Nutanix Cloud Infrastructure

Please advise on vulnerability mitigation for nutanix-sa-57 security advisory and possible fix release date. We understand that upgrading to AOS 7.6 is the available option at the moment.  The hardware is 3-node Lenovo HX650 V3 cluster.Please confirm the dark site upgrade sequence with the below bundles is correct, or if it can be done better.1    LCM Framework Bundle 3.4.0.12    NCC LCM Bundle 6.0.0.13    Nutanix Compatibility Bundle4    Prism Central LCM Bundle 7.65    Foundation LCM Bundle 5.116    AOS LCM Bundle 7.67    AHV LCM Bundle 11.38    LENOVO Firmware LCM Bundle 3.0All bundles to be uploaded and run from PE LCM except the "Prism Central Bundle LCM Bundle" from the PC LCM.

wanted to share a real-world scenario I recently encountered regarding Prism Central account lockouts and see how the community handles similar setup challenges.The Issue:Our primary local administrator account on Prism Central kept getting locked out unexpectedly. After inspecting the logs, we traced the issue to an external automated log integration (like a SIEM/Splunk collector) executing API calls using stale credentials.Even after disabling the integration at the source and resetting the admin password, the lockout behavior occasionally persisted due to cached sessions or residual background API requests.

What actually happens?Traditional backups copy entire files or virtual disks, which takes time and slows down your system. Nutanix uses a Redirect-on-Write (RoW) architecture combined with instantaneous metadata pointers.1️⃣ 𝘛𝘩𝘦 𝘗𝘰𝘪𝘯𝘵𝘦𝘳𝘴 𝘍𝘳𝘦𝘦𝘻𝘪𝘯𝘨 (𝘐𝘯𝘴𝘵𝘢𝘯𝘵):- Instead of copying your data blocks, Nutanix copies the metadata map (the index or map that tells the system where your data blocks live on the physical disks).* The Process: The system takes a snapshot of this map, which takes milliseconds because metadata is incredibly small.* The Result: The original data blocks become read-only for that specific point in time.2️⃣ 𝘛𝘩𝘦 𝘙𝘦𝘥𝘪𝘳𝘦𝘤𝘵-𝘰𝘯-𝘞𝘳𝘪𝘵𝘦 𝘔𝘦𝘤𝘩𝘢𝘯𝘪𝘴𝘮 (𝘕𝘰 𝘖𝘷𝘦𝘳𝘩𝘦𝘢𝘥):- The moment after the recovery point is created, your Virtual Machine (VM) keeps running and writing new data.* Old Data: Stays exactly where it was, safely frozen as your recovery point.* New Data: Instead of overwriting old data, any new changes are written t

Hello,I am experiencing an issue where VM IP addresses are no longer displayed in Prism after changing the network environment of a Nutanix cluster.I would appreciate any advice or information about similar cases.Environment Nutanix AHV-based cluster Multiple VMs running on the cluster Both Windows and Linux guest operating systems are present Nutanix Guest Tools (NGT) are not being used What happened The network environment of the Nutanix cluster was changed. The Gateway configuration of the existing cluster/service network was also changed. The cluster was then connected to a different network environment. The cluster was powered on again. The cluster and VMs are operating normally after the change. Current symptoms All VMs have valid IP addresses configured inside their guest operating systems. Network connectivity from the VMs to the Gateway and external networks is working normally. The VM network adapters and VLAN configuration appear to be functioning correctly

We're designing a Metro/synchronous replication setup between two AHV clusters (PRD and DR), using a single Prism Central instance deployed at a third site to manage both clusters, host the Witness Service, and run our Protection Policies / Recovery Plans.Additional context: DR is also running some VMs directly (on a separate, non-replicated local container) due to a temporary memory capacity constraint on PRD. These VMs are not part of the synchronous Protection Policy — they're independent workloads currently living in DR.Our question: If the third site with the PC becomes completely unreachable at the same time PRD goes down, what is the supported method to manually promote the DR-side replicas and bring the protected VMs online at DR?

Hello all,We are encountering an issue with a user who updated ESXi to version 8.0u3e onto nutanix Supermicro 8155 G8. The problem has arisen while attempting to update hardware components; the LCM update fails because `ipmitool` is missing from the hosts.The cluster is located in a "dark site," so updates are loaded via direct upload and AOS is at 7.5.1.10 version.Do you know of any workarounds?Thanks in advice,Alex

Hi,Since upgrading to PC 7.6 / AOS 11.2 we’ve tipped over the edge on available CPU resources and are experiencing some performance issues (Spikes in CPU Wait, application failures) we’ve engaged with support who identified ADS/Solver being unable to move VM’s to reduce hotspots, because all hosts are hotspots, and we’re basically oversubscribed.  I won’t deny this, but we weren’t experiencing so many issues before the update. Support advice is to reduce vCPU allocation on vm’s that don’t need them. We’ve got a lot of VM’s reporting as over provisioned, the majority of these are windows VM’s with 2 vCPU’s our testing has shown that with only a single vCPU windows really doesn’t work well. So i have some questions:Has anyone else noticed an increase in consumed CPU resources following update to PC/AOS 7.6 Do others experience the same with windows server VM’s, or is it a feature of our environment that 2 vCPU’s is the minimum If you do experience the same, do you just live with a large

As per the infrastructure deployment SDK:Typically, Dell ships their hardware pre-configured to automatically install AHV after you first turn the node on. The downside is that, when you turn the node on for the first time, it runs a series of scripts to install the hypervisor and create the CVM. Customers often turn the machines off before the preparations are finished because they don’t know to leave the machines on. It’s usually less complex to use a standalone Foundation VM on bare-metal nodes.after power on the node and wait about an hour, the AHV is installed and the CVM not created, what can cause this issue and what is the expected time for the node to install the AHV and create the CVM?

While deploying Nutanix three nodes cluster we are not able to ping default gateway from all the hosts.Please suggest end customer network team is working on the same but do anyone has faced similar kind of issue.

Hi everyone,I am trying to stop/destroy a 3-node Nutanix AHV cluster running on HPE ProLiant DX hardware in an offline/dark-site environment to reconfigure network IPs.Whenever I run "cluster stop" or "cluster destroy", the command fails with the following critical error: "CRITICAL MainThread cluster:3611 Destroy is in progress on the nodes: ['192.168.10.18']" Environment details:- Hardware: HPE ProLiant DX (Enterprise AOS)- Nodes: 3 (192.168.10.14, 192.168.10.15, 192.168.10.18)- Current State in 'cluster status': * CVM: 192.168.10.14 Up * CVM: 192.168.10.15 Up, ZeusLeader * CVM: 192.168.10.18 Up, Unconfiguring- User VMs: All powered off (State: Off)What is happening:- On CVM .18, ~/data/logs/genesis.out is stuck in a loop reporting: "INFO node_manager.py:1124 Unconfiguring node... Using legacy firewall framework as node is in unconfigured state"- Inspecting $(which cluster) around line 3611 shows an RPC check against the SVMs checking for ongoing destroy operations. Because node .18 r

Hello.After update to AHV 11.0.1.6, AOS 7.5.1.10 the behaviour of our cluster changes.Before the update, the machines were distributed evenly across all hosts at startup.Now the clients started on small number of hosts. When the host reaches 90% CPU-Util, the next host will be used.On our hosts we have nVidia A16 installed. With 60VMs on one host (were using 2Q and 4Q profiles) the VMs don’t work as expected anymore.Nutanix support means, that this behaviour is normal.. I don’t think so.Is there a chance to achieve a better distribution of the VMs?With the actual situation a normal work is for our users not possible. Thanks in advance for your answers. RegardsDirk Emmermacher

We are trying to create a cluster of three nodes on Cisco UCS Server C240 M7 but while deploying we are getting an error message “Remote foundation has not picked up the imaging request, yet user is advised to manually check foundation logs. cluster creation for cluster id will be timed out”. Tried to install Prism Central, Cisco Intersight, AHV & AOS as per recommended versions provided by support team but still, we are facing. Please assist. Do any one have encountered an error message like this till now ? Waiting for a quick response if possible.

Hi Nutanix Community Team,I hope you are all doing well.I am reaching out here because I am currently facing a roadblock with my Nutanix Multicloud Expert application and could use some guidance.To give you some context:I have successfully completed all required technical certifications (including NCA, NCP-MCI, NCP-Cloud Native, NCP-BC, and NCS-Core).I have actively contributed to the community by publishing technical troubleshooting blogs and articles.I previously sent an email to the EMEA team/program coordinators regarding my application status, the sponsor requirement, and how to update my submission, but unfortunately, I haven't received a response yet.Additionally, the system currently prevents me from submitting a new or updated application form.Could anyone guide me on how to get this sorted out, or help escalate my case to the right person in the EMEA team so I can finalize my application?Thank you so much for your continuous support!Best regards, 

Government Cloud Clusters customers now have a wider choice of AWS deployment locations when their security and authorization requirements do not call for AWS GovCloud. Nutanix Government Cloud Clusters (GC2) 1.2.0 now supports all 34 commercial AWS regions listed in the current NC2 on AWS support matrix. GC2 1.2.0 arrived as part of the July 2026 platform release cycle, support for AWS GovCloud US-East, AWS GovCloud US-West and AWS European Sovereign Cloud Germany remains in place. The full region matrix appears in the GC2 1.2.0 Deployment and User Guide.For some public-sector and regulated customers, that distinction is useful. Their systems may require FedRAMP or GovRAMP, formerly StateRAMP, related controls and an authorization path, but the workload itself may not require AWS GovCloud. Matching the deployment boundary to the workload AWS commercial US East and US West regions include services authorized at FedRAMP Class C, formerly Moderate. AWS also states that its East/West Mode

Our AHV cluster consists of 3 nodes (running AHV version 11.0.1 and AOS version 7.5.1.1).Node C (host IP: 192.168.155.236, CVM IP: 192.168.155.239) experienced an issue, so we re-imaged it using Foundation with new IP addresses (host IP: 192.168.155.229, CVM IP: 192.168.155.230). Node C is now running newer versions—AHV 11.1 and AOS 7.5—but attempts to add it back to the cluster have failed.Is there a way to add Node C back to the cluster?

Hello,Today we tried to connect our Prism Central instances to Nutanix Central (Cloud).All PC are connected, but at Nutanix Central there are no permissions to see anything in my registered PC domains.I read that the User in Nutanix Central (my Account for this is my Email address) must be the same as in my local Prism Central.I have created a local User identically Like e-mail address for Nutanix, created an authorization policy with role prism admin and added my local User.That does Not Work.Where is the mistake? Thanks in advance and Kind regards,Thomas 

like another user i am running into the same problem. can someone help me. ​​​​​​I have Nutanix CE running in my homelab, and I wanted to deploy CVAD on it. However, it appears that you need a plugin to get it working. Unfortunately, I can’t download the plugin because it requires my account to be activated, which I can’t do since I don’t have a Serial Number, Service Tag, or Software Registration ID  The doc im referencinghttps://portal.nutanix.com/page/documents/solutions/details?targetId=BP-2079-Citrix-Virtual-Apps-and-Desktops:nutanix-ahv-plug-in-for-citrix.html

Hi Everyone,I wanted to share a real-world scenario I recently encountered regarding Prism Central account lockouts and see how the community handles similar setup challenges.The Issue:Our primary local administrator account on Prism Central kept getting locked out unexpectedly. After inspecting the logs, we traced the issue to an external automated log integration (like a SIEM/Splunk collector) executing API calls using stale credentials.Even after disabling the integration at the source and resetting the admin password, the lockout behavior occasionally persisted due to cached sessions or residual background API requests.How We Resolved It: Unlocked the user via CLI: Connected via SSH to Prism Central and ran: Bash ncli user unlock name=<Username> Created a Dedicated Admin Account: To isolate human administrative tasks from automated services, we provisioned a new, dedicated local admin account specifically for management. Isolated Integration Services: Assigned dedi

Deploying a Nutanix cluster running Nutanix AHV and AOS on Cisco UCS hardware with Fabric Interconnects (FIs) provides a resilient, high-performance hyperconverged infrastructure. Combining Nutanix with UCS Fabric Interconnects requires proper VLAN configurations, network mapping, and a seamless Foundation process.Furthermore, managing multi-cluster environments or advanced management services often requires deploying Prism Central. In this guide, we will walk through the end-to-end architecture: deploying a 3-node Nutanix AHV/AOS cluster, followed by deploying Prism Central as a VM on an ESXi host, registering Prism Element to it, and configuring network settings via the GUI.Architecture Overview & PrerequisitesArchitecture Topology Cluster Nodes: 3 x Cisco UCS C-Series Rack Servers (or UCS B-Series Blades) Control Plane: 2 x Cisco UCS Fabric Interconnects (FI 6400 / 6300 Series) in High Availability mode (FI-A and FI-B) Storage & Hypervisor: Nutanix AOS & Nutanix AHV

In enterprise environments, maintaining high availability and zero-data-loss capabilities is critical for core operational services. This case study details a real-world project where we engineered and deployed an end-to-end Business Continuity and Disaster Recovery (BCDR) solution for an enterprise client across two geographically separated datacenters (Primary Data Center and Secondary DR Site).By leveraging Nutanix AOS NearSync Replication, Protection Domains, and Prism Central Disaster Recovery Orchestration, we successfully reduced the client's Recovery Point Objective (RPO) from hours to under 5 minutes while enabling automated, non-disruptive DR testing.The Customer Challenge & RequirementsThe customer operated a legacy environment with critical production workloads (Databases, ERP, and Core Infrastructure Services). Their legacy backup and DR framework suffered from several challenges: High RPO/RTO Gaps: The previous disaster recovery mechanism relied on traditional night-t

For teams moving from VMware to AHV, what has been the biggest surprise - good or bad?

I recently faced a challenging issue where a user account on Nutanix Prism Central was getting locked out every hour.The Challenge:Initially, the account was linked to Splunk integration. Even after we completely removed the integration with Splunk, the account lockout issue persisted, which indicated that the locking mechanism was still active somewhere in the environment.The Troubleshooting Process:Since removing the integration did not resolve the problem, it was clear that the issue wasn't just a simple misconfiguration of the old integration but rather a deep-seated credential issue tied to that specific account within the Prism Central environment.The Solution:To bypass the persistent lockout issue, I created a new dedicated Admin user account on Prism Central. By migrating the required administrative tasks to this new user, we successfully eliminated the recurring lockout, and the environment became stable again. 

i need to decrease  the cvm memory size , i know that nutanix doesn’t support that but is there work  around to do that , and the cluster is fresh and has no workload ,and it is production cluster 

After performing the procedure described in KB-15880 (HOW TO: Renew expired "APLOS" and "PRISMSERVICE" certificates where the last Prism Central upgrade is over two years old), we enabled CMSP (Microservices Infrastructure).After enabling CMSP, we were no longer able to access Prism Central.The following error message is displayed when accessing the Prism Central web console:"upstream connect error or disconnect/reset before headers. reset reason: connection failure"SSH access to the Prism Central VM is available, and there are no issues with the cluster status. All services appear to be running normally.

As part of product integration workflow, we want to create a "Volume Group Disk" using "Disk Recovery Point". The operation is performed using golang sdk. The SDK uses following API to perform the operation.    - Create a new Volume Disk: https://developers.nutanix.com/api-reference?namespace=storage&version=v4.0.a3Workflow: Create "Virtual Machine" Recovery Point. Capture VM & Disk Recovery Point EXT IDs from response. Using the captured Disk Recovery Point EXT ID, create Volume Group Disk.Issue:Step #2 in above workflow errors out with Authorization Error when invoked with user having custom role.  Response: {5013 Operation failed {"data":{"error":[{"message":"Failed to authorize the request due to The request http://172.30.30.15/api/volumes/v4.1/config/volume-groups/19513a28-1f19-457b-55cd-dae3d781c540/disks is not authorized from IAM","code":"PLAT-10007","locale":"en_US","errorGroup":"RBAC_AUTHORIZATION_ERROR","severity":"ERROR","$objectType":"volumes.v4.error.AppMessage"}]