AHV Virtualization

Please advise on vulnerability mitigation for nutanix-sa-57 security advisory and possible fix release date. We understand that upgrading to AOS 7.6 is the available option at the moment.  The hardware is 3-node Lenovo HX650 V3 cluster.Please confirm the dark site upgrade sequence with the below bundles is correct, or if it can be done better.1    LCM Framework Bundle 3.4.0.12    NCC LCM Bundle 6.0.0.13    Nutanix Compatibility Bundle4    Prism Central LCM Bundle 7.65    Foundation LCM Bundle 5.116    AOS LCM Bundle 7.67    AHV LCM Bundle 11.38    LENOVO Firmware LCM Bundle 3.0All bundles to be uploaded and run from PE LCM except the "Prism Central Bundle LCM Bundle" from the PC LCM.

wanted to share a real-world scenario I recently encountered regarding Prism Central account lockouts and see how the community handles similar setup challenges.The Issue:Our primary local administrator account on Prism Central kept getting locked out unexpectedly. After inspecting the logs, we traced the issue to an external automated log integration (like a SIEM/Splunk collector) executing API calls using stale credentials.Even after disabling the integration at the source and resetting the admin password, the lockout behavior occasionally persisted due to cached sessions or residual background API requests.

What actually happens?Traditional backups copy entire files or virtual disks, which takes time and slows down your system. Nutanix uses a Redirect-on-Write (RoW) architecture combined with instantaneous metadata pointers.1️⃣ 𝘛𝘩𝘦 𝘗𝘰𝘪𝘯𝘵𝘦𝘳𝘴 𝘍𝘳𝘦𝘦𝘻𝘪𝘯𝘨 (𝘐𝘯𝘴𝘵𝘢𝘯𝘵):- Instead of copying your data blocks, Nutanix copies the metadata map (the index or map that tells the system where your data blocks live on the physical disks).* The Process: The system takes a snapshot of this map, which takes milliseconds because metadata is incredibly small.* The Result: The original data blocks become read-only for that specific point in time.2️⃣ 𝘛𝘩𝘦 𝘙𝘦𝘥𝘪𝘳𝘦𝘤𝘵-𝘰𝘯-𝘞𝘳𝘪𝘵𝘦 𝘔𝘦𝘤𝘩𝘢𝘯𝘪𝘴𝘮 (𝘕𝘰 𝘖𝘷𝘦𝘳𝘩𝘦𝘢𝘥):- The moment after the recovery point is created, your Virtual Machine (VM) keeps running and writing new data.* Old Data: Stays exactly where it was, safely frozen as your recovery point.* New Data: Instead of overwriting old data, any new changes are written t

Hello,I am experiencing an issue where VM IP addresses are no longer displayed in Prism after changing the network environment of a Nutanix cluster.I would appreciate any advice or information about similar cases.Environment Nutanix AHV-based cluster Multiple VMs running on the cluster Both Windows and Linux guest operating systems are present Nutanix Guest Tools (NGT) are not being used What happened The network environment of the Nutanix cluster was changed. The Gateway configuration of the existing cluster/service network was also changed. The cluster was then connected to a different network environment. The cluster was powered on again. The cluster and VMs are operating normally after the change. Current symptoms All VMs have valid IP addresses configured inside their guest operating systems. Network connectivity from the VMs to the Gateway and external networks is working normally. The VM network adapters and VLAN configuration appear to be functioning correctly

Hello all,We are encountering an issue with a user who updated ESXi to version 8.0u3e onto nutanix Supermicro 8155 G8. The problem has arisen while attempting to update hardware components; the LCM update fails because `ipmitool` is missing from the hosts.The cluster is located in a "dark site," so updates are loaded via direct upload and AOS is at 7.5.1.10 version.Do you know of any workarounds?Thanks in advice,Alex

Hi,Since upgrading to PC 7.6 / AOS 11.2 we’ve tipped over the edge on available CPU resources and are experiencing some performance issues (Spikes in CPU Wait, application failures) we’ve engaged with support who identified ADS/Solver being unable to move VM’s to reduce hotspots, because all hosts are hotspots, and we’re basically oversubscribed.  I won’t deny this, but we weren’t experiencing so many issues before the update. Support advice is to reduce vCPU allocation on vm’s that don’t need them. We’ve got a lot of VM’s reporting as over provisioned, the majority of these are windows VM’s with 2 vCPU’s our testing has shown that with only a single vCPU windows really doesn’t work well. So i have some questions:Has anyone else noticed an increase in consumed CPU resources following update to PC/AOS 7.6 Do others experience the same with windows server VM’s, or is it a feature of our environment that 2 vCPU’s is the minimum If you do experience the same, do you just live with a large

As per the infrastructure deployment SDK:Typically, Dell ships their hardware pre-configured to automatically install AHV after you first turn the node on. The downside is that, when you turn the node on for the first time, it runs a series of scripts to install the hypervisor and create the CVM. Customers often turn the machines off before the preparations are finished because they don’t know to leave the machines on. It’s usually less complex to use a standalone Foundation VM on bare-metal nodes.after power on the node and wait about an hour, the AHV is installed and the CVM not created, what can cause this issue and what is the expected time for the node to install the AHV and create the CVM?

While deploying Nutanix three nodes cluster we are not able to ping default gateway from all the hosts.Please suggest end customer network team is working on the same but do anyone has faced similar kind of issue.

Hello.After update to AHV 11.0.1.6, AOS 7.5.1.10 the behaviour of our cluster changes.Before the update, the machines were distributed evenly across all hosts at startup.Now the clients started on small number of hosts. When the host reaches 90% CPU-Util, the next host will be used.On our hosts we have nVidia A16 installed. With 60VMs on one host (were using 2Q and 4Q profiles) the VMs don’t work as expected anymore.Nutanix support means, that this behaviour is normal.. I don’t think so.Is there a chance to achieve a better distribution of the VMs?With the actual situation a normal work is for our users not possible. Thanks in advance for your answers. RegardsDirk Emmermacher

We are trying to create a cluster of three nodes on Cisco UCS Server C240 M7 but while deploying we are getting an error message “Remote foundation has not picked up the imaging request, yet user is advised to manually check foundation logs. cluster creation for cluster id will be timed out”. Tried to install Prism Central, Cisco Intersight, AHV & AOS as per recommended versions provided by support team but still, we are facing. Please assist. Do any one have encountered an error message like this till now ? Waiting for a quick response if possible.

like another user i am running into the same problem. can someone help me. ​​​​​​I have Nutanix CE running in my homelab, and I wanted to deploy CVAD on it. However, it appears that you need a plugin to get it working. Unfortunately, I can’t download the plugin because it requires my account to be activated, which I can’t do since I don’t have a Serial Number, Service Tag, or Software Registration ID  The doc im referencinghttps://portal.nutanix.com/page/documents/solutions/details?targetId=BP-2079-Citrix-Virtual-Apps-and-Desktops:nutanix-ahv-plug-in-for-citrix.html

Hi Nutanix Community Team,I hope you are all doing well.I am reaching out here because I am currently facing a roadblock with my Nutanix Multicloud Expert application and could use some guidance.To give you some context:I have successfully completed all required technical certifications (including NCA, NCP-MCI, NCP-Cloud Native, NCP-BC, and NCS-Core).I have actively contributed to the community by publishing technical troubleshooting blogs and articles.I previously sent an email to the EMEA team/program coordinators regarding my application status, the sponsor requirement, and how to update my submission, but unfortunately, I haven't received a response yet.Additionally, the system currently prevents me from submitting a new or updated application form.Could anyone guide me on how to get this sorted out, or help escalate my case to the right person in the EMEA team so I can finalize my application?Thank you so much for your continuous support!Best regards, 

In enterprise environments, maintaining high availability and zero-data-loss capabilities is critical for core operational services. This case study details a real-world project where we engineered and deployed an end-to-end Business Continuity and Disaster Recovery (BCDR) solution for an enterprise client across two geographically separated datacenters (Primary Data Center and Secondary DR Site).By leveraging Nutanix AOS NearSync Replication, Protection Domains, and Prism Central Disaster Recovery Orchestration, we successfully reduced the client's Recovery Point Objective (RPO) from hours to under 5 minutes while enabling automated, non-disruptive DR testing.The Customer Challenge & RequirementsThe customer operated a legacy environment with critical production workloads (Databases, ERP, and Core Infrastructure Services). Their legacy backup and DR framework suffered from several challenges: High RPO/RTO Gaps: The previous disaster recovery mechanism relied on traditional night-t

Deploying a Nutanix cluster running Nutanix AHV and AOS on Cisco UCS hardware with Fabric Interconnects (FIs) provides a resilient, high-performance hyperconverged infrastructure. Combining Nutanix with UCS Fabric Interconnects requires proper VLAN configurations, network mapping, and a seamless Foundation process.Furthermore, managing multi-cluster environments or advanced management services often requires deploying Prism Central. In this guide, we will walk through the end-to-end architecture: deploying a 3-node Nutanix AHV/AOS cluster, followed by deploying Prism Central as a VM on an ESXi host, registering Prism Element to it, and configuring network settings via the GUI.Architecture Overview & PrerequisitesArchitecture Topology Cluster Nodes: 3 x Cisco UCS C-Series Rack Servers (or UCS B-Series Blades) Control Plane: 2 x Cisco UCS Fabric Interconnects (FI 6400 / 6300 Series) in High Availability mode (FI-A and FI-B) Storage & Hypervisor: Nutanix AOS & Nutanix AHV

Hi Everyone,I wanted to share a real-world scenario I recently encountered regarding Prism Central account lockouts and see how the community handles similar setup challenges.The Issue:Our primary local administrator account on Prism Central kept getting locked out unexpectedly. After inspecting the logs, we traced the issue to an external automated log integration (like a SIEM/Splunk collector) executing API calls using stale credentials.Even after disabling the integration at the source and resetting the admin password, the lockout behavior occasionally persisted due to cached sessions or residual background API requests.How We Resolved It: Unlocked the user via CLI: Connected via SSH to Prism Central and ran: Bash ncli user unlock name=<Username> Created a Dedicated Admin Account: To isolate human administrative tasks from automated services, we provisioned a new, dedicated local admin account specifically for management. Isolated Integration Services: Assigned dedi

Hello,Today we tried to connect our Prism Central instances to Nutanix Central (Cloud).All PC are connected, but at Nutanix Central there are no permissions to see anything in my registered PC domains.I read that the User in Nutanix Central (my Account for this is my Email address) must be the same as in my local Prism Central.I have created a local User identically Like e-mail address for Nutanix, created an authorization policy with role prism admin and added my local User.That does Not Work.Where is the mistake? Thanks in advance and Kind regards,Thomas 

As part of product integration workflow, we want to create a "Volume Group Disk" using "Disk Recovery Point". The operation is performed using golang sdk. The SDK uses following API to perform the operation.    - Create a new Volume Disk: https://developers.nutanix.com/api-reference?namespace=storage&version=v4.0.a3Workflow: Create "Virtual Machine" Recovery Point. Capture VM & Disk Recovery Point EXT IDs from response. Using the captured Disk Recovery Point EXT ID, create Volume Group Disk.Issue:Step #2 in above workflow errors out with Authorization Error when invoked with user having custom role.  Response: {5013 Operation failed {"data":{"error":[{"message":"Failed to authorize the request due to The request http://172.30.30.15/api/volumes/v4.1/config/volume-groups/19513a28-1f19-457b-55cd-dae3d781c540/disks is not authorized from IAM","code":"PLAT-10007","locale":"en_US","errorGroup":"RBAC_AUTHORIZATION_ERROR","severity":"ERROR","$objectType":"volumes.v4.error.AppMessage"}]

For teams moving from VMware to AHV, what has been the biggest surprise - good or bad?

Hello,I am faced this error when foundation nutanix , if any one faced this error??

Hello  everyone,I have a quick question for discussion regarding Nutanix cluster expansion and licensing.Currently, I have a 3-node cluster running with a specific license type. I am planning to expand this cluster by adding 3 additional nodes. However, these new nodes will be licensed under a different tier (e.g., Starter vs. Pro).My questions for the community are:Is it technically supported to have mixed license tiers within the same Nutanix cluster?Does the cluster require all nodes to share the exact same license tier for it to function properly and remain compliant?I would appreciate hearing your experiences or insights on whether this mixed-license configuration is feasible or if I must standardize the license tier across all nodes in the cluster.Looking forward to your feedback. Thanks!

Regarding Access of Prism Central Access, I have try to access but no luck and also please guide me the step to access the CLI of CVM

When I make an API on Prism Central, I get the appropriate result. Perhaps, when I make same API call on PE, by just changing IP to PE, response is 404 not found.e,g,: root@ahv:~# curl -k -u admin:'****'   -H "Accept: application/json"   "https://<PE>:9440/api/vmm/v4.2/ahv/config/vms/{UUID}"{    "message": "The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again."} PC version and PE version: 7.5.1Any pointers, what we might have been missing?

I recently faced a challenging issue where a user account on Nutanix Prism Central was getting locked out every hour.The Challenge:Initially, the account was linked to Splunk integration. Even after we completely removed the integration with Splunk, the account lockout issue persisted, which indicated that the locking mechanism was still active somewhere in the environment.The Troubleshooting Process:Since removing the integration did not resolve the problem, it was clear that the issue wasn't just a simple misconfiguration of the old integration but rather a deep-seated credential issue tied to that specific account within the Prism Central environment.The Solution:To bypass the persistent lockout issue, I created a new dedicated Admin user account on Prism Central. By migrating the required administrative tasks to this new user, we successfully eliminated the recurring lockout, and the environment became stable again. 

i need to decrease  the cvm memory size , i know that nutanix doesn’t support that but is there work  around to do that , and the cluster is fresh and has no workload ,and it is production cluster 

After performing the procedure described in KB-15880 (HOW TO: Renew expired "APLOS" and "PRISMSERVICE" certificates where the last Prism Central upgrade is over two years old), we enabled CMSP (Microservices Infrastructure).After enabling CMSP, we were no longer able to access Prism Central.The following error message is displayed when accessing the Prism Central web console:"upstream connect error or disconnect/reset before headers. reset reason: connection failure"SSH access to the Prism Central VM is available, and there are no issues with the cluster status. All services appear to be running normally.