Workspace Foundry
Deploy and validate Citrix & Horizon infrastructure on Nutanix AHV.
Approval-gated automation for repeatable, observable deployments. Workspace Foundry provisions VMs via Prism Central v4, generates reviewed dry-run plans, tracks live execution step ledgers, and verifies what was built.
Step-by-step target configuration and pre-flight validation.
The multi-step wizard connects directly to your registered Prism Central environment. It inspects available clusters, storage containers, and subnet overlays, then verifies credentials, Active Directory domains, and software distribution shares.
- Automatic cluster and AHV network subnet discovery
- Real-time credential testing against Prism Central and Active Directory
- Selectable database backends: external enterprise SQL or lab SQL Express
Approval bound to the plan hash. Zero unexpected changes.
No deployment runs blindly. Workspace Foundry executes a complete dry-run compile, generating a full JSON plan and calculating its SHA-256 fingerprint. Approvals are cryptographically tied to that exact hash: if any target parameter shifts, execution fails closed.
- Preview VM specs, vCPUs, memory, disk attachments, and IP allocations
- Inspect prerequisite probes and verification conditions before committing
- Full JSON plan export for GitOps change requests and CAB documentation
Watch every VM probe, script execution, and verification live.
The run monitor provides total visibility over deployment progress. If an environmental timeout occurs (such as a DNS delay or domain join glitch), the engine presents failure guidance, safe retries, and skip-with-acknowledgement controls without restarting the entire run.
- Real-time WebSocket event streaming with sub-step duration clocks
- Built-in failure diagnosis with inline remedy suggestions
- Idempotent step execution allowing safe retries with parameter fixes
Verified deliverables and centralized software catalog.
At the conclusion of each deployment, Workspace Foundry generates a verifiable evidence report detailing every provisioned AHV entity, network MAC address, active HTTPS binding, and component probe. Coupled with the centralized software library, you maintain a repeatable, version-controlled EUC standard.
- Health verification for StoreFront, NetScaler VIPs, and Horizon UAG
- Centralized library managing ISOs, NetScaler VPX qcow2s, and patches
- Permanent evidence ledger stored in PostgreSQL for governance and compliance
Tested, repeatable architectures for AHV.
Pre-built infrastructure blueprints designed according to vendor best practices, with automated network binding and health verification.
Citrix Minimal
CVAD 2507 CU1 + NetScaler 14.1A production-grade, highly available baseline deployment designed for Nutanix AHV. Installs Delivery Controller with local License Server, configures StoreFront with SSL certificates, and configures NetScaler VPX with StoreFront load balancing and external gateway authentication.
- Citrix Delivery Controller + License Server
- Citrix StoreFront (HTTPS / TLS 1.3)
- NetScaler VPX Load Balancer & Access Gateway
- External SQL Server or Automated SQL Express
Omnissa Horizon Minimal
Horizon 2606 + UAG 26.06Streamlined Omnissa Horizon infrastructure deployment on AHV. Provisions the Horizon Connection Server, handles domain enrollment, deploys the Unified Access Gateway (UAG) appliance, and completes mutual registration and tunnel routing.
- Horizon Connection Server 2606
- Unified Access Gateway (UAG) 26.06 Appliance
- Automated Certificate Enrollment & Binding
- AHV Network Segment & Routing Validation
Built with safety boundaries.
Designed for enterprise environments where stability, predictability, and auditability are non-negotiable.
Prism Central Pinned TLS
Certificates are verified and pinned during environment registration to safeguard against man-in-the-middle attacks on the management network.
Plan Immutability
Deployments are strictly isolated from interactive UI changes. If the target environment changes during planning, the plan hash invalidates automatically.
Append-Only Audit Trail
Every probe result, API payload, user approval, and error log is recorded in an immutable PostgreSQL database for post-deployment verification.