Upgrading BOSH Director on AWS

Page last updated:

This topic describes how to upgrade BOSH Director for Pivotal Platform on Amazon Web Services (AWS).

Complete the tasks in this topic as part of the Pivotal Operations Manager upgrade process. For more information, see Task 2: Upgrade Ops Manager and Installed Products to v2.7 in Upgrading Pivotal Platform.


In this procedure, you create an Ops Manager VM instance to host the upgraded version of Ops Manager. Then, to complete the Ops Manager upgrade, you export your existing Ops Manager installation onto this new VM.

For Pivotal Platform installations on AWS, the VM that hosts the new version of Ops Manager uses an Amazon Machine Image (AMI) specific to your region.

To create an Ops Manager VM instance:

  1. Retrieve the Ops Manager AMI ID. See Retrieve Ops Manager AMI ID.

  2. Launch the AMI. See Launch Ops Manager AMI.

  3. Edit the Ops Manager DNS A Record. See Edit Ops Manager DNS A Record.


To complete the Ops Manager upgrade, you must have your Ops Manager decryption passphrase. You defined this decryption passphrase during the initial installation of Ops Manager.

Retrieve Ops Manager AMI ID

Ops Manager has a different AMI ID for each region. Retrieve and record the AMI ID for your region. You use this AMI ID when launching the Ops Manager AMI instance.

To retrieve the AMI ID for Ops Manager:

  1. Navigate to the Pivotal Platform Operations Manager page on Pivotal Network.

  2. Select the version of Pivotal Platform you want to install from the Releases dropdown.

  3. In the Release Download Files, click the file named Pivotal Ops Manager for AWS to download a PDF.

  4. Open the PDF and record the AMI ID for your region.

Launch Ops Manager AMI

Use the AMI ID for your region to launch an AMI instance that hosts the new version of Ops Manager.

To launch the AMI for Ops Manager:

  1. Navigate to your EC2 Dashboard.

  2. Click AMIs from the Images menu.

  3. Select Public images from the dropdown filter that says Owned by me.

  4. Paste the AMI ID for your region into the search bar and press enter.

    Note: There is a different AMI for each region. If you cannot locate the AMI for your region, verify that you have set your AWS Management Console to your desired region. If you still cannot locate the AMI, log in to the Pivotal Network and file a support ticket.

    Pcf aws ami

  5. (Optional) If you want to encrypt the VM that runs Ops Manager with AWS Key Management Service (KMS):

    1. Right click the row that lists your AMI and click Copy AMI.
    2. Select your Destination region.
    3. Enable Encryption. For more information about AMI encryption, see Encryption and AMI Copy in Copying an AMI in the AWS documentation.
    4. Select your Master Key. To create a new custom key, see Creating Keys in the AWS documentation.
    5. Click Copy AMI. You can use the new AMI you copied for the next steps.
  6. Select the row that lists your Ops Manager AMI and click Launch.

  7. Choose m5.large for your instance type and click Next: Configure Instance Details.

    Aws ami m5large

  8. Configure the following for your instance:

    • Network: Select the VPC that you created.
    • Subnet: Select pcf-public-subnet-az0.
    • Auto-assign for Public IP: Select Enable.
    • IAM role: Select the IAM role associated with your pcf-user profile. If you have not created one, click Create new IAM role and follow the procedures in AWS Permissions Guidelines.
    • For all other fields, accept the default values.

    Pcf aws configure instance

  9. Click Next: Add Storage and adjust the Size (GiB) value. The default persistent disk value is 50 GB. Pivotal recommends increasing this value to a minimum of 100 GB.

    Pcf aws add storage

  10. Click Next: Tag Instance

  11. On the Add Tags page, add a tag with the key Name and value pcf-ops-manager.

  12. Click Next: Configure Security Group.

  13. Select the pcf-ops-manager-security-group that you created in the Step 5: Configure a Security Group for Ops Manager in Preparing to Deploy Ops Manager on AWS Manually topic.

  14. Click Review and Launch and confirm the instance launch details.

  15. Click Launch.

  16. Select the pcf-ops-manager-key key pair, confirm that you have access to the private key file, and click Launch Instances. You use this key pair to access the Ops Manager VM.

    Select pcfpem keypair

Edit Ops Manager DNS A Record

After you deploy the new Ops Manager VM, edit the Ops Manager DNS record in the EC2 dashboard to point to the IP address for the new VM.

To edit the Ops Manager DNS A record:

  1. Click View Instances to access the Instances page on the EC2 Dashboard.

  2. Select the VM that you created in the previous section.

  3. Locate the IPv4 Public IP value in the instance Description tab, and record this value for use in the next step.

  4. In your DNS provider, edit the A record for pcf.YOUR-SYSTEM-DOMAIN to point to the IP address recorded in the previous step.

Next Steps

After you complete this procedure, continue the upgrade instructions in Upgrading Pivotal Platform