How It works

Morning all!I have a 5 node cluster (5.20/ESXi7.0U3).  its about 4-5 years old.  Just got approval to upgrade and ordered a new 5 node cluster.Question:  Is it best to expand current cluster and remove a node at a time, or set up net new and migrate?Looking for suggestions and experience.Thanks in advance!TJ

Can someone provide a brief explanation of Nutanix local key manager and how it handles the following in ‘???’:key access: access to the management console is restricted to authorized individuals abased on job function. changing / updating keys: encryption keys are updated from the management console, software encryption (rekey button) if necessary. revoking keys: ??? (when does revoking keys happen?) recovery keys: ??? (how do you recover if you have the key backup?) archiving keys: keys are archived (backed up) from the management console, managed keys where you download the key backup by setting up a recovery password to decrypt the backup file.  activity logs: ??? (is there activity logs for keys? If yes, where is this stored and how long is the retention before the activity is overwritten?)BTW: I have this link already Native Local Key Manager (nutanix.com) but is does not have any details of the Thanks in advance. 

Below are the top knowledge base articles for the month of March 2023.KB 1540 - [AOS Only] What to do when /home partition or /home/nutanix directory on a Controller VM (CVM) is full KB 7503 - NX Hardware [Memory] - DIMM Error handling and replacement policy KB 8885 - Alert - A15039 - IPMI SEL UECC Check KB 1381 - NCC Health Check: host_nic_error_check KB 1113 - HDD or SSD disk troubleshooting KB 4409 - LCM: Life Cycle Manager Troubleshooting Guide KB 2090 - AHV host networking KB 13476 - Domain Manager Internal Service has Stopped Working (helios) KB 3786 - Alert - A1081 - CuratorScanFailure KB 2473 - NCC Health Check: cvm_memory_usage_check KB 2475 - NCC Health Check: storage_pool_space_usage_check KB 5228 - NCC Health Check: pcvm_disk_usage_check KB 8514 - NCC Health Check: fs_inconsistency_check KB 13150 - NCC Health Check: cfs_fatal_check KB 13136 - NCC Health Check: microservice_infrastructure_status_check KB 13870 - Prism Virtual IP is configured but unreachable alert and VIP be

Below are new knowledge base articles published on the week of March 26-April 1, 2023.KB 13758 - NCC health check: usb_nic_status_check KB 14480 - LCM 2.5: Intel hardware DCF firmware upgrade failure since the KCS Policy Control Mode is currently set to "RESTRICTED" KB 14488 - Error: Protection domain 'XXXX' has entities in clone. Delete the clones before deleting this protection domain KB 14502 - ASMFD may cause instability on Linux VMs running on AHV KB 14504 - After enabling CMSP on PC the protected entities under remote AZ shows error "Failed to Fetch" KB 14510 - How to extend storage on SQL database servers managed by NDB KB 14530 - Nutanix Files: "Invalid start IP address" error during deployment KB 14532 - Unable to install NGT as CDROM is not recognized in a Windows VM KB 14538 - VMware Update Manager (VUM) service crashing caused by a large amount of connections made to vCenter KB 14564 - Powering on the VM on the AHV host may fail with the "Unexpected combination of memoryBac

Hi, How can I disable ani-affinity rules ? 

Below are new knowledge base articles published on the week of March 19-25, 2023.KB 13943 - NCC Health Check: mantle_keys_mirroring_check KB 14416 - HW : Sporadic Link down alerts in IPMI Health event logs on a G8 hardware KB 14491 - Nutanix Object - Limitations of an Object-enabled cluster KB 14495 - Genesis service keeps crashing if a public key with a leading space character added to the cluster in PRISM Cluster Lockdown Settings KB 14496 - Era DB-Server Agent upgrade operation failed. Reason: cannot import name 'convert_bytes_to_string' KB 14503 - Data Protection - Error: Specified protection domain XXXX is protecting a Vstore which has id yyyy KB 14512 - Cluster Expansion fails if the new node was previously a Compute-Only node with network segmentation enabled KB 14514 - HPE DX380 G10 Plus: Filesystem Errors and I/O errors on a hypervisor boot volume KB 14519 - AHV and ESXi Lenovo Whitley platform hosts updated to UEFI 1.31 may restart due to NMINote: You may need to log in to th

Hello,I would like to change the password expiration for a local user I have created in the prism element.I’ve tried to change it via the command:nutanix@cvm$ sudo chage -M <MAX-DAYS> admin I’ve managed to do that to the admin user, but when I change “admin” with my local user, It says that the user does not exist in etc/passwd. Is their any way of changing the password expiration for a local user that it is not “admin”.(The user is a cluster admin).

Below are new knowledge base articles published on the week of March 12-18, 2023.KB 13746 - NCC health check: LongRunningSubtasks KB 13913 - LCM inventory fails with the error "nothing to open" on pc.2021.9.0.5 and later due to frequent registration/unregistration KB 14088 - NCC Health Check: check_host_password_expiry KB 14307 - Unable to start docker due to inode exhaustion in Objects cluster. KB 14391 - AHV upgrade or host rolling reboot tasks may fail on AHV clusters with AMD CPU during test_cluster_config pre-check KB 14433 - Objects: Bucket deletion failed with "The bucket you tried to delete is not empty. You must delete all versions in the bucket." error KB 14450 - Oracle DB in Oracle Dataguard configuration shows high latency / lag while performing NDB operation KB 14467 - Cluster will fail to upgrade through LCM if AOS version is 5.10.x or 5.5.x KB 14477 - NCC check may fail to complete due to vCenter connectivity failure KB 14479 - AHV hosts or VMs may lose network connectiv

Greetings, Does the Nutanix Local Key Manager (LKM) satisfy the recommendations/requirements to safely implement the Data at Rest Encryption?The documentation at: https://portal.nutanix.com/page/documents/details?targetId=Nutanix-Security-Guide-v6_5:wc-security-data-encryption-aos-wc-c.html has the warning: "Caution: DO NOT HOST A KEY MANAGEMENT SERVER VM ON THE ENCRYPTED CLUSTER THAT IS USING IT!! Doing so could result in complete data loss if there is a problem with the VM while it is hosted in that cluster." I too share this concern, which led me to investigate External Key Managers, but I am wondering how does using the LKM alleviate this risk? Also, as stated in the Nutanix Bible as well as here: https://portal.nutanix.com/page/documents/solutions/details?targetId=TN-2026-Information-Security:TN-2026-Information-Security "Now that Nutanix supports its own native LKM, Nutanix also takes the KEK and wraps it with a 256-bit encryption key called the machine encryption key (MEK). The

Below are new knowledge base articles published on the week of March 5-11, 2023.KB 12446 - NCC Health Check: pc_to_ahv_secondary_ip_reachability_check KB 14162 - Foundation Failing Due to Incorrect Date or TimeNote: You may need to log in to the Support Portal to view some of these articles.

Below are new knowledge base articles published on the week of February 26-March 4, 2023.KB 13178 - NCC Health Check: cluster_node_count KB 13481 - Increasing /dev/sda3 filesystem partition size on Policy VM upgraded to 3.6.1 KB 13653 - Nutanix Database Service | Pulse Telemetry KB 14018 - Alert - A130365 - PauseStretchTriggeredByWitness KB 14032 - Upgrading to NDB 2.5.1 for HA-enabled setups fails KB 14303 - Unable to delete a Nutanix Storage Container KB 14326 - AOS upgrade to 6.1.x (or above) stuck on network segmentation enabled cluster with mixed hypervisors. KB 14366 - Nutanix Database Service - MongoDB brownfield to greenfield conversion fails after upgrade from a version lower than 2.5.1 to a higher one KB 14367 - IPMI Network Configuration Requirements & Best Practices KB 14372 - Data Lens - how to re-enable file server after been disabled KB 14373 - Storage Container Usage may increase after AOS upgrade in ESXi clusters with Thick Provisioned virtual disks larger than 4Ti

We have our Nutanix 5 node cluster installed with VMware vSphere 7.0U3. RF=2 so I should be bale to withstand a 1 node failure. I would like to test the HA capability of VMware/Nutanix by taking a node offline abruptly and ensure everything works as expected before placing production workloads on it.I was thinking of placing a test VM on a node and then pulling the power cables and ensuring that VM is powered up on a remaining host.Does anyone have any better or preferred way to test HA?

Below are the top knowledge base articles for the month of February 2023.KB 1540 - [AOS Only] What to do when /home partition or /home/nutanix directory on a Controller VM (CVM) is full KB 7503 - NX Hardware [Memory] - DIMM Error handling and replacement policy KB 8885 - Alert - A15039 - IPMI SEL UECC Check KB 1381 - NCC Health Check: host_nic_error_check KB 4409 - LCM: Life Cycle Manager Troubleshooting Guide KB 3827 - Alert - A130087 - Node Degraded KB 1113 - HDD or SSD disk troubleshooting KB 2090 - AHV host networking KB 2473 - NCC Health Check: cvm_memory_usage_check KB 13870 - Prism Virtual IP is configured but unreachable alert and VIP becomes permanently unreachable observed on AOS 6.5.1 and later KB 3786 - Alert - A1081 - CuratorScanFailure KB 8514 - NCC Health Check: fs_inconsistency_check KB 4519 - NCC Health Check: check_ntp KB 13150 - NCC Health Check: cfs_fatal_check KB 5228 - NCC Health Check: pcvm_disk_usage_check KB 8094 - NCC Health Check: disk_status_check KB 4158 -

Below are new knowledge base articles published on the week of February 19-25, 2023.KB 13146 - Flow Network Security may block traffic using virtual IP address or forwarded traffic KB 13587 - List of IAM Migration Alerts during Upgrade to Prism Central pc.2022.9 KB 14017 - Alert - A130354 - FailoverTriggeredByWitness KB 14308 - Network performance of VXLAN interfaces inside VMs severely degraded if VM is running on AHV host with Broadcom BCM57414 NICs with Hardware Generic Receive Offload (GRO) feature enabled KB 14332 - Metric IO stats missing from Prism or the Insights Portal KB 14343 - Prism Central - Templates view is empty for LDAP Users on Prism Central with enabled Microservices Platform (CMSP) KB 14344 - Prism Central: report is missing values or shows only a dash (-) KB 14351 - How to obtain quota limits via API after enabling Calm Policy Engine KB 14353 - Unable to change the VPN route priority in Nutanix DRaaS KB 14369 - AHV Metro/SyncRep : Services on Pacemaker unable to ru

I got existing 3 nodes with Dell XC740 running with AHV. And I’ve order new 3 nodes x Dell XC750 but it came with factory install ESXi 7.0.Question is any special instruction do before adding new node to the existing cluster and I would like to new node XC750 to run the same AHV hypervisor in existing cluster too. So, can I follow expand step here Prism 6.5 - Expanding a Cluster (nutanix.com)?Thank you.

Below are new knowledge base articles published on the week of February 12-18, 2023.KB 14236 - PSOD on Ice Lake processor platforms after upgrading to ESXi 7.0 U3i due to an issue with microcode 0x0d000375 KB 14297 - Security Dashboard throws the error "Enable microservices infrastructure with internet connectivity for Security Dashboard to work" KB 14309 - NDB - MySQL software profile creation fails for commercial MySQL versions KB 14310 - NDB - Failed to create the software profile with error message: "local variable \'db_version\' referenced before assignment" KB 14318 - User defined Life cycle rule does not work in object bucketsNote: You may need to log in to the Support Portal to view some of these articles.

I’d like to sort my powered off VMs under AHV by last date they were powered on?Can you share your thoughts on how to display through AHV?

Hello All,I tried to install AOS 6.5.x with foundation 5.3.2 and nutanix but I faced from some issues. please find the below logs for reference2023-02-16 09:10:32,277Z INFO [1081/2430] Hypervisor installation in progress2023-02-16 09:11:02,318Z INFO [1111/2430] Hypervisor installation in progress2023-02-16 09:11:32,358Z INFO [1141/2430] Hypervisor installation in progress2023-02-16 09:12:02,371Z INFO [1171/2430] Hypervisor installation in progress2023-02-16 09:12:32,413Z INFO [1201/2430] Hypervisor installation in progress2023-02-16 09:12:32,595Z WARNING Hypervisor installation takes longer than usual2023-02-16 09:13:02,453Z INFO [1231/2430] Hypervisor installation in progress2023-02-16 09:13:32,486Z INFO [1261/2430] Hypervisor installation in progress2023-02-16 09:14:02,525Z INFO [1291/2430] Hypervisor installation in progress2023-02-16 09:14:32,563Z INFO [1321/2430] Hypervisor installation in progress

Hi there, I need some explanation about fault tolerance in a particular situation.The configuration is one 4-nodes block with each nodes configured with 2 SSDs and 4 HDDs. Also Fault Tolerance FT=1 is configured.In that case, how many disk/node are protected ?

Below are new knowledge base articles published on the week of February 5-11, 2023.KB 13748 - Accessing the IPMI on-site KB 13807 - NCC Health Check: witness_fault_domain_check KB 14190 - SQL Server Standard Edition is not able to utilize all the CPUs assigned to the VM KB 14218 - Nutanix Database Service - VM provisioning fails if AD gMSA whitelist is used KB 14229 - After upgrading to pc.2022.9, issue with upgrade of microservice infrastructure OR MSP base services KB 14233 - Enabling Distributed Autorid on systems upgraded to Nutanix Files 4.2 or later KB 14243 - Nutanix Database Service operations fail with invalid authentication credentials KB 14278 - Alert - A20032 - Containers are marked for removal KB 14284 - NDB - Clone Database Failed KB 14295 - NDB Postgres DB Server provisioning fails with "Failed to configure storage for database" with 1Gb memory profile KB 14306 - After upgrading Prism Central from pc.2022.6 to pc.2022.9, the Security Dashboard might fail to runNote: You

Hi!We are running about 100 vm’s in our cluster - so find out a specific information manually for each vm is pretty hard.I want to get the information which vm’s are stored in a specific storage container with acli on cvm.I know that i could perform acli vm.get <vm-name>  and look for the source_nfs_path of the vmdisks but it is way too much effort for 100 vm’s. Another way would be establishing a connection via SSH to /storage-container/.acropolis/vmdisk of of the cvm but i only see the vmdisk-uuids there, not the vm names i need.Is there any possibility, maybe with a for loop on each vm and a grep filter?

Hello Team,I hope you are doing well,I am learning more about Nutanix platform ,  can please share document(s) or KB(s) on how the physical disks are used in a Nutanix host? ie if the disk in slot 1 is reserved for CVM or m.2 is reserved to install the OS,I want to have my own guide that shows all models with their own disk layout according to their possible combinations -single SSD , dual or quad SSDs the rest of the slots are populated with HDDs -hybrid-or all slots are populated with SSDs ..ect.BRAdel

Below are new knowledge base articles published on the week of January 29-February 4, 2023.KB 12456 - NCC Health Check: ahv_gateway_check KB 13445 - Alert - A130377 - StaleVolumeGroup KB 13611 - Alert - A130382 - SynchronousReplicationPausedOnVM KB 13739 - Alert - A300441 - RecoveryPlanDynamicSubnetExtensionDeletionFailure KB 13773 - Alert-A130385 - SyncedVolumeGroupRunningAtSubOptimalPerformance KB 13796 - Alert - A130386 - AutoPlannedFailoverOfVolumeGroup KB 14126 - LCM Pre-check: test_ptagent_status KB 14173 - The cluster raises "A130184: Data At Rest Encryption key backup warning: Last user backup taken at MMM DD" even after performing the backup. KB 14211 - OpenShift 4.12 installation via the “openshift-install create install-config” command fails KB 14222 - Nutanix Database Service - Ubuntu/Debian DB Provisioning is failing due to static IP allocation failure KB 14224 - LCM UI is not available and inventory task stops at 0% KB 14234 - Alert - A160054 - File Server Partner Server

Below are the top knowledge base articles for the month of January 2023.KB 1540 - [AOS Only] What to do when /home partition or /home/nutanix directory on a Controller VM (CVM) is full KB 7503 - NX Hardware [Memory] - DIMM Error handling and replacement policy KB 8885 - Alert - A15039 - IPMI SEL UECC Check KB 2473 - NCC Health Check: cvm_memory_usage_check KB 13870 - Prism Virtual IP is configured but unreachable alert and VIP becomes permanently unreachable observed on AOS 6.5.1 and later KB 4409 - LCM: Life Cycle Manager Troubleshooting Guide KB 1113 - HDD or SSD disk troubleshooting KB 2090 - AHV host networking KB 3827 - Alert - A130087 - Node Degraded KB 13150 - NCC Health Check: cfs_fatal_check KB 4519 - NCC Health Check: check_ntp KB 8514 - NCC Health Check: fs_inconsistency_check KB 5228 - NCC Health Check: pcvm_disk_usage_check KB 3786 - Alert - A1081 - CuratorScanFailure KB 6153 - NCC Health Check: default_password_check and pc_default_password_check KB 4141 - Alert - A1046 -

Below are new knowledge base articles published on the week of January 22-28, 2023.KB 12548 - NCC Health Check: attached_vm_volume_different_recovery_clusters_check KB 12922 - Alert - A130369 - DistributedOplogFeatureDisabled KB 13040 - NCC Health Check: attached_vm_vg_protection_check KB 13100 - Alert - A130371/A130372/A130373/A130374/A130375 - DrNetworkSegmentationRemote KB 13513 - Alert - A160157 - FileServerVMcoreDetected KB 13889 - CRUD operations are not permitted on a stale Volume Group KB 13956 - CMSP enabled PC upgrade fails with error "Max retries done: unable to push docker image msp-registry.cmsppc.nutanix.com:5001/alpine:3.12" KB 13983 - Allow Out-of-band (OOB) snapshot for 3rd patry backups on RF1 VM KB 14177 - ESXi upgrade stuck at 14% due to vMotion taking longer than 15 minutes KB 14186 - Nutanix Files - Manual DNS verification fails even if the DNS entries are properly created KB 14195 - Acropolis service may crash with "Unexpected CAS error while trying to delete an