Deployment Success

Security PoliciesTraditional data centers use firewalls to implement security checks at the perimeter—the points at which traffic enters and leaves the data center network. Such perimeter firewalls are effective at protecting the network from external threats. However, they offer no protection against threats that originate from within the data center and spread laterally, from one compromised machine to another.The problem is compounded by virtualized workloads changing their network configurations and hosts as they start, stop, and migrate frequently. For example, IP addresses and MAC addresses can change as applications are shut down on one host and started on another. Manual enforcement of security policies through traditional firewalls, which rely on network configurations to inspect traffic, cannot keep up with these frequent changes and are error-prone.Network-centric security policies also require the involvement of network security teams that have intimate knowledge of network

Hello,Seeking for advice, I have 3 nodes cluster having problem with node B DIMM is undetected. I’m planning to reseat my DIMM, if I will just manually move the VMs to node A and C then perform a shutdown on node B without entering maintenance mode does the VM will join back to node B?Can please also share a link to a document to refer for the procedure.

I am connecting 5 Nutanix Nodes to two Cisco Nexus 9K cores.The MGMT ports are connected to TOR FEX then 1-10 Gig Fibre to Core1 and 1-10 Gig Fibre to Core2 from each node. All 10 are VPC ports in trunk mode, switchport trunk native vlan # with spanning-tree port type edge trunk.My question is, I found a Nutanix article #000002455 for Cisco Nexus Recommended Pratices and they state you should add to the configuration spanning-tree bpduguaard enable and spanning-tree bpdufilter enable.Cisco says they dont recommend these spanning-tree settings.Who is right?

Does anyone facing Storage performance issues on Hyper converged infra for VDI environment.

Hi everyone,If you have 5 blocks with 8 nodes installed in the same rack, will you keep using RF = 2 or 3, or will you use fault tolerance domain to block instead?

Hi all,I have a small question.For the pre-installed AHV nodes with CVM, could we able to upgrade only AOS version before creating cluster? Because the AHV version already same version as our desired version, but AOS version is not same.  I know the way to re-install AHV and AOS by Foundation VM, but the way takes long time. Therefore I' d like to update for only AOS if we can.In the other hands, we can upgrade AOS  from Prism UI so I will able to upgrade AOS after creating a cluster. So this question is just for my reference.My environment is belowAOS : 5.15.2 (want to upgrade to 5.15.5)AHV : 20170830.434

If I want to migrate Linux (Centos,RHEL,Ubuntu/SUSE) Vms from VMware to AHV using Nutanix move then is below information enough.Below are the configuration settings to look out for when migrating a Linux VM using credentials. Ensure ssh localhost using only password authentication, ie. set “PasswordAuthentication yes” in sshd_config Ensure using sudo, user assume root privileges without entering a password Ensure read and write permission for /tmp. root access, sshd service running If this is correct then I can normally migrate the Linux VMs same as I migrated the Windows VM?

Hi,I would need some guidance on enabling Aide on AHV and CVM and strong password policy for the hardening.I found the guide on this link: Hardening Controller VMIf I enable the AIDE on AHV and CVM. Is there anything need to be done? Additional appliance to deploy?

I have a Nutanix cluster with 4 hosts and 4 blocks. Is it possible to remove two nodes from Cluster ?

Dear All,I’ve got a question?I am in the process of Moving Windows machines from a VMWare infrastructure to Nutanix.1 of my machines to a USB dongle for an application license.Could you tell me if it is possible to mount a USB dongle in nutanix like in VMWare?Thank you in advance

Hi all,I´m attempting to create one image from a disk stored inside a volume group.While I have succesfully tested image creation for standard disks using acli and api I didn´t find how to repeat the same task for disk stored inside Volume Group.As well documented here and in ther KB articles these sample commands works:ACLIacli image.create image-name container=default-container-nnnn source_url=nfs://127.0.0.1/default-container-nnnn/.acropolis/vmdisk/uuid image_type=kDiskImageAPI with curlcurl -X POST --header 'Content-Type: application/json' --header 'Accept: application/json' -d '{ "annotation": "cloned disk image", "image_type": "DISK_IMAGE", "name": "image-name", "vm_disk_clone_spec": { "disk_address": { "vmdisk_uuid": "UUID" }, "storage_container_uuid": "UUID" }}' 'https://PE-IP-ADDRESS:9440/PrismGateway/services/rest/v2.0/images/'But when I try to use the disk uuid of the disk inside a VG the commands fails both from ACLI than API.Any suggestion/workaround?Tha

Hi,A previous post by Jon from Nutanix stated that “Licenses are not tied to support agreements. Am I correct in assuming that support purchased/renewed for NX hardware covers both hardware and software support? Also is it safe to assume that the support level is not impacted by the license level on the node. For example, a node using AOS Pro license will NOT receive a higher level of support than a node using AOS Starter license if they both have production support. My understanding is that the only thing that impacts the support level is the type of support purchased, that is "Production Support vs "Mission Critical Support".   Thanks,--Zip

We are considering AHV for our environment. I notice that the OEM partner product list https://www.nutanix.com/partners/oem has fixed set of disks. Most of the hardware in the list are capable to be installed with more disks. For example Fujitsu servers are capable of 12 x 3.5 + 4 x 2.5 (on the rear),Can we utilize all disk slots in a configuration like 12 x 4TB NL-SAS + 4 x 1.92TB 2.5” SSD or 4 x 1.6TB NvME ?

Below are new knowledge base articles published on the week of January 10-16, 2021.KB Number Description KB 10489 Objects - Objects browser shows No Data Found when used with FQDN KB 10547 Nutanix Files - Prerequisites for Quota Configuration for NFS KB 10555 Nutanix Frame - Request to Delete All Personal Data KB 10562 Nutanix Files - Random delay in data synchronization between Linux and Windows clients with Multiprotocol Share KB 10566 ESXi host unresponsive after upgrade to 6.7 P03 or later due to AHCI driver issue KB 10588 [Nutanix Objects] Authentication fails after re-adding directory service with a different name  Note: You may need to log in to the Support Portal to view some of these articles.

Hardware TermsBMC: Baseboard management controller, the microcontroller that manages the motherboard. BIOS: Basic input/output system, the firmware that initializes the motherboard and runtime services on startup. HBA: Host Bus Adapter, a device that manages communication between storage media and other system components. SATA DOM: SATA disk on a module, the hypervisor boot drive for Nutanix platforms up to and including G5. M.2: mSATA 2, the hypervisor boot drive for Nutanix platforms G6 and later.Dell-Specific TermsiDRAC: Integrated Dell remote access controller, a software tool that lets you administer a server without needing physical access. iSM: iDRAC service module, a module that integrates iDRAC with an operating system. PTAgent: Power Tools agent, the software entity responsible for configuring the iSM. Firmware Entities: A collective term for all Dell firmware not related to iDRAC.Lenovo-Specific TermsIMM2: Integrated management module 2, a service processor that manages the

Is there anyway I could get all the task or activity of a particular VM? 

we are configuring protection domain, we can see there one option in entity protected/unprotected. can anyone please explained what is the use?

When looking through the IPMI event logs, you may come across a “General Chassis instruction” message that is asserted. This is event created when the node needs to be opened to conduct a replacement and the top cover is opened as a result.The chassis intrusion feature makes it difficult for a potential intruder to reset the sensor without authorization. Therefore, there is no physical button to reset the sensor on the node. The user has to reset this sensor in the IPMI web GUI, which is authenticated using administrator credentials.To find more information about this feature and instructions to reset the sensor, look at KB 1362 on the Support Portal.

In this Google-ready culture, many users will immediately turn to an internet search engine when seeking for information regarding a specific question or issue involving Prism. However, many users are unaware that Prism maintains an online help system which responds-to and changes depending upon which dashboard is currently being viewed within Prism.For example, a user may be interested in deploying a File Server and may have questions regarding this while reviewing the File Server dashboard within Prism. From that dashboard, simply clicking the global question mark icon from the top menu and selecting the “Help with this page” option will automatically open a new browser tab to the File Server Management section of the Prism Web Console Guide. What’s more, the specific version of the Prism Web Console Guide that is displayed corresponds to the current version of Prism from which it was launched.Further, some of the dialogue boxes within Prism also contain a question mark icon which wi

Nutanix offers enterprise ready hypervisor. Its integrated with Nutanix enterprise cloud OS stack. Below diagram shows how a single AHV node looks The AHV is built upon the CentOS KVM foundation and it include features like HA, live migration.KVM architecture consists of following components  KVM-kmod Libvirtd:An API, daemon and management tool for managing KVM and QEMU.  Qemu-kvm: A machine emulator and virtualizer that runs in userspace for every Virtual Machine (domain) For details about AHV architecture please refer following articleAHV

Hey all -We removed 2 nodes from 1 cluster and want to add them to another.  We disconnected from vCenter and then removed them from the cluster using PE.  When they were relocated to the new location, the vlan is the same and they could keep their same IP addresses, but the new cluster could not see them.  It sounds like the customer had configured Distributed switches on the old cluster.  Do I need to undo some of that networking to see the hosts?  Would bare metal foundation be a better option and put AHV on the nodes?  That is our next route, but I still think there is a problem with the network configured in ESX even for that.  Is there any documentation around undoing the vmware networking for bare metal?  With factory nodes, I would have just added them to the same vlan and assigned IPs using crashcart and then the cluster should have seen them.  Help!

Hi,First time attempting to install Nutanix. I’m experienced with VMWare, but I wanted to try out Nutanix, mainly as I read it will allow me to create a single-node cluster, using locally attached NVMe disks without the overhead (headache) of vSAN (that doesn’t work as a single-node).Running through the installer, I see I have to specify an AHV (equivalent of ESX?) boot disk and CVM boot disk that requires a disk of at least 200GB. If I understand correctly, CVM is the equivalent of vCentre Server (VCSA).Firstly, can I install this CVM somewhere else?Secondly, I don’t have a separate disk of >=200GB that I want to waste on CVM. I have a 128GB SSD that I would have used for data, but the installer won’t let me and I can’t use it for CVM either because it’s too small. If I can’t farm off the CVM to another device, is there a way to override this limitation? Even fat old VCSA only uses 72GB across its 13 disks. What is in CVM! These are my disks. As you can see, to install CVM on its o

Does anyone knows size of VM’s snapshot file? I am concern about disk space, but I also need to back up. Is there formula for calculate snapshot file size approximately?   

Hi! I've got several questions about the usage of v2 API which I have not been able to solve by myself after looking a little while.on some endpoints, for example, GET /alerts, GET /vms and a few more things are functioning for me as expected, but on other endpoints, such as POST /vms/{uuid}/set_power_state I am receiving the following response:{ "message": "Access is denied", "detailed_message": null, "error_code": { "code": 1100, "help_url": "http://my.nutanix.com" }}any idea what's causing it? I've been searching for detailed information on your error code (such as 1100 listed above) and couldn’t find. Is there any documentation to the error codes that  you can send me a link to?Also, in a few of the API endpoints I couldn’t understand exactly what is the expected query parameter to be sent.2 examples of endpoints I felt I am lacking knowledge what exactly meant to be sentGET /vms filter: Filter criteria - semicolon for AND, comma for OR. where can I find what counts as fi

Hello. I`m installing AOS in FoundationVM. I failed while installing AOS.The failure log is as follows: *************************************Mount Information********************************Token 19936: drive path /home/nutanix/foundation/tmp/sessions/20210105-165854-9/phoenix_node_isos/foundation.node_192.168.1.124.iso mounted to SP 192.168.1.91 by user USERIDUmount successful.stderr:2021-01-06 01:47:08,796Z ERROR Exception in <ImagingStepInitIPMI(<NodeConfig(192.168.1.124) @1b50>) @0210>Traceback (most recent call last):  File "foundation/decorators.py", line 77, in wrap_method  File "foundation/imaging_step_init_ipmi.py", line 269, in run  File "foundation/imaging_step_init_ipmi.py", line 180, in boot_phoenixStandardError: Failed to connect to Phoenix at 192.168.1.1242021-01-06 01:47:08,805Z ERROR Exception in running <ImagingStepInitIPMI(<NodeConfig(192.168.1.124) @1b50>) @0210>Traceback (most recent call last):  File "foundation/imaging_step.py", line 161,