6.7

For information about upgrading vCenter Server installations, see Chapter 3 Upgrading the vCenter
Server Appliance and Platform Services Controller Appliance or Chapter 2 Upgrading vCenter Server for
Windows.
For information about patching or updating vCenter Server, see Chapter 7 Patching and Updating
vCenter Server 6.7 Deployments
When you upgrade an ESXi host, some host configuration information is preserved in the upgraded
version, and the upgraded host, after rebooting, can join a vCenter Server instance that has been
upgraded to the same level. Because updates and patches do not involve major changes to the software,
host configuration is not affected. For more information, see the ESXi Upgrade documentation.
When you upgrade a vCenter Server for Windows instance and at the same time convert it to a
vCenter Server Appliance instance, it is a migration.
For information about migrating a vCenter Server installation to an appliance, see Chapter 4 Migrating
vCenter Server for Windows to vCenter Server Appliance.
Support for Federal Information Processing Standard 140-2
vCenter Server 6.7 supports Federal Information Processing Standard (FIPS) 140-2.
FIPS 140-2 is a U.S. and Canadian government standard that specifies security requirements for
cryptographic modules. By default, FIPS 140-2 is always enabled after installation or upgrade of
vCenter Server 6.7.
To learn more about support for FIPS 140-2 in VMware products, see
https://www.vmware.com/security/certifications/fips.html.
To learn how to enable or disable FIPS 140-2 support, see the vSphere Security documentation.
Support for Transport Security Layer 1.2
By default, vSphere 6.7 supports the Transport Security Layer (TLS) 1.2 encryption protocol. The upgrade
or migration to vCenter Server 6.7 disables the TLS 1.0 and TLS 1.1 encryption protocols, and you may
need to reconfigure other VMware products and third-party products to use TLS 1.2.
During both upgrade and migration from vCenter Server 6.0 and 6.5 to vCenter Server 6.7, a notification
message informs you that only the TLS 1.2 protocol is enabled. If you need to use the TLS 1.0 and TLS
1.1 protocols to support products or services that do not support TLS 1.2, you can use the TLS
Configurator Utility to enable or disable the different TLS protocol versions. You can disable TLS 1.0, or
you can disable both TLS 1.0 and TLS 1.1.
When upgrading a Platform Services Controller instance that manages one or more vCenter Server 6.0 or
6.0U1 instances which rely on the older protocols, TLS 1.0 and TLS 1.1 remain enabled to avoid a loss of
connectivity. After the upgrade or migration to vCenter Server 6.7 is complete, run the TLS Configurator
Utility on each Platform Services Controller node to disable the less secure TLS 1.0 and TLS 1.1
protocols, and use the TLS 1.2 protocol.
vCenter Server Upgrade
VMware, Inc. 20