GravityZone allows you to integrate Control Center with Nutanix Prism Element for high-class protection of your virtualization platform. You are able to integrate one or more Nutanix Prism Element clusters, either they are registered or unregistered to Nutanix Prism Central.

This article includes:

• Nutanix Prism Element integration overview
• How to upload the Security Server image in Nutanix Prism
• How to configure Security Server in Nutanix Prism

Nutanix Prism Element integration overview

To protect a Nutanix Prism Element cluster, you have to deploy a Bitdefender Security Server on each host. You can do this by running a remote installation task in GravityZone Control Center. However, the installation task may fail when the Nutanix Prism Element cluster is registered to Prism Central or because of another reason.

When Nutanix Prism Element is registered to Prism Central, GravityZone is unable to automatically upload the Security Server in Nutanix because of certain user restrictions. Therefore, you need to:

1. Upload the Security Server image in Nutanix Prism Central.
2. Run again the installation task in GravityZone Control Center.

When Nutanix Prism Element is not registered to Prism Central, but the remote installation task still fails, you need to:

1. Run again the installation task in GravityZone Control Center.
2. If the case, upload and configure Security Server in Nutanix Prism Element.

Important: The Nutanix Prism Element integration with GravityZone requires a Nutanix user with Cluster Admin or User Admin privileges. Please review these privileges when performing tasks in Control Center.

How to upload the Security Server image in Nutanix Prism

• Requirements
• Uploading Security Server in Nutanix Prism Central
• Uploading Security Server in Nutanix Prism Element

Requirements

Before starting Security Server upload and configuration in Nutanix Prism, you must have at hand:

• Nutanix Prism credentials.
• Bitdefender Security Server image in VMDK format. You can download it from Network > Packages in GravityZone Control Center.

Uploading Security Server in Nutanix Prism Central

You need to manually upload the Security Server image in Nutanix Prism Central when the Nutanix Prism Element cluster is registered to Prism Central. Follow these steps:

Important: Wait for the image to be both uploaded and updated. After that, run again the installation task in GravityZone Control Center.

1. Log in to Nutanix Prism Central.
2. Go to Explore > Images.
   
3. Click Add Image.
4. Make sure you have the Image File radio button selected and click Add File to select the Bitdefender image from where it is stored.
5. Check the image details:
   1. Under Image Name, keep the file original name: Bitdefender_SVE-SVA-Multi-Platform.vmdk. Otherwise, the Security Server installation will fail.
   2. Under Image Type, select Disk.
   3. Optionally, add an image description.
      
6. Click Save. The Security Server image upload begins and it can take several minutes. You can view the progress in Tasks.

Uploading Security Server in Nutanix Prism Element

This is how you manually upload the Security Server when Nutanix Prism Element in not registered to Prism Central:

1. Log in to Nutanix Prism Element.
2. Go to Settings > Image Configuration.
   
3. Click Upload Image. A new window appears.
4. Fill in the details:
   1. Name.
   2. Annotation.
   3. Select the image type: DISK.
   4. Select the preferred storage container.
5. Click Upload a file, then click Choose File to select the Security Server image from where it is stored.
6. Click Save.
   

The Security Server image upload begins and it can take several minutes. You can view the progress in Tasks.

Wait for the image to be both uploaded and updated.

How to configure Security Server in Nutanix Prism

Once you have the Security Server image uploaded in Nutanix Prism, you can either:

• Run a remote installation task in GravityZone Control Center. Security Server will be automatically configured.
• Manually configure Security Server in Nutanix Prism. That means you have to create a Security Server virtual machine, power it on and configure the Communication Server address in the Security Server console.

To configure a Security Server virtual machine you must follow these steps in Prism Element or in Prism Central:

1. Go to the virtual machines list and click Create VM.
2. Fill in the required details:
   1. Under General Configuration, enter a name and, optionally, a description.
   2. Under Compute Details, choose 2 VCPUs, 1 core per VCPU and 3 GB of memory.
      
   3. Under Disks, click "X" to remove the default CD-ROM disk, confirm the action and click Add New Disk. Configure the disk as follows:
      1. Type: Disk.
      2. Operation: Clone from Image Service.
      3. Bus Type: SCSI.
      4. Image: Select the Security Server image you have uploaded.
      5. Click Add.
         
   4. Under Network Adapters (NIC):
      1. Click Add New NIC.
      2. Choose the preferred network.
      3. Click Add.
   5. Under VM Host Affinity:
      1. Click Set Affinity.
      2. Select one of the hosts.
      3. Click Save.
         
3. Click Save. The virtual machine is created with the VM create with customize label.
4. Go to virtual machines list.
5. Select the Security Server virtual machine.
6. Click Power on.
7. Click Launch console and log in to Security Server by using the default credentials:
   1. User name: root
   2. Password: sve
8. Run the sva-setup command. You will access the appliance configuration interface.
   

   To navigate through menus and options, use the Tab and arrow keys. To select a specific option, press Enter.

9. Go to Communication Server configuration.
10. Enter the address of the Communication Server, including the port number 8443, using the following format

    https://Communication-Server-IP:8443

    Alternatively, you can use the Communication Server hostname instead of the IP address.

11. Select OK to save the changes.