Upgrading from PSC HA 6.0 to PSC HA 6.5

Prepare your load balancer for PSC 6.5 HA as per the section “Prepare a Load Balancer” in this guide.

Note: The load balancer configuration for PSC 6.0 HA should be compatible with PSC 6.5 HA.

1. Perform an in-place upgrade of the first PSC 6.0 server to PSC 6.5

2. Perform an in-place upgrade of the second PSC 6.0 server to PSC 6.5

Refer to the respective upgrade documentation depending on whether you are running Windows based PSC or Appliance based PSC.

Configure the upgraded PSC 6.5 machines for PSC 6.5 HA as per the section “Run the PSC HA 6.5 Scripts” in this guide.

1. Perform an in-place upgrade of the vCenter Server 6.0 server to vCenter Server 6.5

2. Repeat for any additional vCenter Server 6.0 instances in this SSO Domain

Refer to the respective upgrade documentation depending on whether you are running Windows based vCenter Server or Appliance based vCenter Server.

PSC HA 6.5 supports SSL Termination and SSL Passthrough.

PSC HA 6.0 only supported SSL Termination, which means the Load Balancer contained one certificate and each PSC 6.0 contained their own unique certificate.

In basic terms, SSL Passthrough means that the Load Balancer does not contain any certificate itself, but all PSC 6.5 must contain a shared certificate containing SAN (Subject Alternative Name) values of all PSC 6.5 FQDN participating in PSC HA and the FQDN of the Load Balanced PSC HA Address.

To convert from SSL Termination to SSL Passthrough, perform the following:

1. Preparing a certificate (see section previous in this guide)
2. Replacing the default Machine SSL Certificate (see section previous in this guide)
3. Remove the SSL Certificate attached to the Port 443 VIP on the Load Balancer (refer to the Load Balancer documention)
4. Restart the vCenter Server services