Hello, we have several customers running on Nutani...
# nutanix-eucc
cst
03/26/2026, 7:59 AMHello, we have several customers running on Nutanix, unfortunately we installed with KVM image as the Nutanix image was not yet proposed by Citrix. We are planning to migrate to the Nutanix image but we are a bit concerned by the following on the documentation:
Native OTP is unsupported on the Nutanix Image. Should we stay on the KVM image then despite Citrix asking to migrate to the Nutanix one?
j
James Kindon
03/26/2026, 10:54 AM@Dave Brett
c
cst
03/26/2026, 12:06 PMI also asked the question to support but it's been a couple days they do not answer on the chat bot anymore...
I'm still number 11 in the queue, waiting for a technician for 3h now...
cst
03/26/2026, 1:15 PMjust had an answer from support: "Migrating from the legacy KVM-based NetScaler VPX to the Nutanix AHV image typically results in the loss of Native OTP functionality. There does not appear to be a supported method to retain Native OTP on the Nutanix AHV image at this time."
cst
03/26/2026, 1:16 PMI'm not sure about the level of seriousness of Citrix with that... they force us to move to the Nuanix Image but this image is incomplete and we will lose the features required by customer. If we don't then we are not covered by support or vulnerable. I really do not know what we can do and what should we announce to customer.
d
Dave Brett
03/26/2026, 1:18 PMI have followed up with Citrix again on this, as soon as I get clarification I will reply here. Been trying to get hold of someone there this week.
o
Oz Zy
03/26/2026, 6:56 PMYeah, there were a few callouts on unsupported features I was meaning to follow up on as well, but most of them I wasn't too concerned about, since they were niche stuff. I presume the list will be knocked down to reach some parity with the KVM-based one on some of these, as I don't even see the other one now that concerned me a bit before, which was something about WAF, I think, on Gateway for Auth for that feature. Doesn't look like it is on the limitations list anymore. Or I could have hallucinated that from somewhere. 😐
d
Dave Brett
03/26/2026, 9:07 PMRaised it internally here also so hitting it up from 2 angles. Will let you know what I find out.
c
cst
03/27/2026, 8:15 AMthanks @Dave Brett
n
Neal Dolson
04/01/2026, 3:50 PMNot 100% sure, but I'm almost positive we tried using the 14.1 KVM firmware for the latest/patched build and were unable to upgrade using it, even in CLI it said running KVM on Nutanix AHV is no longer supported and wouldn't proceed with the upgrade.
Neal Dolson
04/01/2026, 3:54 PMUsing the AHV firmware and the "migrate from Citrix Ready KVM VPX to officially supported NetScaler VPX on Nutanix AHV" method did work for us, but if you depend on features not available in the AHV version AND there's a new vulnerability disclosed, as was the case last week, a bad rock and a hard place spot to be. The migration wasn't completely smooth either, did some weird things with custom cipher groups, unbinding custom certs tied to management IPs, etc.
c
cst
04/28/2026, 8:29 AMI've had a feedback from Citrix, apparently they'll propose the Native OTP feature on the Nutanix image on the next release: NetScaler release 14.1-72x
cst
04/28/2026, 8:29 AMUnfortunately they have no timeline for us... Customer is getting more and more anxious about it and migrating to another hypervisor is not possible at the moment (invest in hardware, network etc...)
cst
04/28/2026, 8:30 AMany feedback on your side @Dave Brett ?
d
Dave Brett
04/28/2026, 11:11 AMwill DM you
2 Views