Upgrading from PSC HA 6.0 to PSC HA 6.5

This section outlines the process to upgrade from PSC 6.0 HA to PSC 6.5 HA

This process is the same regardless if you are upgrading 6.0 Appliance to 6.5 Appliance or upgrading 6.0 Windows to 6.5 Windows

Prepare your Load Balancer for PSC 6.5 HA

Prepare your load balancer for PSC 6.5 HA as per the section “Prepare a Load Balancer” in this guide.

Note: The load balancer configuration for PSC 6.0 HA should be compatible with PSC 6.5 HA.

Upgrade each PSC 6.0 to PSC 6.5

1. Perform an in-place upgrade of the first PSC 6.0 server to PSC 6.5

2. Perform an in-place upgrade of the second PSC 6.0 server to PSC 6.5

Refer to the respective upgrade documentation depending on whether you are running Windows based PSC or Appliance based PSC.

Configure PSC 6.5 HA

Configure the upgraded PSC 6.5 machines for PSC 6.5 HA as per the section “Run the PSC HA 6.5 Scripts” in this guide.

Upgrade vCenter Server 6.0 to vCenter Server 6.5

1. Perform an in-place upgrade of the vCenter Server 6.0 server to vCenter Server 6.5

2. Repeat for any additional vCenter Server 6.0 instances in this SSO Domain

Refer to the respective upgrade documentation depending on whether you are running Windows based vCenter Server or Appliance based vCenter Server.

Convert from SSL Termination to SSL Passthrough

PSC HA 6.5 supports SSL Termination and SSL Passthrough.

PSC HA 6.0 only supported SSL Termination, which means the Load Balancer contained one certificate and each PSC 6.0 contained their own unique certificate.

In basic terms, SSL Passthrough means that the Load Balancer does not contain any certificate itself, but all PSC 6.5 must contain a shared certificate containing SAN (Subject Alternative Name) values of all PSC 6.5 FQDN participating in PSC HA and the FQDN of the Load Balanced PSC HA Address.

To convert from SSL Termination to SSL Passthrough, perform the following:

  1. Preparing a certificate (see section previous in this guide)
  2. Replacing the default Machine SSL Certificate (see section previous in this guide)
  3. Remove the SSL Certificate attached to the Port 443 VIP on the Load Balancer (refer to the Load Balancer documention)
  4. Restart the vCenter Server services