In VMware Cloud Foundation 9.0, all host commissioning operations are performed through VCF Operations , not through vSphere Client, Cloud Builder, or the VCF Installer. Once VCF is deployed, Cloud Builder is no longer used, and the VCF Installer is for lifecycle and bundle management—not for host workflows. The vSphere Client also cannot commission hosts because host commissioning is a foundational VCF workflow requiring hardware validation, storage type checks, NIC checks, HCL conformance, and version compatibility.

The error message provided:

“Hosts must be unassigned, commissioned with at least one physical NIC and the same storage type… and the ESX version must be compatible…”

is a standard VCF 9.0 validation message shown when no commissioned hosts matching the workload domain requirements exist. VMware documentation states that hosts must be commissioned under:

VCF Operations → Fleet Management → Hosts → Commission Host

Here, VCF validates:

Storage type (vSAN ESA, vSAN OSA, NFS, FC, etc.)

Network pool membership (matching the WLD plan)

ESXi version compatibility with the Management Domain baseline

NIC mapping and certifications

Until hosts are commissioned, they cannot appear in the workload domain creation wizard.

Thus, the correct method to commission hosts is D. Using VCF Operations .

In VMware Cloud Foundation 9.0 Automation, the Provider Portal must have full visibility into the underlying VCF inventory—including NSX Managers , clusters , regions , vCenters , and SDDC Manager objects —before new regions can be created for Kubernetes-based deployments (All Apps Orgs).

The issue described:

“The NSX Manager for the workload domain does not appear in the list of available NSX Managers”

occurs when SDDC Manager is not integrated into VCF Automation. Without this integration, VCF Automation cannot discover workload domains or their associated NSX Managers. As a result, when attempting to create a new region, the NSX Manager list is empty.

The required action is:

Add the SDDC Manager integration under VCF Automation → Provider Portal → Integrations.

This integration enables Automation to pull:

NSX Manager inventory

vCenter endpoints

Workload domain topology

Cluster details

Only after this integration is complete will the NSX Manager appear and allow region creation.

Option A and D (deploying new WLD or cluster) are unnecessary—inventory access is the problem, not resources.

Option B (triggering inventory sync) cannot work because no SDDC Manager integration exists .

When activating a vSphere Supervisor using VCF Networking with VPC , the Supervisor Workload Network must use a VPC Connectivity Profile . These profiles are scoped to an NSX Project , and cannot be consumed from the Default Project .

VCF Automation requires that:

A custom NSX Project be used for VPC networking integrations.

The Default Project cannot host Connectivity Profiles or VPC constructs intended for Supervisor activation.

Even though the administrator verified that a VPC Connectivity Profile exists in NSX, the Supervisor wizard will not display it if:

The VPC Connectivity Profile belongs to a different project , or

The current selection is the Default Project , which blocks visibility.

This exact behavior— empty VPC Connectivity Profile dropdown —is documented when attempting Supervisor activation under the Default NSX Project.

Option A (T0 active/active) affects North-South routing but does not hide VPC profiles.

Option B (Supervisor HA mode) does not impact network profile selection.

Option D (missing default VPC) is incorrect because the wizard is complaining about availability of Connectivity Profiles , not VPC instances.

The symptoms described— reduced cluster capacity , degraded virtual machine components , and automatic component rebuild operations —are classic indicators of a vSAN disk failure or disk group degradation . vSAN continuously monitors the health of disks, disk groups, and network paths. When a physical disk or disk group becomes unavailable, vSAN will:

Mark affected components as degraded because the required number of replicas or witnesses cannot be maintained.

Trigger automatic repair/rebuild operations , provided there are enough healthy disks remaining in the cluster to satisfy the storage policy (e.g., FTT=1, RAID1/5/6).

Reduce available storage capacity because the failed device is removed from contributing to the vSAN datastore.

These behaviors align directly with documented vSAN failure-response logic, which states that component rebuilds begin automatically after a disk failure , assuming the cluster still has adequate resources.

The other options do not match the symptoms:

A. VM migration to another cluster → does not reduce vSAN capacity nor trigger component rebuilds.

B. vSAN license capacity too small → restricts features, not component state or capacity changes.

C. Too many VMs created → may cause capacity pressure but does not mark components degraded or trigger automated rebuilds.

Only physical disk failure accurately explains all three observations simultaneously.

In VMware Cloud Foundation (VCF) Automation, each Automation Region must be associated with a dedicated NSX Local Manager . A single NSX Local Manager instance cannot be reused across multiple Automation Regions .

In the provided scenario:

The existing environment has WLD1 and WLD2 , both sharing one NSX Local Manager .

Region-1 in VCF Automation already consumes this shared NSX Local Manager.

When creating Region-2 , the interface shows “No results” when selecting an NSX Local Manager.

This behavior matches documented VCF Automation constraints: an NSX Local Manager can only be mapped to a single Automation Region . Once it is consumed by one region, it is not available for any additional region.

To create a second region (Region-2), a new NSX Local Manager instance must exist in the environment. The only supported method to obtain a new NSX Local Manager is to deploy a new workload domain , because NSX Local Manager is deployed as part of every VI Workload Domain.

Thus, the administrator must deploy a new (third) workload domain , which includes its own NSX Local Manager package, allowing Region-2 to be created successfully.

When an NSX Admin account becomes locked in NSX Manager, this occurs due to failed login attempts exceeding the lockout threshold for either:

CLI access ,

API access , or

UI login , which is tied to API authentication.

Once locked, the only supported method to recover the NSX admin account is to log in to the NSX Manager console as the root user and manually clear the lockout counters. This is documented in NSX Manager password-recovery procedures and is the standard administrative recovery action.

The root console provides access to:

clear account-lockout admin

or the equivalent reset methods within NSX Manager.

Why the other options are incorrect:

A. SSH into NSX Manager as Admin Impossible — the admin account is locked and cannot be used to SSH.

B. Change password age policy in vCenter NSX Manager accounts are not governed by vCenter password policy.

C. Rotate admin password in SDDC Manager SDDC Manager rotates NSX passwords when unlocked; it cannot unlock a locked account.

In VMware Cloud Foundation 9.0 Operations, tags created inside VCF Operations do not automatically appear in vCenter . Tags must be explicitly synchronized ("pushed") to the selected vCenter instance before they become usable for VM tagging within vCenter. This is because VCF Operations maintains its own metadata store for tags, super metrics, groups, and policies.

The correct workflow is:

Create the tag in VCF Operations.

Push (synchronize) the tag to the appropriate vCenter instance.

The tag then appears in vCenter’s Tags & Custom Attributes section.

Administrators can then assign the tag to VMs.

If the push step is skipped, the tag exists only inside VCF Operations and cannot be referenced by vCenter, which is exactly the symptom described: tag not found when attempting to assign it to a VM .

Option A is incorrect because Custom Groups do not affect vCenter tag visibility.

Option B is incorrect because tag synchronization is not tied to a specific vCenter version as long as the vCenter is officially supported by VCF 9.x.

Option D is irrelevant—VMware Tools has nothing to do with tag visibility.