In VMware Cloud Foundation (VCF) 5.2.2 or higher, the Upgrade or Plan Upgrade button for NSX and vCenter components may be missing or unavailable within a specific Workload Domain. This occurs even when the Management Domain parity is correct and the Flexible BOM bundles are available in Planned Patching. The issue is often accompanied by residual task locks or failed credential operations for NSX service accounts.
VMware Cloud Foundation (VCF) SDDC Manager 5.2.2
VMware Cloud Foundation (VCF) SDDC Manager 9.0.2
A failed or stalled credential operation for a service account (such as an NSX-T manager or edge account) creates a validation lock in the SDDC Manager database, preventing the Lifecycle Management (LCM) engine from rendering the upgrade options for that domain. This issue was found in the Credential Checks section of the VDT output for the SDDC Manager.
Log in to the SDDC Manager UI.
Navigate to the Task Console and locate any failed or "In Progress" credential rotation or update tasks associated with the problematic Workload Domain.
Select the stalled task and click Cancel or cancel the task from the banner showing in Password Management.
Navigate to Administration > Password Management and verify that all service accounts for the domain show connected/active.
If a status is Disconnected or Failed, perform a Retry or manual Rotate operation to synchronize the credentials.
Refresh the Updates/Patches tab for the Workload Domain; the Upgrade button should now be visible.
Run VDT for SDDC to determine if the cause above and/or other issues are causing the upgrade button to be missing.
SDDC Manager password operations are not allowed because of a failed password task