• Update each Platform Service Controller appliance to 6.7 Update 1b.
• Update each Management vCenter Server Appliance and Compute vCenter Server Appliance to 6.7 Update 1b.
• Upgrade vSphere Update Manager Download Service to 6.7 Update 1b
• Update each ESXi host in the management cluster and in the shared edge and compute cluster to 6.7 Patch Release ESXi670-201901001.
• Update the privileges for the service account used by vRealize Suite Lifecycle Manager.

Workflow

1. Update the Platform Services Controller appliances and the Management vCenter Server Appliances.
   1. Take snapshots of the Platform Services Controller appliances and of the Management vCenter Server Appliances in Region A and in Region B.
   2. Redirect the traffic to the Compute Platform Service Controller in Region A.
   3. Update the Management Platform Services Controller in Region A.
   4. Restore load balancing for the traffic to the Platform Services Controller appliances in Region A.
   5. Redirect the traffic to the Management Platform Services Controller in Region A.
   6. Update the Compute Platform Services Controller in Region A.
   7. Restore load balancing for the traffic to the Platform Services Controller appliances in Region A.
   8. Update the Management vCenter Server Appliance in Region A.
   9. Repeat steps b-h for the Platform Services Controller appliances and for the Management vCenter Server Appliances in Region B.
   10. Delete the snapshots for the Platform Services Controller appliances and Management vCenter Server instances in Region A and in Region B.
2. Upgrade vSphere Update Manager Download Service in Region A.
3. Update the ESXi hosts in the management clusters.
   • (Option 1) Remediate the management ESXi hosts that use vSAN storage in Region A.
     1. Verify that the vSAN Build Recommendation Engine Health test passes in Region A.
     2. Scan for updates by using vSphere Update Manager in Region A.
     3. Remediate the management ESXi hosts that use vSAN in Region A.
   • (Option 2) Remediate the management ESXi hosts that use vSAN stretched storage in Region A.
     1. Verify that the vSAN Build Recommendation Engine Health test passes in Region A.
     2. Scan for updates by using vSphere Update Manager in Region A.
     3. Remediate the management ESXi hosts that use vSAN stretched storage in Region A.
   • (Option 3) Remediate the compute ESXi hosts that use a traditional storage in Region A.
     1. Scan for updates by using vSphere Update Manager in Region A.
     2. Remediate the management ESXi hosts that use traditional storage in Region A.
4. Complete the update in the management clusters.
   1. Verify the status of the NSX Data Center for vSphere for all ESXi hosts in Region A.
   2. Review the hardware compatibility status for vSAN for the management cluster in Region A.
   3. Remediate VMware Tools in the management cluster in Region A.
   4. Repeat steps 2-4c for the management cluster in Region B.
5. Update the Compute vCenter Server Appliances and the ESXi hosts in the shared edge and compute clusters.
   1. Take snapshots of the Compute vCenter Server Appliances in Region A and in Region B.
   2. Update the Compute vCenter Server Appliance in Region A.
   3. Remediate the compute ESXi hosts that use a traditional storage in Region A.
   4. Repeat steps 4b-4c for the Compute vCenter Server Appliance and for the shared edge and compute cluster ESXi hosts in Region B.
   5. Delete the snapshots for the Compute vCenter Server Appliance instances in Region A and in Region B.
6. Complete the update procedure.
   1. Update the privileges for the service account used by vRealize Suite Lifecycle Manager.
   2. Update the SDDC Deployment Details on each vCenter Server Appliance in Region A and in Region B.

Procedure

Update the Platform Services Controller Appliances and the Management vCenter Server Appliance Instances

1. Take snapshots of the Platform Services Controller appliances and of the Management vCenter Server Appliance instances in Region A and in Region B.
   1. Use the vSphere Web Client to log in to the Management vCenter Server Appliance by navigating to http://RegionA-management-vc-FQDN/vsphere-client/.
   2. Navigate to the Management Platform Services Controller appliance.
   3. Right-click the Management Platform Services Controller and select Snapshots > Take Snapshot.
   4. In the Take VM Snapshot dialog box, enter the following settings and click OK.

   Setting	Value
   Name	VMware Validated Design 5.0.1 Virtual Infrastructure Layer Update
   Description	-
   Snapshot the virtual machine’s memory	Deselected
   Quiesce guest file system (Needs VMware Tools installed)	Deselected

   5. Repeat steps a-d for all Platform Services Controller appliances and the Management vCenter Server in Region A and in Region B.
2. Redirect the traffic to the Compute Platform Services Controller in Region A.
   1. Use the vSphere Web Client to log in to the Management vCenter Server Appliance by navigating to http://RegionA-management-vc-FQDN/vsphere-client/.
   2. From the Home menu, select Networking & Security > NSX Edges.
   3. From the NSX Manager drop-down menu, select the management-nsx-manager-IP NSX Manager, and double-click the Region-A-PSC-LB NSX Edge device.
   4. On the Manage tab, click Load Balancer > Pools.
   5. Select the psc-https-443 load balancer pool and click Edit.
   6. In the Edit Pool dialog box, from the Members pane, select RegionA-Management-PSC, and click Edit.
   7. In the Edit Member dialog box, from the State drop-down menu, select Disable, and click OK.
   8. In the Edit Pool dialog box, click OK.
   9. Repeat steps e-h for the psc-tcp-389 load balancer pool.
   10. On the Pools page, click Show Pools Statistics and verify that both psc-https-443 and psctcp-389 show status DOWN for RegionA-Management-PSC.
3. Update the Management Platform Services Controller in Region A.
   1. Mount the update VMware-VCSA-all-6.7.0-build_number-patch-FP.iso file to the Management Platform Services Controller appliance.
   2. Log in to the appliance management interface of the Management Platform Service Controller by navigating to https://management-psc-FQDN:5480.
   3. In the left pane, click Update.
   4. In the Update pane, click Check Updates and select Check CDROM.
   5. Click Stage & Install.
   6. In the End User License Agreement section, accept the EULA and click Next.
   7. In the Backup Platform Services Controller section, check the I have backed up Platform Services Controller and its associated databases checkbox and click Finish.
   8. After the update completes, in the Installing Upgrades dialog box click OK.
   9. Log back in to the Management Platform Service Controller and in the left pane, click Update.
   10. In the Update pane, verify that you see the updated version number.
4. Restore load balancing for the traffic to the Platform Services Controller appliances in Region A.
   1. Use the vSphere Web Client to log in to the Management vCenter Server Appliance by navigating to http://RegionA-management-vc-FQDN/vsphere-client/.
   2. From the Home menu, select Networking & Security > NSX Edges.
   3. From the NSX Manager drop-down menu, select the management-nsx-manager-IP NSX Manager, and double-click the Region-A-PSC-LB NSX Edge device.
   4. On the Manage tab, click Load Balancer > Pools.
   5. Select the psc-https-443 load balancer pool and click Edit.
   6. In the Edit Pool dialog box, from the Members pane, select RegionA-Management-PSC, and click Edit.
   7. In the Edit Member dialog box, from the State drop-down menu, select Enable, and click OK.
   8. In the Edit Pool dialog box, click OK.
   9. Repeat steps e-h for the psc-tcp-389 load balancer pool.
   10. On the Pools page, click Show Pools Statistics and verify that both psc-https-443 and psctcp-389 report status UP for RegionA-Management-PSC.
5. Disconnect the attached update .iso file from the Management Platform Services Controller in Region A.
6. Repeat steps 2-5 on the Compute Platform Services Controller in Region A.
7. Update the Management vCenter Server in Region A.
   1. Mount the update VMware-VCSA-all-6.7.0-build_number-patch-FP.iso file to the Management vCenter Server appliances from the vSphere Web Client.
   2. Log in to the appliance management interface of the Management Platform Service Controller by navigating to https://management-vc-FQDN:5480.
   3. In the left pane, click Update.
   4. In the Update pane, click Check Updates and select Check CDROM.
   5. Click Stage & Install.
   6. In the End User License Agreement section, accept the EULA and click Next.
   7. In the Backup Platform Services Controller section, check the I have backed up Platform Services Controller and its associated databases checkbox and click Finish.
   8. After the update completes, in the Installing Upgrades dialog box click OK.
   9. Log back in to the appliance management interface of the Management Platform Service Controller and in the left pane, click Update.
   10. In the Update pane, verify the version number.
8. Disconnect the attached update .iso file from the Management vCenter Server in Region A.
9. Repeat steps 2-8 for the Platform Services Controller appliances and for the Management vCenter Server Appliance Instances in Region B.
10. Delete the snapshots for the Platform Services Controller appliances and Management vCenter Server instances in Region A and in Region B.
    1. Use the vSphere Web Client to log in to the Management vCenter Server Appliance by navigating to http://RegionA-management-vc-FQDN/vsphere-client/.
    2. Navigate to the Management Platform Services Controller.
    3. Right-click the Management Platform Services Controller and select Snapshots > Delete All Snapshots.
    4. In the Confirm Delete dialog box, click Yes.
    5. Repeat steps a-d for all Platform Services Controller appliances and the Management vCenter Servers in Region A and in Region B.

Upgrade vSphere Update Manager Download Service is Region A

Please use the vCenter Server Appliance 6.7 Update 1b installation iso (VMware-VCSA-all-6.7.0-build_number.iso) and see Upgrade vSphere Update Manager Download Service in Region A in the VMware Validated Design Upgrade documentation.

Update the ESXi Hosts in the Management Clusters

(Option 1) Remediate the Management ESXi Hosts that Use vSAN Storage in Region A

1. Use the vSphere Web Client to log in to the Management vCenter Server Appliance by navigating to https://RegionA-management-vc-FQDN/vsphere-client/.
2. Verify that the vSAN Build Recommendation Engine is healthy by using your My VMware credentials to download the latest recommendations.
   1. In the Navigator, select the management-cluster.
   2. On the Monitor tab, click the vSAN tab, and select Health.
   3. Expand the vSAN Build Recommendation test.
   4. Click the vSAN Build Recommendation Engine Health test name and click the Login to my.vmware.com button.
   5. In the Login dialog box, enter your My VMware account credentials and click OK.
3. Scan for updates by using vSphere Update Manager in Region A.
   1. From the Home menu, select Update Manager.
   2. In the Navigator, under Servers, click the management-vc.
   3. In the right pane, click the Manage tab and click Hosts Baselines.
   4. Click the Go to compliance view button.
   5. On the Update Manager tab, click the Scan for Updates button.
   6. In the Scan for Updates dialog box under Scan Hosts For, select Patches and Extensions and Upgrades, and click OK.
   7. After the scan finishes, the cluster state shows Non-Compliant.
4. Remediate the management ESXi hosts that use vSAN storage in Region A.
   1. On the Update Manager tab, click Remediate.
   2. On the Select Baselines page, in the Baselines Groups and Types pane, select the vSAN Cluster RegionA-management-cluster, verify that in the Baseline pane all baselines are selected, and click Next.
   3. On the Select Target Objects page, select all management hosts in the cluster and click Next.
   4. On the Patches and Extensions page, verify that VMware ESXi 6.7 Patch Release is selected and click Next.
   5. On the Advanced Options page, click Next.
   6. On the Host Remediation Options page, deselect Retry entering maintenance mode in case of failure and click Next.
   7. On the Cluster Remediation Options page, select all options and click Next.
   8. On the Ready to Complete page, click Pre-check Remediation to generate a report about any identifiable problems that can prevent a successful update.
   9. Address any items reported in the Pre-check Remediation dialog box before you continue with the update and click OK.
   Note: In Recommended Changes you can ignore the Disable HA Admission Control message.
   10. After you address all pre-check items, click Finish to begin the update.

(Option 2) Remediate the Management ESXi Hosts that Use vSAN Stretched Storage in Region A

1. Use the vSphere Web Client to log in to the Management vCenter Server Appliance by navigating to https://RegionA-management-vc-FQDN/vsphere-client/.
2. Verify that the vSAN Build Recommendation Engine is healthy by using your My VMware credentials to download the latest recommendations.
   1. In the Navigator, select the management-cluster.
   2. On the Monitor tab, click the vSAN tab, and select Health.
   3. Expand the vSAN Build Recommendation test.
   4. Click the vSAN Build Recommendation Engine Health test name and click the Login to my.vmware.com button.
   5. In the Login dialog box, enter your My VMware account credentials and click OK.
3. Scan for updates by using vSphere Update Manager in Region A.
   1. From the Home menu, select Update Manager.
   2. In the Navigator, under Servers, click the management-vc.
   3. In the right pane, click the Manage tab and click Hosts Baselines.
   4. Click the Go to compliance view button.
   5. Move up the inventory tree in the Navigator pane and select management-dc.
   Note: In the data center object you can access the hosts in Availability Zone 1, Availability Zone 2 and the vSAN witness host. If you use the cluster object, you can only access Availability Zone 1 and Availability Zone 2.
   6. On the Update Manager tab, click the Scan for Updates button.
   7. In the Scan for Updates dialog box under Scan Hosts For, select Patches and Extensions and Upgrades, and click OK.
   8. After the scan finishes, the cluster state shows Non-Compliant.
4. Remediate the management ESXi hosts in Availability Zone 1 of the vSAN stretched cluster in Region A.
   1. On the Update Manager tab, click Remediate.
   2. On the Select Baselines page, in the Baselines Groups and Types pane, select the vSAN Cluster RegionA-management-cluster, verify that in the Baselines pane all baselines are selected, and click Next.
   3. On the Select Target Objects page, select all management hosts that reside in Availability Zone 1 and click Next.
   4. On the Patches and Extensions page, ensure that VMware ESXi 6.7 Patch Release is selected and click Next.
   5. On the Advanced Options page, click Next.
   6. On the Host Remediation Options page, deselect Retry entering maintenance mode in case of failure and click Next.
   7. On the Cluster Remediation Options page, select all options and click Next.
   8. On the Ready to Complete page, click Pre-check Remediation to generate a report about any identifiable problems that can prevent a successful upgrade.
   9. Address any items reported in the Pre-check Remediation dialog box before you continue with the upgrade and click OK.
   Note: In Recommended Changes you can ignore the Disable HA Admission Control message.
   10. After you address all pre-check items, click Finish to begin the update.
5. After you remediate the hosts in Availability Zone 1, repeat step 4 to remediate the hosts in Availability Zone 2.
6. After you remediate the hosts in both availability zones, update the vSAN witness host.

(Option 3) Remediate the Management ESXi Hosts That Use Traditional Storage in Region A

1. Create a new fixed baseline in the Update Manager in Region A.
   1. From the Home menu, select Update Manager.
   2. In the Servers pane on the left, click management-vcenter-server.
   3. In the right pane, on the Manage tab click Hosts baselines.
   4. In the Host Baselines pane, click New Baseline.
   5. On the Name and Type page, enter the following settings and click Next.

   Setting	Value
   Name	VMware ESXi 6.7 for VMware Validated Design 5.0.1
   Description	-
   Baseline Type	Host Patch

   6. On the Patch Options page, select Fixed.
   7. On the Patches page, type 6.7 in the filter search box and press Enter.
   8. Click Release Date twice to sort in order from newest on top, to oldest on the bottom.
   9. Select the checkbox next to the VMware ESXi 6.7 Patch Release and click Next.
   10. On the Ready to Complete page, review the baseline details and click Finish.
2. Scan for updates by using vSphere Update Manager in Region A.
   1. From the Home menu, select Update Manager.
   2. In the Navigator, under Servers, click the management-vc.
   3. In the right pane, click the Manage tab and click Hosts Baselines.
   4. Click the Go to compliance view button.
   5. On the Update Manager tab, click Attach Baseline.
   6. In the Attach Baseline dialog box, select the VMware ESXi 6.7 for VMware Validated Design 5.0.1 baseline and click OK.
   7. On the Update Manager tab, click the Scan for Updates button.
   8. In the Scan for Updates dialog box under Scan Hosts For, select Patches and Extensions and Upgrades, and click OK.
   9. After the scan finishes, the cluster state shows Non-Compliant.
3. Remediate the management ESXi hosts in Region A.
   1. On the Update Manager tab, click Remediate.
   2. On the Select baselines page of the, in the Baselines Groups and Types pane, select VMware ESXi 6.7 for VMware Validated Design 5.0.1, in the Baselines pane verify that all baselines are selected, and click Next.
   3. On the Select target objects page, select all management hosts in the cluster and click Next.
   4. On the Patches and extensions page, ensure VMware ESXi 6.7 Patch Release is selected and click Next.
   5. On the Advanced options page, click Next.
   6. On the Host remediation options page, deselect Retry entering maintenance mode in case of failure and click Next.
   7. On the Cluster remediation options page, select all options and click Next.
   8. On the Ready to complete page, click Pre-check Remediation to generate a report about any identifiable problems that can prevent a successful upgrade.
   9. Address any items reported in the Pre-check Remediation dialog box before you continue with the upgrade and click OK.

10. After you address all pre-check items, click Finish to begin the upgrade.

Complete the Update in the Management Clusters

1. After updating all management ESXi hosts, review the NSX Data Center for vSphere status in the management cluster.
   1. Use the vSphere Web Client to log in to the Management vCenter Server Appliance by navigating to https://RegionA-management-vc-FQDN/vsphere-client.
   2. From the Home menu, select Networking & Security.
   3. In the Navigator, select Installation and Upgrade.
   4. On the Host Preparation tab, from the NSX Manager menu select management-nsx-manager-IP and verify that the Installation Status for all management ESXi hosts is green.
2. Verify that the vSAN Hardware compatibility tests have passed for the management cluster.

1. In the Navigator, select the management-cluster object.
2. On the Monitor tab, click the vSAN tab, and select Health.
3. Verify that the Hardware compatibility tests have passed.
4. If you see a warning test result, expand the Hardware compatibility tests, review the individual warning test result, and perform the following troubleshooting steps.

3. Remediate VMware Tools in the management cluster in Region A. See Remediate VMware Tools in the Management Cluster in Region A in the VMware Validated Design Upgrade documentation.
4. Repeat steps 1-4 for the ESXi hosts in the management cluster in Region B.

Update the Compute vCenter Server Appliances and the ESXi Hosts in the Shared Edge and Compute Clusters

1. Update the Compute vCenter Server Appliance in Region A.
   1. Mount the update VMware-VCSA-all-6.7.0-build_number-patch-FP.iso file to the Compute vCenter Server Appliance.
   2. Log in to the appliance management interface of the Compute vCenter Server Appliance by navigating to https://compute-vc-FQDN:5480.
   3. In the left pane, click Update.
   4. In the Update pane, click Check Updates and select Check CDROM.
   5. Click Stage & Install.
   6. In the End User License Agreement section, accept the EULA and click Next.
   7. In the Backup Platform Services Controller section, check the I have backed up Platform Services Controller and its associated databases checkbox and click Finish.
   8. After the update finishes, in the Installing Upgrades dialog box click OK.
   9. Log back in to the appliance management interface of the Compute vCenter Server Appliance and click Update in the left pane.
   10. Verify the version number in the Update pane.
2. Disconnect the attached update .iso file from the Compute vCenter Server in Region A.
3. Create a new fixed baseline for the Update Manager in Region A.
   1. From the Home menu, select Update Manager.
   2. In the Navigator, under Servers, click the compute-vcenter-server.
   3. In the right pane, click the Manage tab and click Hosts Baselines.
   4. In the Host Baselines pane, click New Baseline.
   5. On the Name and type page, enter the following settings and click Next.

   Setting	Value
   Name	VMware ESXi 6.7 for VMware Validated Design 5.0.1
   Description	-
   Baseline Type	Host Patch

   6. On the Patch options page, select Fixed.
   7. On the Patches page, type 6.7 in the filter search box and press Enter.
   8. Click Release Date twice to sort in order from newest on top, to oldest on the bottom.
   9. Select the checkbox next to the host patch named VMware ESXi 6.7 Patch Release and click Next.
   10. On the Ready to complete page, review the baseline details and click Finish.
4. Scan for updates by using vSphere Update Manager in Region A.
   1. From the Home menu, select Update Manager.
   2. In the Navigator, under Servers, click the compute-vcenter-server.
   3. In the right pane, click the Manage tab and click Hosts Baselines.
   4. Click the Go to compliance view button.
   5. On the Update Manager tab, click Attach Baseline.
   6. In the Attach Baseline dialog box, select the VMware ESXi 6.7 for VMware Validated Design 5.0.1 baseline and click OK.
   7. On the Update Manager tab, click the Scan for Updates button.
   8. In the Scan for Updates dialog box under Scan Hosts For, select Patches and Extensions and Upgrades, and click OK.
   9. After the scan finishes, the cluster state shows Non-Compliant.
5. Remediate the compute ESXi hosts in Region A.
   Note: In Recommended Changes you can ignore the Disable HA Admission Control message.
   1. On the Update Manager tab, click Remediate.
   2. On the Select baselines page, in the Baselines Groups and Types pane, select VMware ESXi 6.7 for VMware Validated Design 5.0.1, verify that all baselines in the Baselines pane are selected, and click Next.
   3. On the Select target objects page, select all management hosts in the cluster and click Next.
   4. On the Patches and extensions page, verify that VMware ESXi 6.7 Patch Release is selected and click Next.
   5. On the Advanced options page, click Next.
   6. On the Host remediation options page, deselect Retry entering maintenance mode in case of failure and click Next.
   7. On the Cluster remediation options page, select all options and click Next.
   8. On the Ready to complete page, click Pre-check Remediation to generate a report about any identifiable problems that can prevent a successful upgrade.
   9. Address any items reported in the Pre-check Remediation dialog box before you continue with the upgrade and click OK.
   10. After you address all pre-check items, click Finish to begin the upgrade.
6. Repeat steps 1-5 for the Compute vCenter Server and on the ESXi hosts in the shared edge and compute cluster in Region B.

Complete the Update Procedure

1. Update the privileges for the service account used by vRealize Suite Lifecycle Manager.
   1. Use the vSphere Web Client to log in to the Management vCenter Server Appliance by navigating to http://RegionA-management-vc-FQDN/vsphere-client/.
   2. On the Home page, under Administration, click Roles.
   3. On the Roles page, select the vRealize Suite Lifecycle Manager User role and click the Edit role action icon.
   4. In the Edit Role dialog box, select the following settings and click OK.

2. Update the identity of your SDDC deployment on each vCenter Server Appliance.
   1. From the Home menu of the vSphere Web Client, select Global Inventory Lists.
   2. In the Navigator, under Resources click vCenter Servers.
   3. Select the Management vCenter Server Appliance and click the Configure tab.
   4. Under the Settings pane, click Advanced Settings and click the Edit button.
   5. In the Edit Advanced vCenter Server Settings dialog box, configure the following property and click OK.

6. Repeat step 2 for all vCenter Server Appliance instances in Region A and in Region B.

Prerequisites

• Verify that your environment implementation follows exactly the software bill of materials for VMware Validated Design 5.0.
• Download the vCenter Server Appliance patch VMware-VCSA-all-6.7.0-build_number-patch-FP.iso file locally to a Windows host that has access to the SDDC management network.
• Download the vCenter Server Appliance installation VMware-VCSA-all-6.7.0-build_number.iso file locally to a Windows host that has access to the SDDC management network.
• Verify that all ESXi hosts have lockdown mode disabled during the update.
• Verify that the vSphere clusters do not have vSphere Storage DRS set to fully automated mode in both the management and the workload domains.
• Verify that any integrations with the Management vCenter Server Appliances are quiesced.
• Verify that you have current backups for each Platform Services Controller appliance and each vCenter Server Appliance.
• In the VMware Validated Design Upgrade documentation, see Upgrade Policy, General Prerequisites for the SDDC Upgrade, and Best Practices in SDDC Upgrades.