Upgrade the NSX Application Platform (NAPP) and NSX Features
In this blog I will show you the end to end upgrade process of NSX Application Platform (NAPP) and all associated NSX Features. In my case all features(Intelligence, NDR and MP) based on top of NAPP were in use. So it is going to be a comprehensive upgrade.
Prerequisites:
-
- Review release notes for known issues and work arounds
- No open alarms
- Make sure all of the prerequisites and system requirements listed in NSX Application Platform Deployment Prerequisites are met.
- Enterprise Admin Privileges
Versions:
NAPP Current Version: 4.0.1.0.0.20606727
NAPP Target Version: 4.1.1.0.0.22213770
NSX Version: 3.2.3.1.0.22104638
Flow:
- Preparation
- NSX Application Platform Upgrade
- NSX Intelligence Upgrade
- NSX Network Detection and Response Upgrade
- NSX Malware Prevention Upgrade
Login to NSX Manager UI (https://<nsx-manager-ip-address> with Enterprise Admin Privileges

Check NSX Application Platform Health
Navigate to System > Upgrade
Click Upgrade. You will notice Prepare for Upgrade, NSX Application Platform and other features enabled automatically.

In Prepare for Upgrade tab review “Helm Repository” & “Docker Registry” locations which are populated automatically, make sure the locations are correct. And select “Platform Target Version” to version you are upgrading to in my case it is “4.1.1“

Click Deploy Upgrade Coordinator



I faced an error while deploying Upgrade Coordinator
Error: Deploying Upgrade Coordinator: Upgrade Coordinator post deployment plugin call failed
Solution: NSX Application Platform Upgrade Failed


Once Upgrade Coordinator deployment completes, under Prepare > Status will show as Success
And you will see NAPP and all Features which needs to be upgraded in sequence automatically.

Click on RUN PRE-CHECKS drop down and click on All Pre-Checks

Once Pre-Checks are completed you can click on DOWNLOAD PRE-CHECK RESULTS

Precheck results would look like below and you should see all status as SUCCESS


Upon ensuring pre-checks success. Click on NEXT

On NSX Application Platform page click UPGRADE. This step might take some time.

Upon NSX Application Platform upgrade completion. Click on RUN POST CHECKS. You should see Success under Overall & Group Status and No issues under Pot Check Status. This concludes NSX Application Platform upgrade. Click NEXT.
Under NSX Intelligence section click on UPGRADE

Upon NSX Intelligence upgrade completion. Click on RUN POST CHECKS. You should see Success under Overall & Group Status and No issues under Pot Check Status. This concludes NSX Intelligence upgrade. Click NEXT.
Under NSX Network Detection and Response section click on UPGRADE

Upon NSX Network Detection and Response upgrade completion. Click on RUN POST CHECKS. You should see Success under Overall & Group Status and No issues under Pot Check Status. This concludes NSX Network Detection and Response upgrade. Click NEXT.

Under NSX Malware Prevention section click on UPGRADE

Upon NSX Malware Prevention upgrade completion. Click on RUN POST CHECKS. You should see Success under Overall & Group Status and No issues under Pot Check Status. This concludes NSX Malware Prevention upgrade. Click FINISH to exit out of upgrade process
Validate the NSX Application Platform status and version under System > NSX Application Platform
Validate Status & Version details of Metrics, Intelligence, Network Detection and Response and Malware Prevention

Summary
Ensure all prerequisites are met and environment is error free. No need to download any software and its pretty much a straight forward process, just be patient and just run through the steps to achieve successful upgrade. In case if any you observe any Failures expand respective group row items and look into the Failed error messages and resolve the reported problem and Retry to complete the upgrade. Contact VMware support in case if required.
Reference:
Upgrade the NSX Application Platform
NSX Application Platform Deployment Prerequisites
NSX Application Platform Upgrade Failed
Upgrade the NSX Malware Prevention Service Virtual Machine (should be done separately just fyi)