Validate Encryption on Cluster Expansion

1. Log in to the Nutanix Prism Element web console.

2. Do one of the following:

   • Select Expand Cluster in the Settings page, or

   • Go to the Hardware dashboard and click the Expand Cluster button.

Expand cluster

3. In the Expand Cluster window, select Expand Cluster to begin the expansion immediately (after you complete the remaining configuration steps).

4. Click the Next button.

Expand cluster

Select Prepare Now and Expand Later to prepare the nodes now but delay adding them to the cluster until a later time. Preparing the nodes includes, if needed, imaging the hypervisor, upgrading the AOS version, and preparing a new node network configuration. For more information on expanding the cluster, see Expanding a Cluster.

Expanded cluster

5. In Nutanix Prism Settings, expand the cluster and check if the node(s) appear in the discovered list.

6. Select the node(s) and add them to the cluster.

7. Enter the details for the Host Name, Controller VM, Hypervisor, and IPMI IP.

Select host

8. In the Encrypt Host tab, do the following:

   1. In the Encrypt Host, under the Certificate Signing Request Information section, click Generate and Download for each node to be added.

   2. Get the CSRs signed by a certificate authority (CA).

   3. Click Select Files and upload a signed certificate in order for the nodes to connect to the KMS server. Click Next.

Encrypt host

9. In the Choose Node Type tab, select the Node Type as HCI Node.

Choose node type

10. In the Host Networking tab, choose the Add Uplink for Host Networking. Click Next.

Host networking

11. In the Configure Host tab, click Run Checks to verify that the nodes are ready.

Configure host

Running pre-expand cluster checks

12. Click Expand Cluster to complete the cluster expansion.

Expanding cluster status

Verify that the node is successfully added to the cluster and test the connectivity to the KMS servers.

Expanded cluster