Reference Guide

Kerberos enablement on Nutanix Hyper-V clusters
10 Dell EMC XC Series Appliances and XC Core Systems Best Practices for Running Windows Server 2016 with
Hyper-V | A01
3 Kerberos enablement on Nutanix Hyper-V clusters
After AOS version 5.1.3, NTLM is not used to access the SMB3 shares. Kerberos must be set up
on all Nutanix Hyper-V clusters. For more information, see:
https://portal.nutanix.com/#/page/docs/details?targetId=HyperV-Admin-AOS-v55:hyp-kerberos-
enable-t.html
3.1 Kerberos time
Time skew should not be more than 5 minutes.
https://technet.microsoft.com/en-us/library/jj852172(v=ws.11).aspx
3.1.1 Time considerations
3.1.1.1 About Network Time Protocol (NTP)
Accurate time on the hypervisor and the Controller VM (CVM) on all XC Series clusters, regardless
of the hypervisor type (ESXi, KVM, or Hyper-V) being run. Syncing to three or five external
Stratum
One time sources, the same as used by your Active Directory (AD) servers.
• Accurate timestamps are also important for troubleshooting interactions with third-party software
products, which may require synchronized time between the hypervisor and the Controller VM to
determine which files to back up.
• Accurate time synchronization between Nutanix clusters paired in Disaster Recovery (DR)
configurations is important so that snapshots do not expire too quickly or too late.
• Graphs in the Prism interface rely on the CVM time. Incorrect time skews graphs, especially in
relation to other monitoring platforms, which rely on other clock sources.
3.1.1.2 Configuring NTP servers
To add (or delete) an NTP server entry, do the following:
1. In Prism, on the main page, click the Gear icon.
2. On the Gear menu (see Main Menu Options), select NTP Servers.
3. On the NTP Servers dialog box, do one of the following.
a. To add an NTP server, in the NTP Server box, type the server IP address or fully qualified host
name and then click Add. The name or address is added to the HOST NAME OR IP ADDRESS
list (below the NTP Server field).
b. To delete an NTP server entry, in the Servers list, click the delete (x) icon for that server.
4. In the dialog box that appears to verify the action; click OK. The server is removed from the list.
3.1.1.3 Configuring Time Zone
The Nutanix Controller VM (CVM) defaults to Pacific Time, specifically America/Los_Angeles time
configuration. Failure to configure the time zone correctly results in NCC warnings.
1. To change the time zone across all CVMs in the cluster, issue the following command:
$ ncli cluster set-timezone timezone=cluster_timezone