3.3 Nutanix Licensing Tiers, Add-ons, and Pulse Telemetry

Nutanix Licensing Tiers, Add-ons, and Pulse Telemetry

Quick Summary: Nutanix delivers its core platform software through the Nutanix Cloud Infrastructure (NCI) licensing framework, packaged into three capability editions: Starter, Pro, and Ultimate. Workload requirements can be augmented with specialized add-ons such as Nutanix Flow Network Security (microsegmentation) and Nutanix Unified Storage (NUS). Licensing can be managed through connected 1-click cloud synchronization or manual air-gapped file transfers. Complementing platform licensing, Pulse Telemetry provides proactive system health analytics and automated support case generation by securely transmitting diagnostic vitals to Nutanix Insights over outbound HTTPS.

---

1. Nutanix Software Licensing Tiers (NCI)

Nutanix has modernized its software licensing portfolio under the Nutanix Cloud Platform (NCP) architecture. The foundational compute and storage virtualization software is branded as Nutanix Cloud Infrastructure (NCI). NCI decouples software licensing from underlying server hardware, allowing licenses to be dynamically transferred across hardware refresh cycles, OEM server vendors, and public cloud environments (such as Nutanix Cloud Clusters / NC2 on AWS and Microsoft Azure).

NCI software is tiered into three distinct editions designed to align with varying enterprise workload demands:

+-------------------------------------------------------------------------+
|                              NCI ULTIMATE                               |
|   Includes all Pro features PLUS:                                       |
|   - Synchronous Replication / Metro Availability (RPO = 0)              |
|   - Software Data-at-Rest Encryption (Native KMS / External KMIP)       |
|   - Advanced Security Auditing & Compliance Hardening                   |
+-------------------------------------------------------------------------+
|                                NCI PRO                                  |
|   Includes all Starter features PLUS:                                   |
|   - Full Data Efficiency (Inline Compression, Dedup, Erasure Coding)    |
|   - Multi-Site Asynchronous Replication & NearSync (RPO down to 20 sec) |
|   - Nutanix Guest Tools (NGT) & Cross-Hypervisor Disaster Recovery      |
|   - Multi-Cluster Prism Central Management                             |
+-------------------------------------------------------------------------+
|                              NCI STARTER                                |
|   - Core Distributed Storage Fabric (DSF) with Redundancy Factor 2 (RF2)|
|   - Basic VM Lifecycle Management on AHV or VMware ESXi                 |
|   - Single-Site Deployments & Remote Office / Branch Office (ROBO)      |
|   - Basic Asynchronous Replication between matching Starter clusters    |
+-------------------------------------------------------------------------+

Detailed Tier Comparison Matrix

Metric Sizing Models

NCI licenses are primarily sized and entitled based on:

• Core Capacity: The total number of physical CPU cores installed across all hypervisor nodes in the cluster.
• Flash/Storage Capacity (TB): The raw storage tier capacity or usable capacity allocated to the storage pool.

---

2. Nutanix Add-on Software Portfolio

In addition to the core NCI platform tiers, organizations can selectively license specialized software add-on engines to address specific operational, security, and storage requirements:

Nutanix Flow Network Security

Flow Network Security is an application-centric microsegmentation software engine embedded directly within the AHV hypervisor kernel via Open vSwitch (OVS):

• Granular East-West Firewalling: Traditional perimeter firewalls only inspect traffic crossing network boundaries (North-South). Flow enforces stateful inspection between virtual machines residing on the same VLAN or physical host (East-West).
• Category-Driven Policies: Policies are applied declaratively using Prism Central Categories rather than IP addresses.
• Automated Threat Isolation & Quarantine: Suspicious or infected virtual machines can be instantly quarantined from the network with a single click in Prism.

Nutanix Unified Storage (NUS)

Nutanix Unified Storage consolidates multiprotocol enterprise storage services onto the same hyperconverged cluster without requiring standalone SAN or NAS hardware:

• Nutanix Files: A software-defined, scale-out file server providing SMB (2.1, 3.0) and NFS (v3, v4) exports for user home directories, enterprise file shares, and application data.
• Nutanix Objects: A highly scalable, S3-compatible object storage solution designed for backup targets, unstructured analytics, and cloud-native applications.
• Nutanix Volumes: Exposes block-level storage over iSCSI to external physical servers or non-virtualized database clusters (e.g., physical Microsoft SQL Failover Cluster Instances or Oracle RAC).

Nutanix Cloud Manager (NCM)

NCM augments Prism Central with advanced hybrid cloud automation:

• NCM Intelligent Operations: Uses machine learning algorithms to calculate predictive storage/compute capacity runway, automatically identify zombie VMs, and recommend right-sizing resource adjustments.
• NCM Self-Service (formerly Calm): Multi-tier application orchestration, automated blueprint deployments, and self-service catalog provisioning across private and public clouds.

---

3. Licensing Activation and Renewal Workflows

Nutanix provides two distinct operational pathways for applying, managing, and renewing licenses, ensuring compliance regardless of enterprise network connectivity.

Pathway A: Connected (1-Click) Cloud Licensing

For clusters with outbound access to the internet, the 1-Click Licensing workflow automates entitlement management:

1. The administrator navigates to Prism > Settings > Licensing.
2. Click Manage Licenses and authenticate directly with Nutanix Support Portal credentials (portal.nutanix.com).
3. Prism communicates directly with the licensing portal, inspects the cluster's active core and storage configuration, and reconciles against available software licenses in the organization's account.
4. Entitlements are applied automatically, and licensing status is immediately marked as active without manual file handling.

Pathway B: Disconnected (Air-Gapped / Dark-Site) Manual Licensing

Government defense facilities, financial institutions, and secure utility networks often operate in "dark-site" environments completely disconnected from the public internet. Nutanix accommodates these environments using a bidirectional manual file-exchange workflow:

+-------------------------------------------------------------------------+
|                        AIR-GAPPED ENVIRONMENT                           |
|                                                                         |
|   +-----------------------------------------------------------------+   |
|   | Nutanix Cluster (Prism Element / Prism Central)                 |   |
|   |                                                                 |   |
|   |   1. Generate Cluster Summary File (.csf)                       |   |
|   |   4. Upload & Apply License File (.lf)                          |   |
|   +-------------------+---------------------------------------------+   |
+-----------------------|-------------------------------------------------+
                        | (Export via Secure Media Transfer)
                        v
+-------------------------------------------------------------------------+
|                   INTERNET-CONNECTED WORKSTATION                        |
|                                                                         |
|   2. Log in to https://portal.nutanix.com                               |
|   3. Upload .csf -> Allocate Entitlements -> Download License File (.lf)|
+-------------------------------------------------------------------------+

1. Generate Cluster Summary File (.csf): Inside the air-gapped Prism interface, navigate to Settings > Licensing, click Manage Licenses, and select Generate Cluster Summary File. Download the resulting file (e.g., cluster-summary-2026.csf), which contains cluster UUIDs, hardware serial numbers, installed core counts, and currently applied licenses.
2. Transfer to Internet Workstation: Using approved data transfer protocols (such as an encrypted optical disc or audited USB drive), move the .csf file to a system with internet connectivity.
3. Allocate on Nutanix Support Portal: Log into the Nutanix Support Portal (portal.nutanix.com), navigate to Licenses > Manage Licenses, and upload the .csf. Select the desired software tier (e.g., NCI Pro) and applicable add-ons from available inventory, then click Save.
4. Download License File (.lf): The portal generates an encrypted, digitally signed license file (e.g., cluster-license-2026.lf).
5. Apply License File in Prism: Transfer the .lf back into the secure facility, navigate to the Prism Licensing screen, click Upload License File, and select the .lf. The cluster validates the digital signature and activates the licensed capabilities immediately.

[!IMPORTANT] When decommissioning a cluster or replacing physical nodes, administrators must execute the Unlicense workflow in Prism before tearing down the hardware. Unlicensing generates an updated summary file that, when uploaded to the Support Portal, re-credits the software cores and storage capacity back into the organization's license inventory for reassignment.

---

4. Pulse Telemetry Architecture and Nutanix Insights

What is Pulse Telemetry?

Pulse is a lightweight, automated telemetry engine embedded inside the AOS software stack on every Controller VM. Pulse periodically inspects low-level system health, diagnostic counters, and component performance, packaging this telemetry into encrypted data bundles sent back to Nutanix Insights.

Network Architecture & Security Boundary

To ensure enterprise security and simplify perimeter firewall administration, Pulse adheres to a strict egress-only communication pattern:

• Outbound Only over TCP Port 443: Telemetry data is transmitted strictly over outbound HTTPS (TCP port 443) to endpoints under insights.nutanix.com.
• Zero Inbound Connectivity Required: Nutanix never opens inbound network ports into customer clusters; the communication is exclusively client-initiated.
• Forward Proxy Support: Pulse fully supports routing outbound traffic through enterprise forward HTTP/HTTPS proxy servers, including proxies requiring basic authentication.

Data Privacy Guarantee

Enterprise customers frequently handle highly sensitive, regulated data (HIPAA, PCI-DSS, GDPR). Nutanix provides a categorical architectural guarantee regarding Pulse telemetry payloads:

• What Pulse Collects: Physical chassis serial numbers, disk model numbers and SMART status, hypervisor and AOS build versions, memory DIMM ECC error counts, cluster IOPS/latency counters, processor utilization metrics, and Nutanix Cluster Check (NCC) diagnostic test logs.
• What Pulse NEVER Collects: Pulse never accesses, scans, or transmits customer data payloads, guest virtual machine file systems, database records, user passwords, encryption keys, or memory contents.

+-------------------------------------------------------------------------+
|                        Customer Nutanix Cluster                         |
|                                                                         |
|   +-------------------+       Diagnostic Vitals (Port 443 Outbound)     |
|   | Controller VM     |---------------------------------------------+   |
|   | (Pulse Telemetry) |  (Hardware Metrics, Disk SMART, NCC Logs)   |   |
|   +-------------------+                                             |   |
+---------------------------------------------------------------------|---+
                                                                      v
                                                      +-------------------+
                                                      | Nutanix Insights  |
                                                      |   Cloud Engine    |
                                                      +---------+---------+
                                                                |
                 +----------------------------------------------+---------+
                 |                                                        |
                 v                                                        v
+---------------------------------+      +--------------------------------+
| Automated Proactive Support     |      | Smart Proactive Guidance       |
| - Support case opened           |      | - Known vulnerability alerts   |
| - Diagnostic bundle attached    |      | - Firmware mismatch detection  |
| - Replacement drive dispatched  |      | - Capacity exhaustion warnings |
+---------------------------------+      +--------------------------------+

Automated Support Case Generation and Predictive Maintenance

Pulse is the data engine powering Nutanix Insights, an AI-driven predictive support service operated in the Nutanix Cloud:

1. Predictive Hardware Failure: If Pulse telemetry detects a solid-state drive accumulating bad blocks or SMART read errors above a critical threshold, Nutanix Insights detects this before the drive completely fails.
2. Automated Case Generation: Nutanix Insights automatically generates a Nutanix Support ticket on behalf of the customer, attaches relevant NCC diagnostic logs, and notifies the cluster administrator.
3. Proactive Parts Dispatch: In many cases, a replacement drive is dispatched to the customer datacenter before local storage performance or data availability is impacted.

Operational Consequences of Disabling Pulse

While Pulse is enabled by default, administrators have the option to disable it in Settings > Pulse. Disabling Pulse does not interrupt virtual machine workloads or local storage performance, but it incurs significant operational penalties:

• Loss of Proactive Case Generation: Hardware component degradation goes unmonitored by Nutanix Support until an outage occurs.
• No Nutanix Insights Advisories: The cluster loses automated matching against known software bugs, security vulnerabilities (CVEs), and field advisories.
• Extended Support Escalations: When troubleshooting issues, administrators must manually generate and upload heavy diagnostic log bundles (NCC bundles), significantly increasing Mean Time to Resolution (MTTR).