Skip to main content
Solved

Manual failover path for synchronous Protection Policy (AHV) when Prism Central is unreachable

  • Sep 25, 2026 5:23 PM UTC
  • 7 replies
  • 154 views

We're designing a Metro/synchronous replication setup between two AHV clusters (PRD and DR), using a single Prism Central instance deployed at a third site to manage both clusters, host the Witness Service, and run our Protection Policies / Recovery Plans.

Additional context: DR is also running some VMs directly (on a separate, non-replicated local container) due to a temporary memory capacity constraint on PRD. These VMs are not part of the synchronous Protection Policy — they're independent workloads currently living in DR.

Our question: If the third site with the PC becomes completely unreachable at the same time PRD goes down, what is the supported method to manually promote the DR-side replicas and bring the protected VMs online at DR?

Best answer by JeroenTielen

When that happens you need to restore prism central from the pcbr on the dr cluster. When pc is up and running you can start your recovery plans. 

View original
This topic has been closed for replies.

7 replies

JeroenTielen
Forum|alt.badge.img+8
  • Vanguard
  • Answer
  • Sep 25, 2026 5:31 PM UTC

When that happens you need to restore prism central from the pcbr on the dr cluster. When pc is up and running you can start your recovery plans. 


  • Author
  • Voyager
  • Sep 25, 2026 6:03 PM UTC

What about when the 3rd site is ESXi running PC?


JeroenTielen
Forum|alt.badge.img+8

O wow and that pc is a single pc vm ???

 

that is why I always design a pc per failure domain and connect them via availability zones.  


  • Author
  • Voyager
  • Sep 25, 2026 6:15 PM UTC

So, run a PC in prod and DR and then use the witness service vm in the 3rd location would be the best option?


JeroenTielen
Forum|alt.badge.img+8

That is the safest yes. And the use Nutanix Central for single management pane. 


LMohammed
Forum|alt.badge.img+2
  • Vanguard
  • Sep 30, 2026 11:40 AM UTC

Hi ​@khenney 
Nutanix recommends placing the Prism Central/witness in a separate fault domain so that it can distinguish a cluster failure from an inter-site network failure!

 


LMohammed
Forum|alt.badge.img+2
  • Vanguard
  • Sep 30, 2026 11:42 AM UTC

I’m always encouraging that customers before production, perform a DR test specifically covering PRD failure + Prism Central/Witness failure simultaneously !