Configuring a VMware vCenter Server and VMware NSX Manager pair in Unified Management Console

The following procedures explain how to add, edit, and delete a pair of VMware vCenter Server and VMware NSX Manger in Unified Management Console.
You can add multiple pairs of VMware vCenter Server and VMware NSX Manager as per your requirement. However, each pair of VMware vCenter Server and VMware NSX Manager must be unique. You can pair one VMware vCenter Server with one VMware NSX Manager only.
Ensure that the VMware vCenter Server user must have the Enterprise Administrator role on VMware NSX Manager. A user with Enterprise Administrator role only can install the Symantec Threat Protection service in VMware vCenter, configure port groups, and manage security policies.
If you are using NSX 6.2.4 and above with default limited license for AV only, you must configure the
sis-server.properties
configuration file to enable AV service. You must configure the configuration file before registering vCenter Server and NSX Manager from UMC. For more information on how to configure, see https://support.symantec.com/en_US/article.TECH236425.html.
If you already have VMware vCenter Server and VMware NSX Manager registered with Management Server, then you must delete the VMware vCenter Server and VMware NSX Manager connection from Unified Management Console, and then perform the steps mentioned in the https://support.symantec.com/en_US/article.TECH236425.html.
  1. To configure a VMware vCenter Server and NSX Manager pair
  2. In Unified Management Console, navigate to
    Settings > Integration > VMware vCenter NSX
    .
  3. Click
    Add
    .
    Configure VMware vCenter Server
    window appears.
  4. In the
    Connection Name
    field, enter a name for the connection.
    You must enter a unique name for each connection. You can enter any name that is helpful for you to identify the connection.
  5. In the
    VMware vCenter Server
    section, provide the following details:
    IP Address
    Provide the IP address of the vCenter Server.
    Port
    Specify the port number to connect to the vCenter Server. Unified Management Console auto-populates the default port number.
    User Name
    Provide a user name of the vCenter Server user.
    Password
    Provide the password for the vCenter Server user.
  6. Select the
    Accept vCenter Server SSL certificate
    option.
    You can click the vCenter SSL certificate link to read the content of the certificate.
    Now you can either save the connection or add the NSX Manager details to the connection. You can click
    Test Connection
    to see if UMC can connect to the specified vCenter Server.
  7. To add the NSX Manager details, click
    Add VMware NSX Manager
    .
    The
    DCS Server
    field displays the Management Server that is registered with the Unified Management Console.
  8. Provide the following details:
    IP Address
    Provide the IP address of the NSX Manager.
    Port
    Specify the port number to connect to the NSX Manager. Unified Management Console auto-populates the default port number.
    User Name
    Provide a user name of the NSX Manager user.
    Password
    Provide the password for the NSX Manager user.
  9. Select the
    Accept NSX Server SSL certificate
    option.
    You can click the NSX server SSL certificate link to read the content of the certificate.
  10. Optionally, you can Click
    Test Connection
    to verify of you have entered the correct details and if Unified Management Console can connect to the vCenter Server and NSX Manager.
  11. Do any of the following:
    • Click
      Save
      to save the connection in Unified Management Console.
      Unified Management Console saves the details of the connection for you to edit or register later.
    • Click
      Register
      to register the NSX Manager with the Management Server.
    After you register the NSX Manager with Management Server, the Unified Management Console displays the
    NSX Manager Type
    : Primary, Secondary, or Standalone. You can click
    Sync NSX
    to refresh this information.
    Additionally, after the configuration is successful, you can verify that the required services appear in the VMware vSphere Web Client.
  12. To verify which SVA services are enabled on NSX
  13. Log on to VMware vSphere Web Client and navigate to
    Network and Security
    >
    Service Definitions
    .
  14. In the right pane, select
    Services
    tab and select
    Symantec Threat Protection Service
    and verify the services available under
    Functions
    .
    If you have installed NSX 6.2.4 and above with limited default license, then under the
    Functions
    ,
    Anti Virus
    service only appears. Else,
    2: Anti Virus, IDS IPS
    services appear.
  15. In Unified Management Console, navigate to
    Settings > Integration > VMware vCenter NSX
    .
  16. In the
    Action
    column, click the
    Edit
    icon for the connection that you want to edit.
  17. Modify the fields as per your requirement.
    If you want to edit the IP address of an NSX Manager, ensure that the NSX Manager is not registered with the management server. If the NSX Manager is registered with the management server, you must first unregister the NSX Manager before you edit the IP address.
  18. If you want to remove the NSX Manager, click
    Remove
    in the
    VMware NSX Manager
    area.
    You can remove the NSX Manager only if the NSX Manager is not registered with the management server. If the NSX Manager is registered with the management server, you must first unregister the NSX Manager.
  19. Click
    Test Connection
    to verify if you have entered the correct details and if Unified Management Console can connect to the vCenter Server and NSX Manager.
  20. If you have modified the NSX Manager details, click
    Register
    to register the updated NSX Manager with the management server. Else, click
    Save
    to save the details in the Unified Management Console.
  21. In Unified Management Console, navigate to
    Settings > Integration > VMware vCenter NSX
    .
  22. In the
    Action
    column, click the
    Delete
    icon for the connection that you want to delete.
  23. On the confirmation window, do any of the following:
    • Click
      Unregister
      to unregister the NSX Manager from the management server.
      This option is available only for the connections that are in the
      Registered
      state.
    • Click
      Delete
      to delete the connection from Unified Management Console.