The key manager built into Nutanix for software-only encryption. It runs locally on clusters of three or more nodes, or remotely through a registered Prism Central, usually for ROBO clusters of one or two nodes.
Also called local form: Cluster Localised Key Management Service.
Read more: Nutanix docs
In the Ultra Transcenders books
Each book explains Native KMS in context, with comparison tables and the common traps.
Terms in this definition
- Index field attributes
Settings applied to each field in an Azure AI Search index:
searchablefor full text,retrievableto return it,filterablefor exact-match$filter,sortable,facetablefor counts, andkeyfor the unique document ID. - Software-only encryption
Encryption of stored data by AOS itself, using AES-256 without special drives, with keys held in Native KMS or an external KMS. Enabling it is permanent.
- Agents (classic) API
First-generation Foundry Agent Service API, based on threads, messages and runs. It is deprecated, replaced by conversations and responses, and retires on 31 March 2027.
- Prism Central
A standalone instance, made up of either one VM or three in scale-out form, for monitoring and managing many clusters centrally.
- ROBO
Branch offices and similar small outlying sites. In vSphere estates they commonly run on two-node vSAN clusters or single hosts, and depot overrides in vSphere Lifecycle Manager allow them to update from a depot kept on site.
Related terms
- External KMS
A separate key server for encrypting data at rest. It is mandatory with SEDs and dual encryption, and optional for software-only encryption as an alternative to Native KMS.
- Key Management Server
Stores encryption keys protecting Nutanix data at rest. Options are External KMS, Cloud KMS, or Native KMS in a local or remote form.
- ROBO
Small remote locations, usually running one-node or two-node clusters. Native KMS hosted remotely on another cluster is supported there.