CIS compliance alerts for NSX Manager VMs being recommended by vRealize Operations Manager

Products

• VMware NSX

Issue/Introduction

vROPs reported the following compliance alerts for NSX appliances. 

 

Environment

VMware NSX

Cause

These are expected alerts. 

Resolution

We can change NSX-T Manager VM hardware versions from 13 to 21 (if the underlying ESXi version is 8.0 U2 or above).

 - Deployed NSX Manager VM on VMware ESXi 8.0 U2 above
 - Powered on VM to ensure the cluster status showed stable in nsxcli
 - Powered off NSX Manager VM
 - Edited .vmx file of the NSX Manager VM from ESXi CLI to change virtualHW.version from 13 to 21 and saved the change to the file
 - Powered on NSX Manager VM
 - Services started and cluster status stabilized after all services started

However, NSX virtual appliances (Manager and Edge) do not support booting from EFI. (Only Edge Bare Metal deployment supports both UEFI and BIOS modes.) There are no plans to change this for the upcoming releases.