Workspace Foundry
Deploy, migrate, and validate Citrix & Horizon on Nutanix AHV.
Approval-gated automation for repeatable deployments and cross-broker migrations. Workspace Foundry provisions infrastructure on Nutanix AHV via Prism Central v4, discovers existing Citrix and Horizon estates, translates configurations, executes cohort waves with dry-run plans, and verifies what was built.
Step-by-step target configuration and pre-flight validation.
The multi-step wizard connects directly to your registered Prism Central environment. It inspects available clusters, storage containers, and subnet overlays, then verifies credentials, Active Directory domains, and software distribution shares.
- Automatic cluster and AHV network subnet discovery
- Real-time credential testing against Prism Central and Active Directory
- Selectable database backends: external enterprise SQL or lab SQL Express
Approval bound to the plan hash. Zero unexpected changes.
No deployment runs blindly. Workspace Foundry executes a complete dry-run compile, generating a full JSON plan and calculating its SHA-256 fingerprint. Approvals are cryptographically tied to that exact hash: if any target parameter shifts, execution fails closed.
- Preview VM specs, vCPUs, memory, disk attachments, and IP allocations
- Inspect prerequisite probes and verification conditions before committing
- Full JSON plan export for GitOps change requests and CAB documentation
Watch every VM probe, script execution, and verification live.
The run monitor provides total visibility over deployment progress. If an environmental timeout occurs (such as a DNS delay or domain join glitch), the engine presents failure guidance, safe retries, and skip-with-acknowledgement controls without restarting the entire run.
- Real-time WebSocket event streaming with sub-step duration clocks
- Built-in failure diagnosis with inline remedy suggestions
- Idempotent step execution allowing safe retries with parameter fixes
Verified deliverables and component health reports.
At the conclusion of each deployment, Workspace Foundry generates an evidence report detailing every provisioned AHV entity, network MAC address, active HTTPS binding, and health probe. Deliverables are stored in PostgreSQL for permanent compliance auditing.
- Health verification for StoreFront, NetScaler VIPs, and Horizon UAG
- Automated certificate binding inspection and TLS configuration checks
- Permanent audit ledger exportable to PDF and JSON for CAB documentation
Checksummed installers, packages, and golden OS images.
Maintain repeatable standards across your entire AHV estate. The software library enforces SHA-256 cryptographic verification across vendor packages—including CVAD ISOs, Horizon Connection Server installers, NetScaler VPX qcow2s, App Volumes, and DEM—alongside sysprep-ready golden OS images.
- Cryptographic SHA-256 validation on every uploaded package
- Automated golden image lifecycle with sysprep and VirtIO driver verification
- Role-gated approvals ensuring only sanctioned binaries touch infrastructure
Discover existing Citrix & Horizon estates and translate to AHV.
Migrate between brokers and architectures with zero guesswork. Workspace Foundry performs read-only discovery of existing Citrix, StoreFront, NetScaler, Horizon, UAG, vCenter, and App Volumes estates into immutable snapshots. It then translates discovered entities into target AHV constructs—categorizing items into build, carry over, or unsupported with clear remediation advice.
- Supports Citrix-to-Citrix, Horizon-to-Horizon, and Horizon-to-Citrix migrations
- Translates MCS catalogs, delivery groups, published apps, and Horizon pools
- Carries App Volumes packages & assignments, DEM configuration, and App Layering
Phased cohort execution with an isolated UAT validation stage.
De-risk complex EUC migrations through phased cohort waves. Workspace Foundry groups desktop pools, applications, and users into governed waves, executes pre-flight dry runs, provides an isolated UAT validation stage between seed and cutover, and executes fast cutover with full rollback protection.
- Phased wave lifecycle: Seed, Discovery, UAT Validation, Cutover, and Rollback
- Migrates SMB shares & DFS folders to Nutanix Files, Group Policy, and DNS
- Live step ledger with safe retry, skip with acknowledgement, and ServiceNow tracking
Tested, repeatable architectures for AHV.
Pre-built infrastructure blueprints designed according to vendor best practices, with automated network binding and health verification.
Citrix Minimal
CVAD 2507 CU1 + NetScaler 14.1A production-grade, highly available baseline deployment designed for Nutanix AHV. Installs Delivery Controller with local License Server, configures StoreFront with SSL certificates, and configures NetScaler VPX with StoreFront load balancing and external gateway authentication.
- Citrix Delivery Controller + License Server
- Citrix StoreFront (HTTPS / TLS 1.3)
- NetScaler VPX Load Balancer & Access Gateway
- External SQL Server or Automated SQL Express
Omnissa Horizon Minimal
Horizon 2606 + UAG 26.06Streamlined Omnissa Horizon infrastructure deployment on AHV. Provisions the Horizon Connection Server, handles domain enrollment, deploys the Unified Access Gateway (UAG) appliance, and completes mutual registration and tunnel routing.
- Horizon Connection Server 2606
- Unified Access Gateway (UAG) 26.06 Appliance
- Automated Certificate Enrollment & Binding
- AHV Network Segment & Routing Validation
Citrix NVD Pod
NVD 2158 · Enterprise HANutanix Validated Design architecture for mission-critical Citrix environments. Deploys redundant Controllers, StoreFront servers, and NetScaler VPX pairs across AHV clusters with anti-affinity policies and automated SQL Server Always On listener configuration.
- Multi-VM Redundant Controllers & StoreFront Pods
- NetScaler VPX High-Availability (HA) Pair
- SQL Server Always On Availability Groups
- Prism Central Anti-Affinity & Multi-Cluster Placement
Horizon NVD Pod
NVD 2173 · Enterprise HANutanix Validated Design architecture for enterprise Horizon deployments. Provisions redundant Connection Servers, dual load-balanced UAG appliances, App Volumes Manager pairs, and Dynamic Environment Manager (DEM) integration on Nutanix Files.
- Redundant Horizon Connection Servers with AD LDS
- Dual Unified Access Gateways behind NetScaler VPX
- App Volumes Manager Pair on SQL Listener
- DEM Profile & Migrated Shares on Nutanix Files
Built with safety boundaries.
Designed for enterprise environments where stability, predictability, and auditability are non-negotiable.
Prism Central Pinned TLS
Certificates are verified and pinned during environment registration to safeguard against man-in-the-middle attacks on the management network.
Plan Immutability
Deployments are strictly isolated from interactive UI changes. If the target environment changes during planning, the plan hash invalidates automatically.
Append-Only Audit Trail
Every probe result, API payload, user approval, and error log is recorded in an immutable PostgreSQL database for post-deployment verification.