at this point might be more impactful.
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 35
Phase 3: Post-Upgrade
After the upgrade is complete, the next step is to complete “day 2 operations” that will ensure you an
optimal vSphere 6.7 experience.
For more information
vCenter Server Converge Tool on using the
vCenter Server 6.7 and 6.5 Update 2 now support Embedded Deployments with Enhanced Linked Mode Converge Tool, see
(ELM) in a greenfield environment. Embedded deployment of the vCenter Server is now the recommended http://www.vmware.
topology going forward. Previously, external deployments of the Platform Services Controller (PSC) was com/go/ vSphere67u1
the only way to achieve Enhanced Linked Mode (ELM). ConvergeTool
With vSphere 6.7 Update 1 comes the Converge Tool. The Converge Tool allows those in an external PSC
topology to change to a more simplistic embedded topology where the PSC is part of the VCSA node as a
single VM versus multiple VMs.
This tool is only available with the vCenter Server Appliance 6.7 Update 1 installer or ISO. This new tool
allows administrators to simplify vCenter Server architecture and move from an external Platform Services
Controller (PSC) to an embedded PSC topology. Converge Tool has a few requirements that should be
considered prior to use. The converge tool is only supported on the VCSA and PSC if they are running 6.7
Update 1 code. This means that if your environment is using the vCenter Server for Windows, you will have
to migrate to the VCSA first before considering convergence. Another requirement is to disable vCenter
Server High Availability (VCHA) if enabled prior to running the tool. Be sure to review and understand any
other VMware products in the environment that may be communicating with the PSC (Horizon, NSX, SRM,
vRealize Operations, etc.) as they will need to be re-registered after the convergence of the PSC and before
the final decommission process completes.
This is just a short list of the Converge Tool features and requirements. To learn more, review vCenter
Server Documentation.
U P G R A D I N G TO V M WA R E V S P H E R E 6 . 7 | 36
Cross-Domain Repoint
vCenter Server 6.7 also includes a way to consolidate vSphere single sign-on (SSO) domains. Initially in
vSphere 5.5 any consolidatation of SSO domains had to be done prior to upgrade, but with the release of
vSphere 6.7 it is supported to consolidate vSphere SSO domains once all Platform Services Controllers and
vCenter Server components are running vSphere 6.7. Unlike vSphere 5.5, consolidating SSO domains on
vSphere 6.7 must be done after all components are upgraded to vSphere 6.7. vSphere 6.7 GA supports
consolidation of vSphere SSO domains using external PSCs and vSphere 6.7 Update 1 now supports this
when using an embedded PSC(s).
It is no longer required to deploy and configure a new SSO domain in order to consolidate. The cross-
domain repoint tool supports the consolidation and merging of two existing SSO domains. Using cmsso-
util, you can run a precheck which will identify any conflicts such as tags, tag categories, licenses, or roles.
Note: If repointing to a new SSO domain, all global permissions are lost and must be recreated, but if
repointing to an existing SSO domain, then global permissions will be inherited.
A situation where this strategy makes sense is a company acquisition. If you had two separate vSphere
environments or had different SSO domain names, you can now merge these to a shared SSO domain and
take advantage of Enhanced Linked Mode.
Resource Repository
Pre-Upgrade Resources Use Encryption in Your vSphere Environment
Review these blog posts for help preparing and planning Changing a vCenter Server Deployment Type After
your upgrade. Upgrade or Migration
Upgrade Considerations for VMware vSphere 6.7
Reconfiguring vCenter Server with an External Platform Services
Upgrading your vCenter Server Appliance from 6.5 to 6.7 Controller to a vCenter Server with an Embedded Platform
vSphere Upgrade Technical Webcast Series Services Controller