Academy/VCP-VCF 9.0 Administrator (2V0-17.25)/SDDC Manager Bring-up vs VCF 9.0 Fleet Manager Deployment
This lab targets VCF 9.0

SDDC Manager Bring-up vs VCF 9.0 Fleet Manager Deployment

VCF 9.0Intermediateadminarchitectvcdx⏱ 150 min

VCF 9.0.0+ uses Instance/Fleet Manager model vs VCF 5.2 SDDC Manager bring-up. Core architecture unchanged but operational surface area significantly refactored.

Objectives

  • Understand the VCF 5.2 Management Domain bring-up workflow via Cloud Builder and SDDC Manager
  • Execute the VCF 9.0 Instance bring-up through VCF Installer and Fleet Manager lifecycle
  • Compare post-deployment operational surfaces: SDDC Manager UI (5.2) vs VCF Operations + Fleet Manager (9.0)
  • Map legacy SDDC Manager endpoints to their VCF 9.0 equivalents in Fleet Manager and VCF Operations APIs
  • Articulate the architectural design decisions behind the Fleet/Instance model and their implications for Day 2 operations

Prerequisites

Two separate nested VCF lab environments: (1) VCF 5.2 pre-staged with Cloud Builder OVA ready, or snapshot of partially deployed 5.2 instance, (2) VCF 9.0 physical host with VCF Installer media staged. Both environments must have network connectivity and DNS configured. No existing SDDC Manager or Fleet Manager instances running.

Prior labs: holodeck-02 (if using Holodeck for 5.2 and 9.0 comparison), vcp-admin-01 (basic VCF architecture understanding)

Required skills:

  • VCF architecture fundamentals (management domain vs workload domain)
  • Cloud Builder bring-up workflow and deployment parameter workbook structure
  • REST API navigation and curl/PowerShell for API calls
  • vSphere Client and SDDC Manager UI navigation
  • Understanding of Fleet Manager's role in managing multiple VCF Instances (VCF 9.0+)

Lab Environment

Two separate nested lab environments side-by-side: (1) VCF 5.2 Pod: physical ESXi host running 4x nested ESXi hosts, Cloud Builder, SDDC Manager, vCenter, NSX 4.x (2) VCF 9.0 Pod: separate physical ESXi host with similar nested topology but powered by VCF Installer + Fleet Manager + VCF Operations, running vCenter 8.x, NSX 9.0.x. Both pods must be network-isolated but accessible from a management workstation for comparison.

IP Addressing

NetworkPurposeVLAN
10.0.0.0/20VCF 5.2 management network (Cloud Builder, SDDC Manager, vCenter, NSX)VLAN 1644
10.2.0.0/20VCF 9.0 management network (Fleet Manager, VCF Operations, vCenter, NSX)VLAN 1645

Credentials

SystemUsernamePassword
VCF 5.2 Cloud Builderadmin@localFrom deployment parameter workbook
VCF 5.2 SDDC Manageradministrator@vsphere.localFrom SDDC Manager bring-up
VCF 9.0 VCF InstalleradminSet during Installer deployment
VCF 9.0 Fleet Manageradmin@localFrom Fleet Manager initialization

Tasks

Task 1 VCF 5.2 SDDC Manager Architecture and Deployment Parameter Review

Manageability

Establish a baseline understanding of VCF 5.2's bring-up workflow. In VCDX, panelists probe your knowledge of how Cloud Builder orchestrates the SDDC Manager deployment and why the bring-up sequence is orchestrated the way it is. This task mirrors production planning: design-then-deploy mindset.

Step 1

Download the VCF 5.2 Deployment Parameter Workbook (DPW) from Broadcom support portal or use a pre-filled template from your lab environment. Open it in Excel and review all five worksheets: (1) Management Domain, (2) Workload Domain, (3) Network, (4) Security, (5) Advanced.

DPW document open with all worksheets visible. No errors or validation warnings in Excel (green checkmarks on all sheets).
The DPW is the single source of truth for bring-up. Every IP, hostname, credential, and configuration must be entered here before Cloud Builder can ingest it.
Step 2

In the Management Domain worksheet, verify: (a) SDDC Manager FQDN (e.g., sddc-manager.sddc.lab), (b) SDDC Manager IP (e.g., 10.0.0.4), (c) vCenter FQDN and IP (10.0.0.6), (d) NSX Manager IPs if HA (3 nodes), (e) ESXi host count (4 for 5.2 lab), resource count per host (min 12 vCPU, 96 GB RAM for management domain), vSAN FTT setting (FTT=1 for lab, FTT=2 for production minimum).

All five rows populated, CIDR addresses consistent with your lab environment's 10.0.0.0/20 range.
A single IP conflict or hostname mismatch discovered post-deployment forces a full redeploy. DPW validation is the #1 prevention step. Community thread 'DPW Hostname conflicts' (7 replies, RESOLVED) documents this exact scenario.
Step 3

Navigate to the Network worksheet. Verify: (a) Management VLAN (1644), (b) vMotion VLAN (1645), (c) vSAN VLAN (1646), (d) NSX TEP VLAN (1647), (e) NSX Edge TEP VLAN (1648), (f) all subnets are /24 or smaller with no overlaps.

VLAN table fully populated, subnet calculator shows no overlaps.
Overlapping VLAN ranges cause silent failures in NSX. The connectivity appears good but packet forwarding breaks. Use a VLAN auditing tool or manual subnet calculator to verify.
Step 4

Review the Cloud Builder bring-up sequence in the Advanced worksheet. Note the orchestration order: (1) Cloud Builder initialization, (2) ESXi host configuration + vSAN creation, (3) SDDC Manager deployment, (4) vCenter registration + NSX Manager deployment, (5) Host commissioning, (6) Cluster finalization. Document WHY this order matters (e.g., SDDC Manager must exist before vCenter can be managed; vCenter must be deployed before NSX can register).

A text summary of the bring-up sequence with annotated dependencies.
Understanding bring-up ordering is VCDX gold. Panelists will ask: What if you tried to deploy vCenter before SDDC Manager? Why can't NSX register before vCenter? This is the difference between memorizing steps and understanding architecture.
Step 5

Export the DPW to JSON format (many DPW tools support export) or manually create a JSON representation. This bridges to VCF 9.0's Instance definition model. Review the structure: top-level keys for domain_name, management_cluster, vsan_config, nsxManager, sddc_manager, etc.

JSON file with schema that mirrors DPW structure. File should be parseable by jq or Python json module.
VCF 9.0's Fleet Manager ingest format is also JSON but with different keys. Seeing both side-by-side is a powerful learning experience.
Step 6

Compare the 5.2 DPW structure to the VCF 9.0 Installer's Instance definition spec (documented below in Task 2). Note the differences: DPW is human-friendly Excel; Instance JSON is machine-friendly. Both contain the same logical information but with different nesting and naming. Document 3 specific structural differences.

A comparison table: VCF 5.2 DPW fields vs VCF 9.0 Instance JSON keys, with mapping notes.
The terminology shift can be confusing. VCF 5.2 talks about 'SDDC Manager bring-up.' VCF 9.0 talks about 'Instance deployment.' Under the hood, both orchestrate the same vCenter/NSX/SDDC Manager stack, but the control plane is inverted: 5.2 Cloud Builder is self-contained; 9.0 Fleet Manager is external.

Validation Gate

Check: DPW fully populated with no validation errors. JSON representation created and parsed successfully. Bring-up sequence documented with dependency annotations. Comparison table completed.

Expected: Clear understanding of VCF 5.2 SDDC Manager planning phase and ability to articulate why DPW structure exists

Common Errors

DPW validation errors like 'Duplicate IP address' or 'Hostname not FQDN'
Cause: Manual entry errors in DPW worksheets or copy-paste errors from existing network documentation
Fix: Use DPW's built-in validation rules. Correct each error and re-validate. Consider using a DPW template from a known-good previous deployment.
📋 KB: Community thread: VCF 5.2 DPW validation fails
Cannot export DPW to JSON or JSON parse fails
Cause: DPW version mismatch or unsupported export format. Not all DPW versions support JSON export.
Fix: Manually create a JSON version from scratch using the DPW as a reference. VCF 5.2 DPW JSON schema is documented in the Broadcom Planning Guide.

Task 2 Deploy VCF 5.2 Management Domain via Cloud Builder

Availability

Execute the Cloud Builder bring-up workflow end-to-end. This mirrors production deployment and teaches you the operational surface area that SDDC Manager exposes post-bring-up. Understanding bring-up failure modes prepares you for Day 2 troubleshooting.

Step 1

Deploy the Cloud Builder OVA to your VCF 5.2 lab environment. From vSphere Client on the physical ESXi host, right-click the management datastore and select 'Upload Files' or use vSphere OVA import wizard. Deploy the Cloud Builder OVA (typically ovftool or direct vSphere import). Power on the VM and wait for the service to initialize (5-10 minutes). Obtain the Cloud Builder IP from the console or DHCP lease.

Cloud Builder VM shows 'RUNNING' status in vSphere Client. IP address assigned and reachable via ping.
Cloud Builder deployment commonly fails if the physical ESXi host has insufficient resources or if DHCP is misconfigured on the management network. Verify DHCP is available on VLAN 1644 before deploying Cloud Builder.
Step 2

Access the Cloud Builder UI: open a browser and navigate to https://<cloud-builder-ip>. Log in with admin@local and the password from your DPW. You should see a wizard prompting you to upload or fill in deployment parameters.

Cloud Builder login page accessible. Dashboard shows 'Ready for bring-up spec' message.
Cloud Builder provides a web form to fill in bring-up parameters if DPW upload isn't available. This is slower but useful if you have a truncated DPW.
Step 3

Upload the DPW (or fill in the bring-up spec form if DPW upload isn't available). Navigate to the bring-up parameters section and either: (a) click 'Upload DPW' and select your Excel file, or (b) manually fill in the form fields. Cloud Builder will parse and validate the DPW. Wait for validation to complete (2-5 minutes). If validation passes, you will see a green checkmark.

Cloud Builder shows 'Bring-up spec validated' message. No validation errors or warnings.
If validation fails, Cloud Builder will show specific errors (e.g., 'SDDC Manager IP already in use', 'NSX Manager hostname invalid'). Fix each error in the DPW and re-upload.
Take a screenshot of the validated bring-up spec. This is a critical artifact for change management and post-deployment auditing.
Step 4

Start the bring-up process: click the 'Start Bring-up' or 'Deploy' button. Cloud Builder will immediately begin the orchestrated deployment sequence. Watch the progress tracker in the Cloud Builder UI. Major milestones (in order): (1) ESXi host configuration + vSAN cluster creation (10-20 min), (2) SDDC Manager VM deployment + initialization (15-25 min), (3) vCenter VM deployment + registration to SDDC Manager (10-15 min), (4) NSX Manager VM deployment + integration (10-20 min), (5) Host commissioning + cluster completion (10-15 min). Total time: 60-90 minutes.

Cloud Builder UI shows 'Bring-up in Progress' with a multi-step progress bar advancing through all major milestones. Final status: 'Bring-up Completed Successfully'.
Do NOT close the browser tab or kill the Cloud Builder process. If the connection drops, you can re-access the Cloud Builder UI and check the status — the bring-up continues in the background. Common failure points: (a) ESXi host storage space exhaustion (fix: check datastore free space), (b) vSAN quorum loss (fix: ensure 4 hosts online), (c) SDDC Manager initialization timeout (fix: check network connectivity to SDDC Manager), (d) NSX registration failure (fix: validate vCenter is healthy before retrying).
Step 5

Upon completion, verify the SDDC Manager deployment by navigating to the SDDC Manager UI: https://<sddc-manager-fqdn>. Log in with administrator@vsphere.local and the password from the bring-up spec. Confirm the management domain is listed with status 'Active'.

SDDC Manager dashboard loads. Navigation menu shows Inventory, Workload Domains, Hosts, Clusters, all populated with the lab environment configuration.
If SDDC Manager is unreachable immediately post-bring-up, wait 5-10 minutes. SDDC Manager services are still initializing. SSH to the SDDC Manager VM and run: systemctl status domainmanager to check service status.
Step 6

Document the post-bring-up surface. In SDDC Manager, navigate to: (1) Inventory > Workload Domains (should show 1 management domain), (2) Inventory > Hosts (should show 4 ESXi hosts, all commissioned), (3) Inventory > Clusters (should show 1 cluster with vSAN enabled), (4) Infrastructure > Licensing (should show management domain and workload domain licenses), (5) Administration > System Configuration > Services (should show all services running). Take a screenshot of each screen.

Screenshots documenting post-bring-up SDDC Manager state. All components showing healthy status.
These screenshots become reference material for the VCF 9.0 comparison in Task 4.

Validation Gate

Check: Cloud Builder bring-up completes with status 'Completed Successfully'. SDDC Manager UI accessible and shows management domain Active. All 4 ESXi hosts commissioned and showing Healthy status.

Expected: VCF 5.2 management domain fully deployed and operational. SDDC Manager is the primary operational surface.

Common Errors

Cloud Builder bring-up fails at 'ESXi Host Configuration' step with error 'Cannot select datastore'
Cause: Physical datastore is full, unreachable, or misconfigured. This is the #1 bring-up failure in nested labs.
Fix: SSH to the physical ESXi host and check datastore free space: esxcli storage filesystem list. Ensure > 1 TB free. If datastores are shared (vSAN), verify vSAN cluster is healthy: esxcli vsan cluster get.
📋 KB: Community thread: Cloud Builder datastore selection failure
SDDC Manager deployment fails at 'vCenter Registration' step
Cause: vCenter VM is deployed but networking is misconfigured or vCenter services are not initializing properly.
Fix: Check vCenter VM in vSphere Client. Verify it has network connectivity (ping from another VM). If network is OK, wait for vCenter services to start (check vCenter VM console for boot status). SSH to vCenter and run: systemctl status vmware-vpxd to check vCenter service.
Bring-up hangs at 'NSX Manager Integration' for > 30 minutes
Cause: NSX Manager VM is deployed but initialization is slow or network connectivity to vCenter is unstable.
Fix: Check NSX Manager VM in vSphere Client. Verify CPU/memory are not throttled. Check network latency between NSX Manager and vCenter. If latency is high (>100ms), NSX registration times out. Consider restarting the NSX Manager service.

Task 3 Deploy VCF 9.0 Management Domain via VCF Installer and Fleet Manager

Availability

Execute the VCF 9.0 bring-up workflow. VCF 9.0 inverts the control plane: instead of Cloud Builder being self-contained, the external VCF Installer and Fleet Manager orchestrate deployment. Understanding this architectural shift is critical for VCDX because it affects how you design VCF environments at scale (multi-instance management, licensing, upgrade orchestration).

Step 1

Download the VCF 9.0 Installer media (ISO or OVA) from Broadcom support portal. The Installer is the entry point for VCF 9.0 bring-up. It provides a web UI for defining VCF Instances and drives the full deployment workflow. Deploy the Installer OVA to your VCF 9.0 lab physical ESXi host using the same process as Cloud Builder. Power on and obtain its IP from DHCP.

VCF Installer VM running with IP assigned and accessible via ping.
Step 2

Access the VCF Installer UI: https://<installer-ip>. Log in with admin and the default password (usually 'vmware' or as specified in Installer docs). You should see a welcome wizard prompting you to create a new VCF Instance.

VCF Installer dashboard showing 'Create New Instance' button or similar entry point.
Step 3

Create a new VCF Instance: click 'Create New Instance' and fill in the Instance definition form. Unlike VCF 5.2's DPW (Excel), VCF 9.0 uses a JSON-based Instance definition. The form will guide you through: (1) Instance name (e.g., 'prod-instance-01'), (2) Management domain FQDN (e.g., 'md.vcf.lab'), (3) ESXi host count and sizing (4 hosts, 12 vCPU, 96 GB RAM each minimum), (4) vSAN configuration (FTT=1), (5) NSX Manager specification (3 nodes HA or single node for lab), (6) vCenter instance settings, (7) Licensing information. Complete all required fields.

Instance definition form fully populated. Form shows 'Ready to validate' or similar confirmation message.
VCF 9.0's Instance JSON schema is different from VCF 5.2's DPW. Key differences: (a) Management network is defined as a single 'management_domain' object (vs separate sheets in DPW), (b) Component IPs are auto-assigned or manually specified in a single object (vs row-by-row in DPW), (c) Licensing is bundled into Instance (vs separate sheet), (d) NSX configuration is embedded in Instance definition (vs separate Network sheet).
Step 4

Validate the Instance definition: click 'Validate' and wait for the Installer to check all parameters. This validation is more comprehensive than VCF 5.2's DPW validation: it checks IP reachability, FQDN DNS resolution, network connectivity, and physical ESXi host capacity. If all checks pass, you will see green status indicators.

All validation checks pass with green status. Instance definition is ready for deployment.
If validation fails, the Installer will show specific errors with remediation suggestions. Common failures: (a) ESXi hosts not reachable on management network (fix: configure network connectivity), (b) NSX bundle not available in Installer staging directory (fix: download NSX 9.0.x bundle), (c) Insufficient datastore space (fix: verify > 1.5 TB available).
Step 5

Start the Instance deployment: click 'Deploy Instance'. The Installer will execute the bring-up sequence similar to Cloud Builder, but with a different orchestration engine. Watch the progress tracker. Major milestones: (1) Pre-flight checks on all ESXi hosts (10 min), (2) Nested ESXi deployment (if using nested labs) OR host commissioning (if using physical hosts), (3) vCenter deployment via OVA, (4) NSX Manager deployment and cluster formation, (5) VCF Fleet Manager initialization, (6) VCF Operations UI startup, (7) License activation. Total time: 60-120 minutes.

Installer progress tracker shows advancing milestones. Final status: 'Instance Deployment Completed Successfully'. Installer should provide URLs for accessing Fleet Manager and VCF Operations.
VCF 9.0 deployment commonly stalls at 'Fleet Manager Initialization' if its database is not ready. If the deployment pauses for >15 minutes at this step, check the Installer logs: ~/.vcf/logs/installer.log or via the Installer UI's log viewer. If Fleet Manager is stuck initializing, you may need to restart its services via SSH: systemctl restart vcf-fleet-manager.
Step 6

Upon completion, verify the Fleet Manager and VCF Operations deployment. The Installer UI will display URLs for: (1) Fleet Manager UI (https://<fleet-manager-ip>), (2) VCF Operations UI (https://<operations-ip>). Navigate to Fleet Manager and log in with admin@local and the password from the Instance definition. Verify your Instance is listed and shows status 'Running' or 'Healthy'.

Fleet Manager UI loads. Instance shows in the Instances list with status 'Running'. VCF Operations dashboard accessible and showing the management domain inventory.
VCF Operations is the new centralized control plane for Day 2 operations. Compare its layout and navigation to SDDC Manager (from Task 2). You will notice a significant UI/UX redesign and consolidation of multiple consoles into one.

Validation Gate

Check: VCF Installer completes Instance deployment with status 'Successful'. Fleet Manager UI accessible and Instance shows 'Running'. VCF Operations dashboard fully populated with management domain components.

Expected: VCF 9.0 management domain fully deployed. Fleet Manager is the Instance manager; VCF Operations is the primary Day 2 operational surface.

Common Errors

Installer stalls at 'Fleet Manager Initialization' for > 20 minutes
Cause: Fleet Manager database services are not starting properly. Usually a resource constraint or misconfiguration.
Fix: SSH to the Fleet Manager VM (find its IP in Installer UI or from DHCP logs). Run: systemctl status vcf-fleet-manager. If service is failed, check logs: journalctl -u vcf-fleet-manager -n 100. Restart service: systemctl restart vcf-fleet-manager.
📋 KB: VCF 9.0 community thread: Fleet Manager initialization timeout
Instance deployment fails at 'vCenter Deployment' with error 'Cannot allocate OVA'
Cause: Datastore full or insufficient resources for vCenter VM (vCenter 8.x requires more resources than 7.x).
Fix: Check datastore free space. vCenter 8.x OVA is ~7-8 GB. Ensure datastore has > 100 GB free. If using nested labs, verify nested ESXi hosts have sufficient memory (96 GB minimum per host).

Task 4 Compare Operational Surfaces: SDDC Manager vs Fleet Manager + VCF Operations

Manageability

The shift from VCF 5.2 to 9.0 is not just a version bump; it is a fundamental architectural change in how you manage and operate VCF environments. VCDX panelists expect you to articulate these differences and their operational implications. This task builds that capability.

Step 1

Create a comparison spreadsheet with three columns: (1) Operational Task, (2) VCF 5.2 SDDC Manager, (3) VCF 9.0 Fleet Manager / Operations. List the following operational tasks: (a) View management domain status, (b) Commission a new ESXi host, (c) Create a workload domain, (d) View licensing status, (e) Check system health and alarms, (f) Perform a VCF upgrade, (g) Access vCenter, (h) Access NSX Manager, (i) View audit logs, (j) Configure LDAP/SAML.

Spreadsheet template created with 10 rows (one per task) and 3 columns.
Step 2

In your VCF 5.2 SDDC Manager UI (from Task 2), navigate to each operational task and document the exact menu path and UI elements. For example: (a) View management domain status: Inventory > Workload Domains > management, (b) Commission a new host: Infrastructure > Hosts > add host, etc. Fill in column 2 of your spreadsheet with these paths.

Column 2 complete with SDDC Manager UI paths for all 10 tasks.
Step 3

In your VCF 9.0 Fleet Manager + VCF Operations UI (from Task 3), navigate to the equivalent tasks and document the new menu paths. Be prepared to find that some tasks have moved or been consolidated. For example: (a) View management domain status: VCF Operations > Inventory > Instance > Details, (b) Commission a new host: VCF Operations > Infrastructure > Hosts > Add Host, etc. Fill in column 3 of your spreadsheet.

Column 3 complete with Fleet Manager / VCF Operations paths for all 10 tasks. Some tasks may not exist in 9.0 (e.g., SDDC Manager- specific operations), or may be in a different location.
Some VCF 5.2 tasks no longer exist in 9.0 (e.g., Cloud Builder bring-up is now handled by Installer). Other tasks have been consolidated or moved to different consoles. Document these gaps — they are important for understanding the architectural evolution.
Step 4

For each task, note which console is used in VCF 9.0: (a) Fleet Manager (for Instance management), (b) VCF Operations (for Day 2 operations), (c) vCenter (for VM management, unchanged), (d) NSX Manager (for network operations, unchanged). Compare to VCF 5.2, where SDDC Manager is the primary console for most operations.

Spreadsheet updated with a 4th column: 'VCF 9.0 Console(s)' showing which UI is used for each task.
This comparison reveals a key architectural shift: VCF 5.2 consolidates most operations into SDDC Manager. VCF 9.0 distributes operations across Fleet Manager (lifecycle), VCF Operations (Day 2), and vCenter/NSX (infrastructure). This is a design choice to support multi-instance management and cloud-native operations.
Step 5

Now examine the API/CLI differences. VCF 5.2 uses REST APIs under the SDDC Manager endpoint (https://sddc-manager.lab/api/v1/). VCF 9.0 splits APIs: Fleet Manager (https://fleet-manager.lab/api/v1/) for Instance management, VCF Operations (https://operations.lab/api/v1/*) for Day 2, and vCenter/NSX unchanged. Test an API call from each version. Example: VCF 5.2: curl -X GET https://sddc-manager/api/v1/workload-domains -H 'Authorization: Bearer <token>'. VCF 9.0: curl -X GET https://operations/api/v1/instances/<instance-id>/domains -H 'Authorization: Bearer <token>'. Document the endpoint structure differences.

Two successful API curl responses showing the structural differences between VCF 5.2 and 9.0 APIs.
VCF 9.0 APIs require authentication via Identity Broker (OIDC) by default. VCF 5.2 uses basic auth or token-based auth. Ensure you have the correct authentication mechanism set up before testing APIs. If using local admin accounts, you may need to enable legacy auth mode in VCF 9.0 for testing (not recommended in production).
Step 6

Create a summary document comparing the two architectures: (1) Control plane location: VCF 5.2 (Cloud Builder + SDDC Manager, self-contained), VCF 9.0 (external Installer + Fleet Manager + VCF Operations, distributed). (2) Orchestration: VCF 5.2 (synchronous, single bring-up flow), VCF 9.0 (asynchronous, multi-Instance support). (3) Operational model: VCF 5.2 (single domain focus), VCF 9.0 (multi-domain, multi-Instance). (4) API design: VCF 5.2 (monolithic SDDC Manager API), VCF 9.0 (distributed APIs by function). (5) Day 2 implications: Document 3 specific operational differences you observe (e.g., upgrade workflows, licensing, multi-site management).

Summary document with 5 sections comparing architectures. Day 2 implications section completed with 3 specific operational differences.

Validation Gate

Check: Comparison spreadsheet complete with 10 tasks mapped across SDDC Manager, Fleet Manager, and VCF Operations. API curl calls tested and responses documented. Summary document written.

Expected: Clear understanding of the architectural evolution from VCF 5.2 to 9.0 and its operational implications

Common Errors

Cannot find a VCF 5.2 SDDC Manager task in VCF 9.0 Fleet Manager / Operations
Cause: The task may have been eliminated, consolidated into a different workflow, or moved to a different console (vCenter, NSX, etc.).
Fix: Search the VCF 9.0 documentation for the equivalent task. If it truly doesn't exist, document it as 'deprecated in VCF 9.0' and explain the alternative workflow in the summary document.

Task 5 Document Migration Path and Design Decisions

Manageability

VCDX is as much about design thinking as it is about operations. This task requires you to articulate the strategic design decisions behind the Fleet/Instance model and how an organization would migrate from VCF 5.2 to 9.0.

Step 1

Define the three key design decisions that led to the Fleet/Instance model: (1) Reusability: A single Fleet Manager can orchestrate multiple VCF Instances across different sites or customers (multi-tenancy in SaaS scenarios). (2) Day 2 Automation: By separating Instance definitions from operational controls, VCF 9.0 enables templated Instance deployments and infrastructure-as-code patterns. (3) Upgrade Pathing: Fleet Manager can upgrade Instances independently, allowing rolling upgrades or phased rollouts. For each decision, write 2-3 sentences explaining the benefit and any trade-off (e.g., increased operational complexity, need for new training).

Three documented design decisions with benefit/trade-off analysis.
Step 2

Outline a migration path from VCF 5.2 to 9.0 for a hypothetical organization running 3 VCF 5.2 domains (1 management + 2 workload domains). Specify the steps: (1) Deploy VCF 9.0 Installer and Fleet Manager in parallel with VCF 5.2 environment, (2) Migrate workload domain data (VMs, policies, etc.) via vCenter API or Migration Toolkit, (3) Validate workload in VCF 9.0, (4) Decommission VCF 5.2. For each step, estimate the downtime and risk level. Document any data that cannot be migrated automatically (e.g., custom SDDC Manager configurations, NSX policies) and require manual re-creation.

Migration plan with 4 main steps, time estimates, risk levels, and manual re-creation tasks identified.
Step 3

Compare the licensing models: VCF 5.2 uses per-instance licensing (one license per SDDC Manager). VCF 9.0 uses fleet-based licensing (one fleet license covers all Instances under a Fleet Manager, but with per-workload-domain entitlements). Document the license cost implications: Does VCF 9.0 cost more or less for a multi-Instance environment? What about a single Instance? Write a cost comparison for 1x, 3x, and 5x Instance scenarios.

Cost comparison table for 1, 3, and 5 Instance scenarios under VCF 5.2 vs 9.0 licensing models.
Step 4

Identify three workload profiles where VCF 9.0's Fleet/Instance model is superior to VCF 5.2, and three where VCF 5.2 might still be better (or where the choice is neutral): (a) Superior in VCF 9.0: (i) Service provider managing multiple customer VCF environments (fleet-level isolation and multi-tenancy), (ii) Enterprise with planned multi-site disaster recovery (per-Instance upgrades enable staggered rollouts), (iii) Rapid infrastructure scaling (templated Instance definitions enable faster provisioning). (b) VCF 5.2 may be preferable: (i) Small single-site deployments (operational simplicity), (ii) Organizations deeply invested in SDDC Manager API automations (potential re-training cost), (iii) Environments requiring extensive custom SDDC Manager configuration (less well-documented migration path in 9.0). Document the trade-offs.

Analysis of 3 workload profiles favoring VCF 9.0 and 3 where VCF 5.2 may be better, with trade-off justification.
Step 5

Create a RCAR (Requirements, Constraints, Assumptions, Risks) analysis for deploying VCF 9.0 Fleet Manager at a new customer site (as opposed to SDDC Manager in VCF 5.2). (a) Requirements: Fleet Manager must support 5+ Instances, multi-LDAP domain authentication, per-Instance upgrade capability. (b) Constraints: Physical infrastructure limited to 3 datacenters; bandwidth between sites limited to 1 Gbps. (c) Assumptions: Customer has existing Okta OIDC IdP; VCF Automation will be used (not required for basic fleet). (d) Risks: Fleet Manager is relatively new (9.0.x) — potential for undiscovered bugs; migration from competitor's infrastructure may have data loss risks.

RCAR document with 4-5 items in each category (requirements, constraints, assumptions, risks).

Validation Gate

Check: All five sub-tasks completed: design decisions documented, migration plan outlined, licensing comparison completed, workload profile analysis done, RCAR documented.

Expected: Comprehensive understanding of VCF 9.0's architectural decisions and ability to articulate them to VCDX panelists

Common Errors

Cannot identify clear differentiators between VCF 5.2 and 9.0 Fleet/Instance models
Cause: Insufficient understanding of multi-tenancy and fleet-based orchestration concepts.
Fix: Review VCF 9.0 documentation on Fleet Manager and multi-Instance architectures. Reference Broadcom whitepapers on VCF 9.0 design patterns.

Final Validation

Full understanding of VCF 5.2 SDDC Manager architecture, hands-on deployment of both VCF 5.2 and 9.0 management domains, and clear articulation of the architectural evolution and its operational implications. Ability to map legacy SDDC Manager operations to their VCF 9.0 equivalents and design a migration strategy.

✓ VCF 5.2 SDDC Manager deployment and post-bringup UI validation complete → Management domain shows Active status, all components healthy

✓ VCF 9.0 Fleet Manager + VCF Operations deployment complete → Instance shows Running status, Fleet Manager and Operations UIs accessible

✓ Operational surface comparison documented (10 tasks mapped across VCF 5.2 and 9.0) → Spreadsheet complete with UI paths and console locations for all tasks

✓ API/CLI differences tested (curl requests from both versions) → Successful API calls showing endpoint structure differences

✓ Migration plan and design decisions documented → Plan includes timeline, risk assessment, licensing comparison, and workload profile analysis

Cleanup / Restore

Snapshot: vcp-admin-03-complete

• Take snapshots of both VCF 5.2 and VCF 9.0 management domains in their completed states for reference in subsequent labs

• Document any custom configurations made during the labs (e.g., LDAP, DNS, NTP settings) in your lab notebook

• Retain comparison spreadsheet and migration plan documents for future reference in VCDX design scenarios

Design Reflection (VCDX)

A VCDX architect must understand that VCF 9.0's Fleet/Instance model is not merely a UI reshuffle but a fundamental shift in operational topology. In VCF 5.2, each SDDC Manager is an isolated control plane. In VCF 9.0, Fleet Manager is a super-control plane that manages multiple Instances (and potentially multiple datacenters). This matters because it affects: (1) Disaster recovery design (Fleet Manager becomes a critical dependency), (2) Upgrade strategy (can you upgrade Instances independently without affecting Fleet Manager?), (3) Multi-tenancy (can a single Fleet Manager serve multiple business units or customers?), (4) Licensing cost models (per-Instance or per-fleet?). Be prepared to articulate whether you would recommend VCF 9.0 for a customer based on their operational model, not just technical requirements.

Requirements

  • Understand VCF 5.2 SDDC Manager bring-up workflow end-to-end including dependency ordering and failure modes
  • Execute VCF 5.2 Management Domain deployment from DPW through post-bringup validation
  • Understand VCF 9.0 Fleet Manager and Installer architecture and deployment workflow
  • Execute VCF 9.0 Instance deployment and validate Fleet Manager + VCF Operations
  • Map 10+ operational tasks from SDDC Manager to Fleet Manager / VCF Operations equivalents
  • Compare REST API endpoints between VCF 5.2 and 9.0
  • Document migration path and licensing implications for VCF 5.2 to 9.0 transition

Constraints

  • Lab environment must support two separate VCF instances (5.2 and 9.0) running concurrently — requires 2x physical ESXi hosts or 2x nested labs with sufficient resources (minimum 1 TB RAM, 128 cores across both
  • VCF 5.2 content pack and VCF 9.0 Installer must both be available (download time may be significant)
  • DPW format may vary by VCF 5.2 patch version — differences in sheet names or validation rules may require adjustment
  • VCF 9.0 Fleet Manager API is still evolving (9.0.0 -> 9.0.x) — some endpoints may change between minor versions

Assumptions

  • Operator has completed basic VCF architecture training (understanding of SDDC Manager, vCenter, NSX roles)
  • Lab environments have network connectivity and DNS configured correctly
  • DPW and Instance definition templates are available (not starting from blank)
  • Operator can interpret JSON and Excel formats with equal facility
  • VCF licensing is available for both 5.2 and 9.0 lab deployments (evaluation licenses acceptable)

Risks

  • Concurrent deployment of VCF 5.2 and 9.0 may exceed available lab resources — IMPACT: lab slowdown or incomplete deployment, MITIGATION: deploy sequentially or increase lab resource capacity
  • VCF 5.2 bring-up failure (most common: datastore exhaustion, network misconfiguration) delays entire lab — IMPACT: timeline slippage, MITIGATION: pre-validate physical infrastructure before deployment
  • API endpoint incompatibility or authentication changes in VCF 9.0 prevent curl testing — IMPACT: incomplete API comparison, MITIGATION: reference VCF 9.0 API documentation, use curl with verbose logging to debug
  • DPW or Instance definition errors discovered mid-deployment require full redeploy — IMPACT: significant time loss, MITIGATION: validate all parameters in pre-flight checklist before starting deployment

Self-Assessment Discussion Prompts

  1. Why does VCF 5.2 require a separate Cloud Builder OVA for bring-up, whereas VCF 9.0 has an external Installer? What are the architectural implications of this change?
  2. In VCF 5.2, SDDC Manager is the primary operational console. In VCF 9.0, operations are split between Fleet Manager and VCF Operations. What are the pros and cons of each approach?
  3. If Fleet Manager fails in VCF 9.0, can you still manage existing VCF Instances via vCenter and NSX Manager directly? What functionality is lost? Compare to VCF 5.2 if SDDC Manager fails.
  4. The VCF 9.0 licensing model is fleet-based (one license covers multiple Instances). How would this change your approach to designing multi-site disaster recovery or multi-tenant environments?
  5. Why does the migration from VCF 5.2 to 9.0 require deploying a new environment instead of in-place upgrade? What architectural limitations force this approach?
  6. In VCF 9.0, could you manage multiple Instances from different customers under a single Fleet Manager while maintaining isolation? What security and operational controls would be required?

Extensions

Deploy a Workload Domain in Both VCF 5.2 and 9.0 and Compare

Create a workload domain in both environments and document how the workflows differ. In VCF 5.2, workload domains are created via SDDC Manager UI + Cloud Builder. In VCF 9.0, workload domains are created via VCF Operations UI or API. Document the UI differences, time to deployment, and available customization options in each version.

same

Execute an In-Place VCF 5.2 to 9.0 Upgrade on a Non-Production Instance

If available, document or execute (via simulator or recorded lab) the upgrade workflow from VCF 5.2 to 9.0. VCF 9.0 does NOT support in-place upgrade from 5.2; it requires a new deployment and data migration. Compare to the traditional in-place upgrade experience in earlier VCF versions.

harder

Build a Multi-Instance Fleet Lab with 3 VCF Instances Under One Fleet Manager

Deploy multiple VCF Instances under a single Fleet Manager to experience fleet-level operations: licensing checks, bulk upgrade simulation, cross-Instance DNS/NTP configuration. This directly mirrors how service providers and large enterprises would use VCF 9.0.

harder

Implement Fleet Manager High Availability

Configure Fleet Manager with an external database (PostgreSQL) and load balancer for HA. Document how this compares to VCF 5.2 SDDC Manager HA (which uses internal clustering). This is critical for production deployments and VCDX design scenarios.

harder

References

Was this page useful?
Type to search. ↑ ↓ to move, Enter to open, Esc to close.