> ## Documentation Index > Fetch the complete documentation index at: https://infisical.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Sync certificates to Nutanix Prism Central > Update certificates on your Nutanix clusters. Install certificates managed in Infisical directly on your Nutanix clusters. When a certificate is renewed, it's automatically updated on the cluster with no manual intervention required. > [!NOTE] > > Certificate Syncs are configured per Application. First select which certificate to sync, then configure the Nutanix Prism Central destination. ## Prerequisites Before setting up the sync, gather the following from your Nutanix environment: * A **Nutanix Prism Central** instance reachable from Infisical over HTTPS (hostname or IP address, port default `9440`), either directly or via an [Infisical Gateway](https://infisical.com/docs/documentation/platform/gateways/overview.md). * A Prism Central account or API key with the **Cluster Admin** role on the target cluster. * A [Nutanix Prism Central Connection](https://infisical.com/docs/integrations/app-connections/nutanix-prism-central.md) correctly configured. ## Create a Nutanix Prism Central sync > [tab] Infisical UI > > 1. In your Application, go to the **Certificate Syncs** tab and select **Create Sync**. > > 2. Select the **Nutanix Prism Central** option. > > 3. Configure the **Destination**: > * **Nutanix Prism Central Connection**: Choose the connection to authenticate with. > * **Cluster**: From the list of clusters available in Prism Central, select the target cluster. > > 4. Configure the **Sync Options**: > * **Auto-Sync Enabled**: Automatically update the certificate on the Nutanix cluster whenever it is renewed or updated in Infisical. > > 5. Configure the **Details**: > * **Name**: A name for this sync. > * **Description**: Optional description. > > 6. Select the **Certificate Order** to sync. A certificate order is a certificate together with its renewals. > > 7. Review and click **Create Sync**. > [tab] API > > To create a **Nutanix Prism Central Certificate Sync**, make an API request to the [Create Nutanix Prism Central PKI Sync](https://infisical.com/docs/api-reference/endpoints/pki/syncs/nutanix-prism-central/create.md) API endpoint. > > ### Sample request > > > [!NOTE] > > > > Pass `filters` to describe the certificate this sync holds. This destination holds one certificate, so the > > filters have to match exactly one. Omit it and the sync starts empty, and you can set filters later. > > See [Certificate filters](https://infisical.com/docs/documentation/platform/pki/applications/certificate-syncs/overview#certificate-filters). > > ```bash Request theme={"dark"} > curl --request POST \ > --url https://app.infisical.com/api/v1/cert-manager/syncs/nutanix-prism-central \ > --header 'Authorization: Bearer ' \ > --header 'Content-Type: application/json' \ > --data '{ > "name": "my-nutanix-cert-sync", > "applicationId": "3c90c3cc-0d44-4b50-8888-8dd25736052a", > "description": "Push TLS cert to production Nutanix cluster", > "connectionId": "550e8400-e29b-41d4-a716-446655440000", > "destination": "nutanix-prism-central", > "isAutoSyncEnabled": true, > "filters": { > "certificateOrderIds": ["550e8400-e29b-41d4-a716-446655440000"] > }, > "destinationConfig": { > "clusterId": "a29facad-8d6e-4f64-b745-bceca6f990d6", > "clusterName": "prod-cluster-01" > }, > "syncOptions": { > "canImportCertificates": false, > "canRemoveCertificates": false > } > }' > ``` > > ### Sample response > > ```json Response theme={"dark"} > { > "pkiSync": { > "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a", > "name": "my-nutanix-cert-sync", > "description": "Push TLS cert to production Nutanix cluster", > "destination": "nutanix-prism-central", > "isAutoSyncEnabled": true, > "destinationConfig": { > "clusterId": "a29facad-8d6e-4f64-b745-bceca6f990d6", > "clusterName": "prod-cluster-01" > }, > "syncOptions": { > "canImportCertificates": false, > "canRemoveCertificates": false > }, > "applicationId": "3c90c3cc-0d44-4b50-8888-8dd25736052a", > "connectionId": "550e8400-e29b-41d4-a716-446655440000", > "createdAt": "2026-05-26T00:00:00.000Z", > "updatedAt": "2026-05-26T00:00:00.000Z" > } > } > ``` ## How it works Infisical automatically keeps your Nutanix Prism Central cluster certificate in sync: * Replaces the cluster's SSL certificate and private key whenever the certificate changes in Infisical. The cluster begins using the new certificate within a few seconds, with no restart required. > [!NOTE] > > Each Nutanix Prism Central sync targets a single cluster. To update multiple clusters, create one sync per cluster. ## Certificate management The Nutanix Prism Central Certificate Sync provides: * **Automatic Deployment**: Replace the SSL certificate on the target Nutanix cluster whenever the synced certificate changes in Infisical. * **Certificate Updates**: Push renewed certificates to the cluster automatically when auto-sync is enabled. > [!NOTE] > > Certificate removal isn't supported for Nutanix Prism Central. A cluster always has exactly one active SSL certificate, which can only be replaced, not deleted. > > For the same reason, this destination doesn't support [certificate filters](https://infisical.com/docs/documentation/platform/pki/applications/certificate-syncs/overview#certificate-filters). Select the certificate you want instead. ## Manual certificate sync You can manually trigger certificate synchronization to the Nutanix cluster using the sync certificates functionality. This is useful for: * Initial setup when deploying a certificate to a cluster for the first time * Testing certificate sync configurations * Force sync after making changes To manually sync certificates, use the [Sync Certificates](https://infisical.com/docs/api-reference/endpoints/pki/syncs/nutanix-prism-central/sync-certificates.md) API endpoint or the manual sync option in the Infisical UI. ## Certificate renewal behavior When a certificate is renewed in Infisical, the renewed certificate is automatically pushed to the Nutanix cluster on the next sync. If **Auto-Sync** is enabled, this happens without any manual action. ## FAQ > [accordion] Can I import certificates from Nutanix back into Infisical? > > No. The Nutanix API doesn't allow private key extraction, so importing certificates from Nutanix into Infisical isn't supported. > [accordion] What happens if my Prism Central uses a self-signed TLS certificate? > > When creating the App Connection, disable the **Reject Unauthorized** option to allow connections to Prism Central instances with self-signed or untrusted TLS certificates. Use this only in trusted network environments. > [accordion] Which Nutanix API version is used? > > Infisical uses the **Nutanix Clustermgmt API v4.2** to manage SSL certificates on clusters. > [accordion] Do I need to restart the cluster after updating the certificate? > > No restart is required. Nutanix applies the new SSL certificate as an async task. Infisical waits for the task to complete before marking the sync as successful. ## What's next? > [card] [NetScaler](https://infisical.com/docs/documentation/platform/pki/applications/certificate-syncs/netscaler.md) > > Deploy certificates to Citrix NetScaler ADC appliances. > [card] [Auto-Renewal](https://infisical.com/docs/documentation/platform/pki/applications/certificates.md#renewal) > > Enable automatic certificate renewal and syncing. > [card] [Alerting](https://infisical.com/docs/documentation/platform/pki/applications/alerting/overview) > > Get notified about certificate lifecycle events. > [card] [Other Sync Destinations](https://infisical.com/docs/documentation/platform/pki/applications/certificate-syncs/overview) > > View all supported sync destinations. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.