This issue first came up around November 2017, but it is still coming up in plces as there are many users still on these versions.
The issue affects new NSX controllers being deployed, the deployments will fail with an error "Waiting for NSX controller ready failed".  And the password to all currently deployed controllers expire.  The details are all in this KB 
Upgrading your NSX to 6.3.5 or higher is required to resolve this.

I am very honored to be chosen a vExpert on NSX for the second year!  I have bee focusing on several of the NSX exams lately... I'll have another post on my VCAP6-NV experience shortly..
​The list of this years NSX vExperts can be found here
Congratulations to all of the NSX vExperts for 2017!!

Ah, nothing like being in Las Vegas the end of August with several thousand of your closest IT colleagues!!  I have not attended a VMworld in Las Vegas since it was held at the Venetian a few years back, so I was really looking forward to this one.
 This 14th US VMworld was AWESOME!!  Attended by more than 20,000 customers and partners. And there was  a record number of Hand on Labs taken as well!
I hope everyone that attended had as much fun, and learned as many new things as me and my friends did!
I want to give a big thank you and pitch to Cohesity in giving out one of the coolest vExpert item ever!  It included a Patagonia backpack, travel mug, water bottle, USB charger and socks!!
Check out their VMworld 2017 blog

Here is a bit of a review in pictures from VMworld 2017 in Las Vegas-

​Even at baggage claim, ready for VMworld!

A snack at our favorite burger place...

VMworld Customer Appreciation Party at the T-Mobile Arena-

Rocking Out with the headline Band - Blink-182

For some replays and more info, visit VMware VMworld 2017 

If you have tried to disable the Distributed Firewall on one of your host clusters, and found that even when selecting Disable it still shows Enabled,  there is a know issue and documented in this VMware KB 
​
The KB details the workaround to disable the Distributed Firewall with the API call to the NSX Manager-
Method: PUT URL: https://nsxmgr-ip/api/4.0/firewall/domainID/enable/true|false
​Note: Replace the domainID field with the Cluster ID of the cluster which has the firewall disabled.
So, how to find your cluster ID you need??  Most of the documents have you go to the Management Object Browser (MOB), of your vCenter, then drill down to locate the specific item you need and it's associated ID.

​However, there is a quicker way.  If you log into the web client of your vCenter, (and yes all new features like NSX, vSan and many others can only be done in the web client),  you can locate the object ID for many items!
Just click on the item you need, such as the Cluster, then in the address bar of your browser, scroll all the way to the right, and the ID will be listed close to the end.
Here is an example of the cluster and ID needed:​

I used this trick during my VCIX-NV exam, which has one API question, and was able to find the ID required for a specific VM and then build my API query needed.  I was able to pass the exam so I hope I got that question correct at least!
​