Vsphere Vcenter
Vsphere Vcenter
Update 2
VMware vSphere 6.0
VMware ESXi 6.0
vCenter Server 6.0
vSphere Migration
You can find the most up-to-date technical documentation on the VMware website at:
https://docs.vmware.com/
docfeedback@vmware.com
VMware, Inc.
3401 Hillview Ave.
Palo Alto, CA 94304
www.vmware.com
©
Copyright 2019 VMware, Inc. All rights reserved. Copyright and trademark information.
VMware, Inc. 2
Contents
Updated Information 6
3 Pre-migration Checks 18
4 Known Limitations 20
VMware, Inc. 3
vSphere Migration
9 Troubleshooting 57
View Migration Assistant Logs and Status Files 57
VMware, Inc. 4
About vSphere Migration
®
The vSphere Migration guide provides information about migrating VMware vCenter Server to vCenter
Server Appliance.
To move to the current version of vSphere by performing a fresh installation that does not preserve
existing configurations, see the vSphere Installation and Setup documentation. To upgrade your vSphere
environment, see vSphere Upgrade. For information about Migration Assistant and answers to frequently
asked questions, see http://kb.vmware.com/kb/2146439.
Intended Audience
This information is intended for anyone who plans to migrate from earlier versions of vSphere. The
information is written for experienced Windows or Linux system administrators who are familiar with
virtual machine technology and data center operations.
VMware, Inc. 5
Updated Information
vSphere Migration is updated with each release of the product or when necessary.
Revision Description
EN-002232-01 n Added information about port 9123 in Required Ports for vCenter Server and Platform Services Controller.
n Updated the steps for preparing the Microsoft SQL Server database in Prepare a Microsoft SQL Server
Database for Migration.
n Updated steps in Prepare Managed ESXi Hosts for Migration.
VMware, Inc. 6
System Requirements for
Migrating vCenter Server
Deployments to vCenter Server
Appliance Deployments 1
Your source and target systems must meet specific software and hardware requirements before you can
migrate a vCenter Server or a vCenter Single Sign-On deployment to a vCenter Server Appliance or
Platform Services Controller appliance.
Source System
n Synchronize the clocks on all machines running the source vCenter Server services. See
Synchronizing Clocks on the vSphere Network.
n Verify that the system network name of the machines running the target vCenter Server services are
valid, and are reachable from other machines in the network.
n Verify that the host name of the virtual machine or physical server from which you are migrating
vCenter Server complies with RFC 1123 guidelines.
n If your vCenter Server service is running using a user account other than the Local System account,
verify that the user account in which the vCenter Server service is running has the following
permissions:
n Log on as a service
n Act as part of the operating system (if the user is a domain user)
n If your vCenter Server service is running using a service user account for access to the vCenter
Server database and you run Migration Assistant under a different account, the Migration Assistant
account must have the Replace a process level token permission.
n Verify that the LOCAL SERVICE account has read permission on the folder in which vCenter Server
is installed and on the HKLM registry.
n Verify that the connection between the virtual machine or physical server and the domain controller is
working.
n Verify that the source vCenter Server instance or vCenter Single Sign-On instance on Windows have
a default gateway. If there is no default gateway, the migration will fail.
VMware, Inc. 7
vSphere Migration
n Verify that the source vCenter Server instance or vCenter Single Sign-On instance on Windows does
not use a DHCP IP address as its system network name.
Important Migration from a source Windows machine using a DHCP IP Address as its system
network name to an appliance is not supported.
Target System
n Your target system must meet specific software and hardware requirements for vCenter Server
Appliance. See Chapter 2 vCenter Server Appliance Requirements.
n When you use Fully Qualified Domain Names, make sure that the machine you use for deploying the
vCenter Server Appliance and the target ESXi host or vCenter Server instance are on the same DNS
server.
n Synchronize the clocks of all target virtual machines on the vSphere network before beginning
migration. Unsynchronized clocks might result in authentication problems and can cause the
migration to fail or prevent the vCenter Server services from starting. See Synchronizing Clocks on
the vSphere Network.
VMware, Inc. 8
vCenter Server Appliance
Requirements 2
You can migrate the vCenter Server Appliance on an ESXi host 5.5 or later. Your system must also meet
specific software and hardware requirements.
When you use Fully Qualified Domain Names, make sure that the machine you use for deploying the
vCenter Server Appliance and the ESXi host are on the same DNS server.
Before you migrate the vCenter Server to vCenter Server Appliance, synchronize the clocks of all virtual
machines on the vSphere network. Unsynchronized clocks might result in authentication problems and
can cause the installation to fail or prevent the vCenter Server Appliance services from starting. See
Synchronizing Clocks on the vSphere Network.
The hardware requirements such as number of CPUs and memory depend on the size of your vSphere
inventory.
VMware, Inc. 9
vSphere Migration
Small Medium
Tiny Environment Environment Large
Environment (up to 100 (up to 400 Environment (up
(up to 10 Hosts, Hosts, 1,000 Hosts, 4,000 to 1,000 Hosts,
Platform Services 100 Virtual Virtual Virtual 10,000 Virtual
Resources Controller Machines) Machines) Machines) Machines)
Number of CPUs 2 2 4 8 16
Important For vCenter Server Appliance with an embedded Platform Services Controller, you must add
the hardware requirements for Platform Services Controller to the hardware requirements for vCenter
Server Appliance depending on the size of your environment.
The storage requirements depend on the deployment model that you select to deploy.
Table 2-2. vCenter Server Minimum Storage Requirements Depending On the Deployment
Model
External
Platform
Services
vCenter Server Appliance with an vCenter Server Appliance with an Controller
Embedded Platform Services Controller External Platform Services Controller Appliance
VMware, Inc. 10
vSphere Migration
External
Platform
Services
vCenter Server Appliance with an vCenter Server Appliance with an Controller
Embedded Platform Services Controller External Platform Services Controller Appliance
n PostgreSQL
You can migrate the vCenter Server Appliance only by using the Client Integration Plug-In, which is an
HTML installer for Windows that you can use to connect directly to an ESXi 5.0.x, ESXi 5.1.x, ESXi 5.5.x,
or ESXi 6.0 host and migrate the vCenter Server Appliance on the host.
Important You cannot migrate the vCenter Server Appliance by using the vSphere Client or the vSphere
Web Client. During the migration of the vCenter Server Appliance you must provide various inputs, such
as operating system and vCenter Single Sign-On passwords.
VMware, Inc. 11
vSphere Migration
Each vCenter Server Appliance instance must have its own database. When you migrate vCenter Server
to vCenter Server Appliance the database is migrated to an internal PostgreSQL database, which
supports up to 1,000 hosts and 10,000 virtual machines.
The vSphere Web Client 6.0 requires Adobe Flash Player 16 or later. The latest Adobe Flash Player
version for Linux systems is 11.2. Therefore, the vSphere Web Client cannot run on Linux platforms.
VMware has tested and supports the following guest operating systems and browser versions for the
vSphere Web Client. For best performance, use Google Chrome.
Table 2-3. Supported Guest Operating Systems and Minimum Browser Versions for the
vSphere Web Client
VMware uses designated ports for communication. Additionally, the managed hosts monitor designated
ports for data from vCenter Server. If a firewall exists between any of these elements, the installer opens
the ports during the installation or upgrade process. For custom firewalls, you must manually open the
required ports. If you have a firewall between two managed hosts and you want to perform source or
target activities, such as migration or cloning, you must configure a means for the managed hosts to
receive data.
Note In Microsoft Windows Server 2008 and later, firewall is enabled by default.
VMware, Inc. 12
vSphere Migration
If you configured a custom port when you installed the source vCenter Server instance, revert to default
port values before you proceed with the migration.
VMware, Inc. 13
vSphere Migration
389 TCP/UDP This port must be open on the local and Windows installations n vCenter Server to
all remote instances of vCenter Server. and appliance Platform Services
This is the LDAP port number for the deployments of Controller
Directory Services for the vCenter Server Platform Services n Platform Services
group. If another service is running on Controller Controller to
this port, it might be preferable to remove Platform Services
it or change its port to a different port. Controller
You can run the LDAP service on any
port from 1025 through 65535.
If this instance is serving as the Microsoft
Windows Active Directory, change the
port number from 389 to an available port
from 1025 through 65535.
443 TCP The default port that the vCenter Server Windows installations n vCenter Server to
system uses to listen for connections and appliance vCenter Server
from the vSphere Web Client. To enable deployments of n vCenter Server to
the vCenter Server system to receive n vCenter Server Platform Services
data from the vSphere Web Client, open Controller
n Platform Services
port 443 in the firewall. Controller n Platform Services
The vCenter Server system also uses Controller to vCenter
port 443 to monitor data transfer from Server
SDK clients.
This port is also used for the following
services:
n WS-Management (also requires port
80 to be open)
n Third-party network management
client connections to vCenter Server
n Third-party network management
clients access to hosts
636 TCP vCenter Single Sign-On LDAPS Windows installations vCenter Server to
and appliance Platform Services
deployments of Controller
Platform Services
Controller
VMware, Inc. 14
vSphere Migration
902 TCP/UDP The default port that the vCenter Server Windows installations No
system uses to send data to managed and appliance
hosts. Managed hosts also send a deployments of
regular heartbeat over UDP port 902 to vCenter Server
the vCenter Server system. This port
must not be blocked by firewalls between
the server and the hosts or between
hosts.
Port 902 must not be blocked between
the vSphere Client and the hosts. The
vSphere Client uses this port to display
virtual machine consoles
1514 TCP/UDP vSphere Syslog Collector TLS port for Windows installations No
vCenter Server on Windows and vSphere and appliance
Syslog Service TLS port for vCenter deployments of
Server Appliance n vCenter Server
2012 TCP Control interface RPC for vCenter Single Windows installations n vCenter Server to
Sign-On and appliance Platform Services
deployments of Controller
Platform Services n Platform Services
Controller Controller to vCenter
Server
n Platform Services
Controller to
Platform Services
Controller
2014 TCP RPC port for all VMCA (VMware Windows installations n vCenter Server to
Certificate Authority) APIs and appliance Platform Services
deployments of Controller
Important You can change this port
Platform Services n Platform Services
number during the Platform Services
Controller Controller to vCenter
Controller installations on Windows.
Server
VMware, Inc. 15
vSphere Migration
9123 TCP Migration Assistant port Windows installations Source vCenter Server
and appliance or vCenter Single Sign-
deployments of On to target vCenter
vCenter Server Server Appliance or
Platform Services
Controller
VMware, Inc. 16
vSphere Migration
Custom Ports
If you configured custom ports for Auto Deploy or vSphere ESXi Dump Collector, these custom ports are
migrated to the configuration of the target vCenter Server Appliance. For example, if you configured Auto
Deploy to use port 6545, the configuration is migrated to the target vCenter Server Appliance. Other
custom ports are not supported in the vCenter Server Appliance.
To configure the vCenter Server system to use a different port to receive vSphere Web Client data, see
the vCenter Server and Host Management documentation.
For more information about firewall configuration, see the vSphere Security documentation.
VMware, Inc. 17
Pre-migration Checks 3
When you migrate vCenter Server or vCenter Single Sign-On on Windows to an appliance, the installer
does a pre-check, for example, to verify that enough space is available on the source machine, and
verifies that the external database, if any, can be successfully accessed.
If your vCenter Server service is running in a service user account for access to the vCenter Server
database and you run Migration Assistant under a different account, the Migration Assistant account must
have the Replace a process level token permission.
The pre-migration checker performs checks for the following aspects of the source environment:
n Network connections
VMware, Inc. 18
vSphere Migration
n Network connections
VMware, Inc. 19
Known Limitations 4
The current release of Migration Assistant has several known limitations.
The following list contains features or actions that are currently not supported:
n vSphere Update Manager is not migrated. If you use Update Manager in your environment, there are
more steps you must perform to manually move Update Manager to a new destination machine. See
Moving Update Manager to a New Host Machine When Migrating vCenter Server to vCenter Server
Appliance.
n Local Windows OS users and groups are not migrated to the SLES OS of the vCenter Server
Appliance 6.0. If you assigned vCenter Server permissions to any Local Windows OS users and
groups, remove the permissions assignments before the migration. You can re-create Local OS users
and groups on the SLES OS of the vCenter Server Appliance 6.0 after the migration.
n The migration process migrates only one network adapter settings to the target vCenter Server
Appliance. If the hostname of the source vCenter Server resolves to multiple IP addresses across
multiple network adapters, you have the option to select which IP address and network adapter
settings to migrate. After the migration, you can add the rest of the network adapters and settings to
the target vCenter Server Appliance.
n Migration of deployments that use custom ports for services other than Auto Deploy, Update
Manager, and vSphere ESXi Dump Collector are not supported.
n After the migration, the source vCenter Server is turned off and cannot be turned on to avoid network
ID conflicts with the target vCenter Server Appliance. After the source vCenter Server is turned off, all
solutions that are not migrated become unavailable.
n You cannot use the source virtual machine display name as a display name for the target appliance.
You can change the display name after the migration is complete. For more information, see https://
kb.vmware.com/kb/1029513.
VMware, Inc. 20
Preparing for Migration 5
Before beginning to migrate any type of vCenter Server deployment to an appliance, you must complete
the preparation tasks.
Preparation tasks:.
n Copy and Run VMware Migration Assistant on the Source vCenter Server Instance
n Moving Update Manager to a New Host Machine When Migrating vCenter Server to vCenter Server
Appliance
n Required Information for Migrating vCenter Server and vCenter Single Sign-On from Windows to an
Appliance
You must move the Update Manager server and database in the following cases:
n Update Manager 5.5, vCenter Server and vCenter Single Sign-On 5.5 run on the same machine.
n Update Manager 5.5, and vCenter Single Sign-On 5.5 run on the same machine.
VMware, Inc. 21
vSphere Migration
If Update Manager 5.5 runs on a different machine than vCenter Server 5.5 and vCenter Single Sign-On
5.5, after vCenter Server successfully migrates to vCenter Server Appliance, upgrade Update Manager.
1 Move the Update Manager Server and Database to a New Host Machine.
2 Migrate vCenter Server 5.5 or vCenter Single Sign-On to an appliance. See Chapter 6 Migration of
vCenter Server with an Embedded vCenter Single Sign-On to an Appliance and Chapter 7 Migration
of vCenter Server with an External vCenter Single Sign-On to an Appliance
3 Upgrade Update Manager to the same version as the target vCenter Server Appliance, and connect
Update Manager to the target vCenter Server Appliance. For more information on how to upgrade
Update Manager, see the vSphere Update Manager documentation.
1 Migrate vCenter Server 5.5 or vCenter Single Sign-On 5.5 to an appliance. See Chapter 6 Migration
of vCenter Server with an Embedded vCenter Single Sign-On to an Appliance and Chapter 7
Migration of vCenter Server with an External vCenter Single Sign-On to an Appliance
2 Upgrade Update Manager to the same version as the target vCenter Server Appliance, and connect
Update Manager to the target vCenter Server Appliance. For more information on how to upgrade
Update Manager, see the vSphere Update Manager documentation.
Prerequisites
Create a virtual machine of have a physical server with a compatible version of Windows for installing
Update Manager. For more information, see Supported host operating systems for VMware vCenter
Server installation (including vCenter Update Manager and vRealize Orchestrator) (2091273).
Procedure
1 On the source machine, stop the VMware vSphere Update Manager Service.
2 On the source machine, stop the VMware vSphere Update Manager UFA Service.
VMware, Inc. 22
vSphere Migration
3 Depending on whether the Update Manager database is on the same machine as the Update
Manager server, or on a different machine, perform the following steps:
u If the Update Manager database and the Update Manager server run on the same source
machine:
b On the destination machine, copy the Update Manager database backup, and restore the
database.
u If the Update Manager database and the Update Manager server run on different machines,
move to the next step.
4 On the destination machine, create DSN to point to the Update Manager database.
For more information about how to create DSN, see Installing and Administering VMware vSphere
Update Manager.
5 On the source machine, in the Start Menu, either in the Run Box or the Search box, type regedit
and press Enter.
The Microsoft Registry Editor contains the configuration values for Update Manager that you need for
the move of the Update Manager server and database to a new host machine.
7 On the destination machine, start the installing of the Update Manager server of the same version as
the Update Manager server instance on the source machine.
n In the vCenter IP Address/Name text box, enter the VCServer registry value from the source
machine.
n In the HTTP Port text box, enter the VCServerPort registry value from the source machine.
n In the user name text box, enter the VCUserName registry value from the source machine.
b On the Database Options page, from the Data Source Name drop-down menu, select the DSN
you created in step 4.
c (Optional) On the Database Information page, enter user name and password for the database.
Note The database password is required only if the DSN does not use Windows authentication.
d On the Database re-initialization warning dialog box, select the option Do not overwrite, leave
my existing database in place.
VMware, Inc. 23
vSphere Migration
e On the VMware vSphere Update Manager Port Settings page, perform the following:
n From the drop-down menu, select the IP address or host name of your Update Manager
instance.
n In the SOAP Port text box, enter the SoapPort registry value from the source machine.
n In the Web Port text box, enter the WebPort registry value from the source machine.
n In the SSL Port text box, enter the WebSSLPort registry value from the source machine.
n Depending on your source proxy settings, you have one of the following options:
n If the source machine registry value UseProxy is 1, select the check box Yes, I have
Internet connection and I want to configure proxy settings now, and enter the
ProxyPassword, ProxyPort, ProxyServer, ProxyUserName registry values from the
source machine.
n If the source machine registry value UseProxy is 0, proceed to the next step.
f On the Destination Folder page, enter the InstallPath and PatchStore registry values from the
source machine if you want to use the same paths as on the source machine, or set different
paths for the destination machine.
9 (Required) If you used a custom SslVerifyDownloadCertificate registry value on your Update Manager
source machine, make the same customization on the destination machine.
10 If you modified the jetty-vum-ssl.xml or vci-integrity.xml files on the source machine, make
the same modification on these files on the destination machine.
11 If you used custom certificates on the source machine, move them to the destination machine.
You can use VMware vSphere Update Manager Utility to set your new certificates. For more
information about how to use VMware vSphere Update Manager Utility, see Reconfiguring VMware
vSphere Update Manager documentation.
For more information about uninstalling the Update Manager server, see Installing and Administering
VMware vSphere Update Manager documentation.
You have installed an exact replica of your Update Manager environment on the new destination
machine.
What to do next
Start the migration process for vCenter Server to vCenter Server Appliance.
VMware, Inc. 24
vSphere Migration
Unsynchronized clocks can result in authentication problems, which can cause the installation to fail or
prevent the vCenter Server Appliance vpxd service from starting.
Verify that any Windows host machine on which vCenter Server runs is synchronized with the Network
Time Server (NTP) server. See the Knowledge Base article http://kb.vmware.com/kb/1318.
To synchronize ESXi clocks with an NTP server, you can use the Host Client. For information about
editing the time configuration of an ESXi host, see vSphere Single Host Management.
This task explains how to set up NTP from the vSphere Client. You can instead use the vicfg-ntp vCLI
command. See the vSphere Command-Line Interface Reference.
Procedure
5 Click Add.
6 In the Add NTP Server dialog box, enter the IP address or fully qualified domain name of the NTP
server to synchronize with.
7 Click OK.
VMware, Inc. 25
vSphere Migration
n Your rui.crt file contains the entire chain including the leaf certificate. You can create this type of
certificate by deploying and using the VMware SSL Certificate Automation Tool, seehttp://
kb.vmware.com/kb/2057340.
n Your rui.crt file contains the leaf certificate and the corresponding cacert.pem is available to
validate the rui.crt.
n Your rui.crt contains only the leaf certificate, the cacert.pem is missing or invalid, and
cacert.pem is not added to the Windows trust store.
Get the Certificate Authority certificate, including all intermediate certificates, and create a
cacert.pem file, or replace the vCenter Server certificates with any of the supported formats.
n Your rui.crt contains only the leaf certificate and the cacert.pem is missing or invalid, but the
cacert.pem is added to the Windows trust store.
Get the Certificate Authority certificate, including all intermediate certificates from the Windows trust
store and create cacert.pem. Use OpenSSL to verify the certificate by running verify -CAfile
cacert.pem ru.crt command
For more information about vSphere security certificates, see the vSphere Security documentation.
Each vCenter Server Appliance instance must have its own database. The bundled PostgreSQL
database that is included in the vCenter Server Appliance supports up to 1,000 hosts and 10,000 virtual
machines.
Important If you are using an external database for vCenter Server Appliance, it is converted to an
embedded PostgreSQL database during the migration.
n Verify that passwords are current and not set to expire soon.
n For vCenter Server 5.5, run the cleanup scripts to remove any unnecessary data in the vCenter
Server database using the steps for your database. For details see:
VMware, Inc. 26
vSphere Migration
n Verify that you have backed up your database. See your database documentation.
n Verify that vCenter Server can communicate with the local database.
During the migration of vCenter Server to vCenter Server Appliance, the installer:
4 Upgrades the database schema to be compatible with the target vCenter Server Appliance.
When you configure the target vCenter Server Appliance, you initialize and configure using the imported
database with the old schema. You have a choice of migration options:
1 Core data
Prerequisites
Verify that you have confirmed basic interoperability before preparing your Oracle database for migration.
Verify that you have backed up your database. For information about backing up the vCenter Server
database, see the Oracle documentation.
Procedure
1 Verify that passwords are current and not set to expire soon.
2 Ensure that you have login credentials, the database name, and the database server name that the
vCenter Server database is to use.
Look in the ODBC system for the connection name of the database source name for the vCenter
Server database.
3 Use the Oracle SERVICE_NAME instead of SID to verify that your Oracle database instance is
available.
n Log in to the database server to read from the alert log: $ORACLE_BASE/diag/rdbms/
$instance_name/$INSTANCE_NAME/trace/alert_$ INSTANCE_NAME.log.
n Log in to the database server to read from the Oracle Listener status output.
VMware, Inc. 27
vSphere Migration
n If you have the SQL*Plus client installed, you can use tnsping for the vCenter Database
instance. If the tnsping command does not work the first time, retry it after waiting a few
minutes. If retrying does not work, restart the vCenter Database instance on the Oracle server
and then retry tnsping to ensure it is available.
4 Verify that the JDBC driver file is included in the CLASSPATH variable.
6 Either assign the DBA role or grant the required permissions to the user.
a Locate the cleanup_orphaned_data_Oracle.sql script in the ISO image and copy it to the Oracle
server.
@pathcleanup_orphaned_data_Oracle.sql
The cleanup process purges unnecessary and orphaned data that is not used by any vCenter Server
component.
Your database is prepared for the vCenter Server migration to vCenter Server Appliance.
Important You cannot use Integrate Windows for your authentication method if the vCenter Server
service is running under the Microsoft Windows built-in system account.
Prerequisites
Verify that you have backed up your database. For information about backing up the vCenter Server
database, see the Microsoft SQL Server documentation.
Procedure
1 Verify that passwords are current and not set to expire soon.
2 Verify that JDK 1.6 or later is installed on the vCenter Server machine.
3 Verify that the sqljdbc4.jar file is added to the CLASSPATH variable on the machine where
vCenter Server Appliance is to be migrated.
If the sqljdbc4.jar file is not installed on your system, the vCenter Server Appliance installer
installs it.
VMware, Inc. 28
vSphere Migration
4 Verify that your system database source name is using the Microsoft SQL Server Native Client 10 or
11 driver.
n For Microsoft SQL Server, log in to a Microsoft SQL Server Management Studio session as
the vCenter Server database user.
The cleanup script cleans any unnecessary data in your vCenter Server database.
Your database is prepared for the vCenter Server migration to vCenter Server Appliance.
Prerequisites
To migrate vCenter Server or vCenter Single Sign-On from Windows to an appliance, your source and
target ESXi hosts must meet the migration requirements.
n ESXi hosts must be at version 5.5 or greater. If your ESXi hosts are at an earlier version than 5.5,
upgrade them to 5.5. Read and follow all best practices when upgrading your hosts to ESXi 5.5.
Procedure
1 If you have Custom or Thumbprint certificates, see Host Upgrades and Certificates to determine your
preparatory steps.
VMware, Inc. 29
vSphere Migration
If certificate checking is not enabled when you upgrade, vSphere HA fails to configure on the hosts.
a Select the vCenter Server instance in the inventory panel.
c Verify that the SSL settings field is set to vCenter Server requires verified host SSL
certificates.
If you decide not to upgrade your hosts to ESXi 6.0 or later, the hosts retain the certificates that they are
currently using even if the host is managed by a vCenter Server system that uses VMCA certificates.
Host Provisioned with If your host is currently using thumbprint certificates, it is automatically
Thumbprint Certificates assigned VMCA certificates as part of the upgrade process.
Note You cannot provision legacy hosts with VMCA certificates. You must
upgrade those hosts to ESXi 6.0 later.
Host Provisioned with If your host is provisioned with custom certificates, usually third-party CA-
Custom Certificates signed certificates, those certificates remain in place during upgrade.
Change the certificate mode to Custom to ensure that the certificates are
not replaced accidentally during a certificate refresh later.
Hosts Provisioned with Hosts that are being provisioned by Auto Deploy are always assigned new
Auto Deploy certificates when they are first booted with ESXi 6.0 or later software. When
you upgrade a host that is provisioned by Auto Deploy, the Auto Deploy
server generates a certificate signing request (CSR) for the host and
submits it to VMCA. VMCA stores the signed certificate for the host. When
the Auto Deploy server provisions the host, it retrieves the certificate from
VMCA and includes it as part of the provisioning process.
VMware, Inc. 30
vSphere Migration
You can use the vCenter Server advanced settings to change to thumbprint mode or to custom CA mode.
Use thumbprint mode only as a fallback option.
Procedure
1 Select the vCenter Server that manages the hosts and click Configure.
3 In the Filter box, enter certmgmt to display only certificate management keys.
4 Change the value of vpxd.certmgmt.mode to custom if you intend to manage your own certificates,
and to thumbprint if you temporarily want to use thumbprint mode, and click OK.
Prerequisites
Procedure
1 In the vCenter Server Appliance installer, navigate to the vcsa directory and double-click VMware-
ClientIntegrationPlugin-6.0.0.exe.
3 Read and accept the terms in the End-User License Agreement and click Next.
4 (Optional) Change the default path to the Client Integration Plug-in installation folder, and click Next.
5 On the Ready to Install the Plug-in page of the wizard, review the information and click Install.
VMware, Inc. 31
vSphere Migration
You can use this worksheet to record the information that you need for migrating a vCenter Server
instance with an embedded vCenter Single Sign-On, vCenter Server instance with an external vCenter
Single Sign-On, or an external vCenter Single Sign-On from Windows to an appliance.
Important The user name that you use to log in to the machine from which you want run the GUI
installer, the path to the vCenter Server Appliance installer, and your values including the passwords,
must contain only ASCII characters. Extended ASCII and non-ASCII characters are unsupported.
Local OS users existing on source Windows machine are not migrated to the target vCenter Server
Appliance and must be recreated after migration is complete. If any local OS user names are used to log
in to the vCenter Single Sign-On, you must recreate them and reassign permissions in the Platform
Services Controller appliance.
If the source vCenter Server machine is joined to an Active Directory domain, the account you use must
have permissions to rejoin the machine to the domain. For more information, see http://
kb.vmware.com/kb/2146454
VMware, Inc. 32
vSphere Migration
Table 5-1. Information Required for Migrating vCenter Server from Windows to vCenter
Server Appliance
VMware, Inc. 33
vSphere Migration
VMware, Inc. 34
vSphere Migration
Important The
IP address or port
group of the temporary
network must be on the
same subnet as the
source vCenter Server
or vCenter Single Sign-
on. Verify that the
default gateway, IP
address, and subnet
mask match with the
port group that you
select. The port group
that you select should
be able to acquire the
source vCenter Server
or vCenter Single Sign-
on IP address.
Network gateway
VMware, Inc. 35
Migration of vCenter Server with
an Embedded vCenter Single
Sign-On to an Appliance 6
You can migrate a vCenter Server instance with an embedded vCenter Single Sign-On to a vCenter
Server Appliance with an embedded Platform Services Controller appliance.
When you migrate from vCenter Server with an embedded vCenter Single Sign-On (version 5.5) on
Windows to vCenter Server Appliance with an embedded Platform Services Controller appliance, the
entire installation is migrated at the same time.
If vCenter Inventory Service, vSphere Web Client, vSphere Auto Deploy, or vSphere ESXi Dump
Collector are installed on a different machine than the source vCenter Server with an embedded vCenter
Single Sign-On, these components are migrated to the target vCenter Server Appliance.
Figure 6-1. vCenter Server 5.5 with Embedded vCenter Single Sign-On Before and After
Migration
Windows OS Appliance
Important The user name that you use to log in to the machine from which you want run the GUI
installer, the path to the vCenter Server Appliance installer, and your values including the passwords,
must contain only ASCII characters. Extended ASCII and non-ASCII characters are unsupported.
VMware, Inc. 36
vSphere Migration
The installer:
n Runs the migration process on the new vCenter Server Appliance as specified in the Summary.
n Imports and updates the files and settings of the source vCenter Server installation to the new
vCenter Server Appliance.
Prerequisites
Assemble the Required Information for Migrating vCenter Server and vCenter Single Sign-On from
Windows to an Appliance.
Procedure
2 Copy and Run VMware Migration Assistant on the Source vCenter Server Instance
You must Copy and run the VMware Migration Assistant on your source vCenter Server or vCenter
Single Sign-On to prepare it for migration from Windows to an appliance.
Prerequisites
Procedure
1 Download the vCenter Server Appliance installer from the VMware Web site at https://
my.vmware.com/web/vmware/downloads.
See the VMware Web site topic Using MD5 Checksums at http://www.vmware.com/download/
md5.html.
VMware, Inc. 37
vSphere Migration
3 Mount the ISO image to a Windows virtual machine or physical server different from the source
vCenter Server or vCenter Single Sign-On. Mount the ISO image to the Windows virtual machine or
physical server on which you want to install the Client Integration Plug-In to migrate to the vCenter
Server Appliance.
If you are using a Windows virtual machine, you can configure the ISO image as a datastore ISO file
for the CD/DVD drive of the virtual machine by using the vSphere Web Client. See vSphere Virtual
Machine Administration.
You run the VMware Migration Assistant on your source vCenter Server or vCenter Single Sign-On to:
Important Ensure that the Migration Assistant window remains open during the migration process.
Closing the Migration Assistant causes the migration process to stop.
Prerequisites
n If your vCenter Server service is running in a service user account for access to the vCenter Server
database and you run Migration Assistant under a different account, the Migration Assistant account
must have the Replace a process level token permission.
Procedure
1 Navigate to the migration-assistant directory of the vCenter Server Appliance installer package
and copy the migration-assistant folder to the source vCenter Server or vCenter Single Sign-On
instance.
n Double-click VMware-Migration-Assistant.exe
The VMware Migration Assistant runs pre-migration checks and prompts you to resolve any errors it
finds before proceeding with the migration.
VMware, Inc. 38
vSphere Migration
3 Enter the user name and password of a user who has administrative privileges on the vCenter Server
instance, for example, the administrator@vsphere.local user
When the pre-checks are finished and any errors are addressed, your source system is ready for
migration.
What to do next
Remember Leave the Migration Assistant window open until you complete the migration.
Prerequisites
n If you plan to deploy the target vCenter Server Appliance on an ESXi host, verify that the ESXi host is
not in lockdown or maintenance mode
n If you plan to deploy the target vCenter Server Appliance on a DRS cluster of a vCenter Server
inventory, verify that the cluster contains at least one ESXi host that is not in lockdown or
maintenance mode.
n If you plan to assign a static IP address in the temporary network settings of the appliance, verify that
you have configured the forward and reverse DNS records for the IP address.
n If you plan to assign a DHCP IP address in the temporary network settings of the new appliance,
verify that the ESXi host on which you want to deploy the new appliance is in the same network as
the ESXi host on which the existing vCenter Server runs.
n If you plan to assign a DHCP IPv4 address in the temporary network settings of the new appliance,
verify that the ESXi host on which you want to deploy the new appliance is connected to at least one
network that is associated with a port group which accepts MAC address changes. Consider the
default security policy of a distributed virtual switch, which is to reject MAC address changes. For
information about how to configure the security policy for a switch or port group, see vSphere
Networking.
Procedure
2 Wait up to three seconds for the browser to detect the Client Integration Plug-in and allow the plug-in
to run on the browser when prompted.
VMware, Inc. 39
vSphere Migration
4 Review the Introduction page to understand the migration process and click Next.
6 Connect to the target server on which you want to deploy the vCenter Server Appliance.
Option Steps
You can connect to an ESXi host 1 Enter the FQDN or IP address of the ESXi host.
on which to deploy the 2 Enter the HTTPS port of the ESXi host.
appliance. 3 Enter the user name and password of a user with administrative privileges on the ESXi
host, for example, the root user.
4 Click Next.
5 Verify that the certificate warning displays the SHA1 thumbprint of the SSL certificate
that is installed on the target ESXi host, and click Yes to accept the certificate
thumbprint.
You can connect to a vCenter 1 Enter the FQDN or IP address of the vCenter Server instance.
Server instance and browse the 2 Enter the HTTPS port of the vCenter Server instance.
inventory to select an ESXi host 3 Enter the user name and password of user with vCenter Single Sign-On administrative
or DRS cluster on which to privileges on the vCenter Server instance, for example, the
deploy the appliance. If you administrator@vsphere.local user.
select a DRS cluster, verify that
4 Click Next.
the cluster is not set to Fully
5 Verify that the certificate warning displays the SHA1 thumbprint of the SSL certificate
Automated DRS for the duration
that is installed on the target vCenter Server instance, and click Yes to accept the
of the deployment.
certificate thumbprint.
6 Select the data center or data center folder that contains the ESXi host or DRS cluster
on which you want to deploy the appliance, and click Next
Note You must select a data center or data center folder that contains at least one
ESXi host that is not in lockdown or maintenance mode.
7 Select the ESXi host or DRS cluster on which you want to deploy the appliance, and
click Next
8 On the Set up virtual machine page, enter a name for the new vCenter Server Appliance, set the
password for the root user, and click Next.
The password must contain at least eight characters, a number, uppercase and lowercase letters,
and a special character, for example, an exclamation mark (!), hash key (#), at sign (@), or brackets
(()).
Note The root password of the old appliance is not transferred to the new upgraded appliance.
9 (Optional) Select the Enable SSH check box to enable SSH connection to the vCenter Server
Appliance.
10 On the Connect to source page, enter the details for the source vCenter Server instance, and click
Next.
b Enter the user name and password of a user who has administrative privileges on the vCenter
Server instance, for example, the administrator@vsphere.local user.
VMware, Inc. 40
vSphere Migration
c Enter the Migration Assistant Port you received in the Migration Assistant instructions.
d (Optional) Select Performance and other historical data if you want to migrate this data.
By default only the core inventory and configuration data is migrated. Select the check box to
migrate all vCenter Server performance and historical data such as stats, events, alarms, and
tasks. Not migrating this data reduces the amount of overall downtime.
12 If the source vCenter Server is a member of an Active Directory domain, provide the credentials to
join the target vCenter Server Appliance to the domain.
13 On the Select appliance size page of the wizard, select the vCenter Server Appliance size for the
vSphere inventory size and click Next.
Option Description
Tiny (up to 10 hosts, 100 VMs) Deploys an appliance with 2 CPUs, 8 GB of memory, and 120 GB of disk space.
Small (up to 100 hosts, 1,000 VMs) Deploys an appliance with 4 CPUs, 16 GB of memory, and 150 GB of disk space.
Medium (up to 400 hosts, 4,000 VMs) Deploys an appliance with 8 CPUs, 24 GB of memory, and 300 GB of disk space.
Large (up to 1,000 hosts, 10,000 VMs) Deploys an appliance with 16 CPUs, 32 GB of memory, and 450 GB of disk space.
Tiny (up to 10 hosts, 100 VMs, large Deploys an appliance with 2 CPUs, 8 GB of memory, and 700 GB of disk space.
storage)
Small (up to 100 hosts, 1,000 VMs, Deploys an appliance with 4 CPUs, 16 GB of memory, and 700 GB of disk space.
large storage)
Medium (up to 400 hosts, 4,000 VMs, Deploys an appliance with 8 CPUs, 24 GB of memory, and 800 GB of disk space.
large storage)
Large (up to 1,000 hosts, 10,000 VMs) Deploys an appliance with 16 CPUs, 32 GB of memory, and 900 GB of disk space.
14 From the list of available datastores, select the location where all the virtual machine configuration
files and virtual disks will be stored and, optionally, enable thin provisioning by selecting Enable Thin
Disk Mode.
The IP address or the FQDN of the appliance is used as a system name. It is recommended to use
an FQDN. However, if you want to use an IP address, use static IP address allocation for the
appliance, because IP addresses allocated by DHCP might change.
VMware, Inc. 41
vSphere Migration
Option Action
Choose a Select the network to which to connect the new appliance temporarily.
network Verify that the temporary network provides connectivity between the source vCenter Server and the target
vCenter Server Appliance.
The networks displayed in the drop-down menu depend on the network settings of the target server. If you are
deploying the appliance directly on an ESXi host, non-ephemeral distributed virtual port groups are not
supported and are not displayed in the drop-down menu.
Important If you want to assign a temporary IPv4 address with DHCP allocation, you must select a network
that is associated with a port group which accepts MAC address changes.
A DHCP server is used to allocate the IP address. Select this option only if a DHCP server is available in
your environment.
If you use an IP address as a system name, you cannot change the IP address and update the DNS
settings after deployment.
16 Review the VMware Customer Experience Improvement Program (CEIP) page and choose if you
want to join the program.
For information about the CEIP, see the Configuring Customer Experience Improvement Program
section in vCenter Server and Host Management.
17 On the Ready to complete page, review the settings for the vCenter Server Appliance migration and
click Finish to complete the process.
The source vCenter Server is migrated from Windows to an appliance. The source vCenter Server is
powered off and the new appliance starts.
The source vCenter Single Sign-On is migrated from Windows to an appliance. The old vCenter Single
Sign-On on Windows is powered off and the new appliance starts.
What to do next
Verify that your migration to an appliance was successful. For verification steps, see Verify Your vCenter
Server Appliance Migration Is Successful.
VMware, Inc. 42
Migration of vCenter Server with
an External vCenter Single Sign-
On to an Appliance 7
You can migrate a vCenter Server with an external vCenter Single Sign-On to an appliance.
When you migrate from vCenter Server with an external vCenter Single Sign-On (version 5.5) on
Windows to vCenter Server Appliance with an external Platform Services Controller appliance, you
migrate in two steps.
1 First you migrate the vCenter Single Sign-On instance from Windows to an appliance.
2 Next you migrate the vCenter Server instance from Windows to an appliance.
Important Concurrent migrations of vCenter Single Sign-On instances are not supported. You must
migrate the instances in a sequence. If you have multiple vCenter Single Sign-On nodes, first you must
migrate all vCenter Single Sign-On nodes to Platform Services Controller appliances before you start the
migration of vCenter Server to vCenter Server Appliance.
If vCenter Inventory Service, vSphere Web Client, vSphere Auto Deploy, or vSphere ESXi Dump
Collector are installed on a different machine than the source vCenter Server with an embedded vCenter
Single Sign-On, these components are migrated to the target vCenter Server Appliance.
VMware, Inc. 43
vSphere Migration
Figure 7-1. vCenter Server 5.5 with External vCenter Single Sign-On Before and After
Migration
Windows OS Appliance
Windows OS Appliance
Important The user name that you use to log in to the machine from which you want run the GUI
installer, the path to the vCenter Server Appliance installer, and your values including the passwords,
must contain only ASCII characters. Extended ASCII and non-ASCII characters are unsupported.
n Exports the required files from the source vCenter Single Sign-On instance.
n Runs the migration process on the target appliance as specified in the Summary.
n Imports and updates the files and settings of the source vCenter Single Sign-On instance to the new
appliance.
Prerequisites
Assemble the Required Information for Migrating vCenter Server and vCenter Single Sign-On from
Windows to an Appliance.
Procedure
VMware, Inc. 44
vSphere Migration
2 Copy and Run VMware Migration Assistant on the Source vCenter Server Instance
You must Copy and run the VMware Migration Assistant on your source vCenter Server or vCenter
Single Sign-On to prepare it for migration from Windows to an appliance.
3 Migrate an External vCenter Single Sign-On instance to a Platform Services Controller appliance
You can use the Client Integration Plug-In to migrate an external vCenter Single Sign-On instance to
a Platform Services Controller appliance.
Prerequisites
Procedure
1 Download the vCenter Server Appliance installer from the VMware Web site at https://
my.vmware.com/web/vmware/downloads.
See the VMware Web site topic Using MD5 Checksums at http://www.vmware.com/download/
md5.html.
3 Mount the ISO image to a Windows virtual machine or physical server different from the source
vCenter Server or vCenter Single Sign-On. Mount the ISO image to the Windows virtual machine or
physical server on which you want to install the Client Integration Plug-In to migrate to the vCenter
Server Appliance.
If you are using a Windows virtual machine, you can configure the ISO image as a datastore ISO file
for the CD/DVD drive of the virtual machine by using the vSphere Web Client. See vSphere Virtual
Machine Administration.
You run the VMware Migration Assistant on your source vCenter Server or vCenter Single Sign-On to:
VMware, Inc. 45
vSphere Migration
Important Ensure that the Migration Assistant window remains open during the migration process.
Closing the Migration Assistant causes the migration process to stop.
Prerequisites
n If your vCenter Server service is running in a service user account for access to the vCenter Server
database and you run Migration Assistant under a different account, the Migration Assistant account
must have the Replace a process level token permission.
Procedure
1 Navigate to the migration-assistant directory of the vCenter Server Appliance installer package
and copy the migration-assistant folder to the source vCenter Server or vCenter Single Sign-On
instance.
n Double-click VMware-Migration-Assistant.exe
The VMware Migration Assistant runs pre-migration checks and prompts you to resolve any errors it
finds before proceeding with the migration.
3 Enter the user name and password of a user who has administrative privileges on the vCenter Server
instance, for example, the administrator@vsphere.local user
When the pre-checks are finished and any errors are addressed, your source system is ready for
migration.
What to do next
Remember Leave the Migration Assistant window open until you complete the migration.
VMware, Inc. 46
vSphere Migration
Prerequisites
n If you plan to deploy the new Platform Services Controller on an ESXi host, verify that the ESXi host
is not in lockdown or maintenance mode
n If you plan to deploy the Platform Services Controller on a DRS cluster of a vCenter Server inventory,
verify that the cluster contains at least one ESXi host that is not in lockdown or maintenance mode.
n If you plan to assign a static IP address in the temporary network settings of the appliance, verify that
you have configured the forward and reverse DNS records for the IP address.
n If you plan to assign a DHCP IP address in the temporary network settings of the new appliance,
verify that the ESXi host on which you want to deploy the new appliance is in the same network as
the ESXi host on which the existing vCenter Server runs.
n If you plan to assign a DHCP IPv4 address in the temporary network settings of the new appliance,
verify that the ESXi host on which you want to deploy the new appliance is connected to at least one
network that is associated with a port group which accepts MAC address changes. Consider the
default security policy of a distributed virtual switch, which is to reject MAC address changes. For
information about how to configure the security policy for a switch or port group, see vSphere
Networking.
Procedure
2 Wait up to three seconds for the browser to detect the Client Integration Plug-in and allow the plug-in
to run on the browser when prompted.
4 Review the Introduction page to understand the migration process and click Next.
VMware, Inc. 47
vSphere Migration
6 Connect to the target server on which you want to deploy the Platform Services Controller.
Option Steps
You can connect to an 1 Enter the FQDN or IP address of the ESXi host.
ESXi host on which to 2 Enter the HTTPS port of the ESXi host.
deploy the appliance. 3 Enter the user name and password of a user with administrative privileges on the ESXi host,
for example, the root user.
4 Click Next.
5 Verify that the certificate warning displays the SHA1 thumbprint of the SSL certificate that is
installed on the target ESXi host, and click Yes to accept the certificate thumbprint.
You can connect to a 1 Enter the FQDN or IP address of the vCenter Server instance.
vCenter Server instance 2 Enter the HTTPS port of the vCenter Server instance.
and browse the inventory 3 Enter the user name and password of user with vCenter Single Sign-On administrative
to select an ESXi host or privileges on the vCenter Server instance, for example, the administrator@vsphere.local user.
DRS cluster on which to
4 Click Next.
deploy the appliance.
5 Verify that the certificate warning displays the SHA1 thumbprint of the SSL certificate that is
installed on the target vCenter Server instance, and click Yes to accept the certificate
thumbprint.
6 Select the data center or data center folder that contains the ESXi host or DRS cluster on
which you want to deploy the appliance, and click Next
Note You must select a data center or data center folder that contains at least one ESXi host
that is not in lockdown or maintenance mode.
7 Select the ESXi host or DRS cluster on which you want to deploy the appliance, and click
Next
8 On the Set up virtual machine page, enter the Platform Services Controller name, set the password
for the root user, and click Next.
The password must contain at least eight characters, a number, uppercase and lowercase letters,
and a special character, for example, an exclamation mark (!), hash key (#), at sign (@), or brackets
(()).
9 (Optional) Select the Enable SSH check box to enable SSH connection to the vCenter Server
Appliance.
10 On the Connect to source page, enter the details for the source vCenter Single Sign-On instance, and
click Next.
b Enter the user name and password of a user who has administrative privileges on the vCenter
Single Sign-On instance, for example, the administrator@vsphere.local user.
c Enter the Migration Assistant Port you received in the Migration Assistant instructions.
12 If the source vCenter Single Sign-On is a member of an Active Directory domain, provide the
credentials to join the target Platform Services Controller to the domain.
VMware, Inc. 48
vSphere Migration
The target Platform Services Controller appliance is deployed with 2 CPUs, 2 GB of memory and 30
GB of disk space.
14 From the list of available datastores, select the location where all the virtual machine configuration
files and virtual disks will be stored and, optionally, enable thin provisioning by selecting Enable Thin
Disk Mode.
The IP address or the FQDN of the appliance is used as a system name. It is recommended to use
an FQDN. However, if you want to use an IP address, use static IP address allocation for the
appliance, because IP addresses allocated by DHCP might change.
Option Action
Choose a Select the network to which to connect the new appliance temporarily.
network Verify that the temporary network provides connectivity between the source vCenter Server and the target
vCenter Server Appliance.
The networks displayed in the drop-down menu depend on the network settings of the target server. If you are
deploying the appliance directly on an ESXi host, non-ephemeral distributed virtual port groups are not
supported and are not displayed in the drop-down menu.
Important If you want to assign a temporary IPv4 address with DHCP allocation, you must select a network
that is associated with a port group which accepts MAC address changes.
A DHCP server is used to allocate the IP address. Select this option only if a DHCP server is available in
your environment.
If you use an IP address as a system name, you cannot change the IP address and update the DNS
settings after deployment.
16 Review the VMware Customer Experience Improvement Program (CEIP) page and choose if you
want to join the program.
For information about the CEIP, see the Configuring Customer Experience Improvement Program
section in vCenter Server and Host Management.
17 On the Ready to complete page, review the settings for the vCenter Single Sign-On migration and
click Finish to complete the process.
The source vCenter Single Sign-On is migrated from Windows to an appliance. The old vCenter Single
Sign-On on Windows is powered off and the new appliance starts.
What to do next
Verify that your migration to an appliance was successful. For verification steps, see Verify Your vCenter
Server Appliance Migration Is Successful.
VMware, Inc. 49
vSphere Migration
For the new Platform Services Controller appliance to replicate infrastructure data with other Platform
Services Controller instances, you must migrate or upgrade all joined vCenter Single Sign-On instances
within the vCenter Single Sign-On domain to the same version.
After you migrate all joined vCenter Single Sign-On instances, you can migrate the vCenter Server
instances within the vCenter Single Sign-On domain. For information on migrating vCenter Server
instances to appliances, see
Prerequisites
n If you plan to deploy the target vCenter Server Appliance on an ESXi host, verify that the ESXi host is
not in lockdown or maintenance mode
n If you plan to deploy the target vCenter Server Appliance on a DRS cluster of a vCenter Server
inventory, verify that the cluster contains at least one ESXi host that is not in lockdown or
maintenance mode.
n If you plan to assign a static IP address in the temporary network settings of the appliance, verify that
you have configured the forward and reverse DNS records for the IP address.
n If you plan to assign a DHCP IP address in the temporary network settings of the new appliance,
verify that the ESXi host on which you want to deploy the new appliance is in the same network as
the ESXi host on which the existing vCenter Server runs.
n If you plan to assign a DHCP IPv4 address in the temporary network settings of the new appliance,
verify that the ESXi host on which you want to deploy the new appliance is connected to at least one
network that is associated with a port group which accepts MAC address changes. Consider the
default security policy of a distributed virtual switch, which is to reject MAC address changes. For
information about how to configure the security policy for a switch or port group, see vSphere
Networking.
Procedure
2 Wait up to three seconds for the browser to detect the Client Integration Plug-in and allow the plug-in
to run on the browser when prompted.
4 Review the Introduction page to understand the migration process and click Next.
VMware, Inc. 50
vSphere Migration
6 Connect to the target server on which you want to deploy the vCenter Server Appliance.
Option Steps
You can connect to an ESXi host 1 Enter the FQDN or IP address of the ESXi host.
on which to deploy the 2 Enter the HTTPS port of the ESXi host.
appliance. 3 Enter the user name and password of a user with administrative privileges on the ESXi
host, for example, the root user.
4 Click Next.
5 Verify that the certificate warning displays the SHA1 thumbprint of the SSL certificate
that is installed on the target ESXi host, and click Yes to accept the certificate
thumbprint.
You can connect to a vCenter 1 Enter the FQDN or IP address of the vCenter Server instance.
Server instance and browse the 2 Enter the HTTPS port of the vCenter Server instance.
inventory to select an ESXi host 3 Enter the user name and password of user with vCenter Single Sign-On administrative
or DRS cluster on which to privileges on the vCenter Server instance, for example, the
deploy the appliance. If you administrator@vsphere.local user.
select a DRS cluster, verify that
4 Click Next.
the cluster is not set to Fully
5 Verify that the certificate warning displays the SHA1 thumbprint of the SSL certificate
Automated DRS for the duration
that is installed on the target vCenter Server instance, and click Yes to accept the
of the deployment.
certificate thumbprint.
6 Select the data center or data center folder that contains the ESXi host or DRS cluster
on which you want to deploy the appliance, and click Next
Note You must select a data center or data center folder that contains at least one
ESXi host that is not in lockdown or maintenance mode.
7 Select the ESXi host or DRS cluster on which you want to deploy the appliance, and
click Next
8 On the Set up virtual machine page, enter a name for the new vCenter Server Appliance, set the
password for the root user, and click Next.
The password must contain at least eight characters, a number, uppercase and lowercase letters,
and a special character, for example, an exclamation mark (!), hash key (#), at sign (@), or brackets
(()).
Note The root password of the old appliance is not transferred to the new upgraded appliance.
9 (Optional) Select the Enable SSH check box to enable SSH connection to the vCenter Server
Appliance.
10 On the Connect to source page, enter the details for the source vCenter Server instance, and click
Next.
b Enter the user name and password of a user who has administrative privileges on the vCenter
Server instance, for example, the administrator@vsphere.local user.
VMware, Inc. 51
vSphere Migration
c Enter the Migration Assistant Port you received in the Migration Assistant instructions.
d (Optional) Select Performance and other historical data if you want to migrate this data.
By default only the core inventory and configuration data is migrated. Select the check box to
migrate all vCenter Server performance and historical data such as stats, events, alarms, and
tasks. Not migrating this data reduces the amount of overall downtime.
12 If the source vCenter Server is a member of an Active Directory domain, provide the credentials to
join the target vCenter Server Appliance to the domain.
13 On the Select appliance size page of the wizard, select the vCenter Server Appliance size for the
vSphere inventory size and click Next.
Option Description
Tiny (up to 10 hosts, 100 VMs) Deploys an appliance with 2 CPUs, 8 GB of memory, and 120 GB of disk space.
Small (up to 100 hosts, 1,000 VMs) Deploys an appliance with 4 CPUs, 16 GB of memory, and 150 GB of disk space.
Medium (up to 400 hosts, 4,000 VMs) Deploys an appliance with 8 CPUs, 24 GB of memory, and 300 GB of disk space.
Large (up to 1,000 hosts, 10,000 VMs) Deploys an appliance with 16 CPUs, 32 GB of memory, and 450 GB of disk space.
Tiny (up to 10 hosts, 100 VMs, large Deploys an appliance with 2 CPUs, 8 GB of memory, and 700 GB of disk space.
storage)
Small (up to 100 hosts, 1,000 VMs, Deploys an appliance with 4 CPUs, 16 GB of memory, and 700 GB of disk space.
large storage)
Medium (up to 400 hosts, 4,000 VMs, Deploys an appliance with 8 CPUs, 24 GB of memory, and 800 GB of disk space.
large storage)
Large (up to 1,000 hosts, 10,000 VMs) Deploys an appliance with 16 CPUs, 32 GB of memory, and 900 GB of disk space.
14 From the list of available datastores, select the location where all the virtual machine configuration
files and virtual disks will be stored and, optionally, enable thin provisioning by selecting Enable Thin
Disk Mode.
The IP address or the FQDN of the appliance is used as a system name. It is recommended to use
an FQDN. However, if you want to use an IP address, use static IP address allocation for the
appliance, because IP addresses allocated by DHCP might change.
VMware, Inc. 52
vSphere Migration
Option Action
Choose a Select the network to which to connect the new appliance temporarily.
network Verify that the temporary network provides connectivity between the source vCenter Server and the target
vCenter Server Appliance.
The networks displayed in the drop-down menu depend on the network settings of the target server. If you are
deploying the appliance directly on an ESXi host, non-ephemeral distributed virtual port groups are not
supported and are not displayed in the drop-down menu.
Important If you want to assign a temporary IPv4 address with DHCP allocation, you must select a network
that is associated with a port group which accepts MAC address changes.
A DHCP server is used to allocate the IP address. Select this option only if a DHCP server is available in
your environment.
If you use an IP address as a system name, you cannot change the IP address and update the DNS
settings after deployment.
16 Review the VMware Customer Experience Improvement Program (CEIP) page and choose if you
want to join the program.
For information about the CEIP, see the Configuring Customer Experience Improvement Program
section in vCenter Server and Host Management.
17 On the Ready to complete page, review the settings for the vCenter Server Appliance migration and
click Finish to complete the process.
The source vCenter Server is migrated from Windows to an appliance. The source vCenter Server is
powered off and the new appliance starts.
What to do next
Verify that your migration to an appliance was successful. For verification steps, see Verify Your vCenter
Server Appliance Migration Is Successful.
VMware, Inc. 53
After Migrating vCenter Server 8
After you migrate to vCenter Server Appliance, consider the post-migration options and requirements.
n You can review the migration logs. See View Migration Assistant Logs and Status Files.
n Complete any component reconfigurations that might be required for changes during upgrade.
n Verify that you understand the authentication process and identify your identity sources.
n Upgrade any additional modules that are linked to this instance of vCenter Server Appliance, such as
vSphere Update Manager.
n Optionally, upgrade or migrate the ESXi hosts in the vCenter Server Appliance inventory to the same
version as the vCenter Server Appliance instance.
For more information about configuring the vCenter Server Appliance, see vSphere Installation and
Setup, vSphere Upgrade, and vCenter Server Appliance Configuration guides.
Procedure
u Log in to the vCenter Server Appliance shell and run the following command:
install-parameter upgrade.source.platform
The command returns the platform of the source vCenter Server instance, for example windows.
What to do next
VMware, Inc. 54
vSphere Migration
You must be logged into migrated vCenter Server instance. If you created a reference of required
information, you can use it to validate the migration success.
Procedure
If the post-upgrade or post-migration configuration conforms to your required information or CLI template
reference and expectations, the vCenter Server upgrade or migration is complete.
What to do next
Prerequisites
In vSphere 6.0, the vSphere Web Client is installed as part of the vCenter Server Appliance deployment.
This way, the vSphere Web Client always points to the same vCenter Single Sign-On instance.
Procedure
1 Open a Web browser and enter the URL for the vSphere Web Client:
https://vceneter_server_ip_address_or_fqdn/vsphere-client.
2 Enter the credentials of a user who has permissions on vCenter Server, and click Login.
VMware, Inc. 55
vSphere Migration
3 If a warning message about an untrusted SSL certificate appears, select the appropriate action based
on your security policy.
Option Action
Ignore the security warning for this Select Install this certificate and do not display any security warnings for this
login session, and install the default server and click Ignore.
certificate so that the warning does Select this option only if using the default certificate does not present a security
not appear again. problem in your environment.
Cancel and install a signed certificate Click Cancel and ensure that a signed certificate is installed on the vCenter Server
before proceeding. system before you attempt to connect again.
The vSphere Web Client connects to all the vCenter Server Appliance systems on which the specified
user has permissions, allowing you to view and manage your inventory.
VMware, Inc. 56
Troubleshooting 9
The vSphere Migration troubleshooting topics provide solutions to problems that you might encounter
during the vCenter Server migration process.
If the migration fails, Migration Assistant generates a log file bundle on your desktop.
Procedure
2 Retrieve the log files from the .zip file on your desktop.
Table 9-1. Log and status files locations on the source vCenter Server or vCenter Server
Single Sign-On
File Location
VMware, Inc. 57
vSphere Migration
Table 9-2. Log and status files locations on the target vCenter Server Appliance or Platform
Services Controller
File Location
What to do next
VMware, Inc. 58