docs/documentation/platform/pki/applications/certificate-syncs/nutanix-prism-central.mdx
Install certificates managed in Infisical directly on your Nutanix clusters. When a certificate is renewed, it is automatically updated on the cluster with no manual intervention required.
<Info> Certificate Syncs are configured per Application. First select which certificate to sync, then configure the Nutanix Prism Central destination. </Info>Before setting up the sync, gather the following from your Nutanix environment:
9440), either directly or via an Infisical Gateway.2. Select the **Nutanix Prism Central** option.
3. Configure the **Destination**:
- **Nutanix Prism Central Connection**: Choose the connection to authenticate with.
- **Cluster**: From the list of clusters available in Prism Central, select the target cluster.
4. Configure the **Sync Options**:
- **Auto-Sync Enabled**: Automatically update the certificate on the Nutanix cluster whenever it is renewed or updated in Infisical.
5. Configure the **Details**:
- **Name**: A name for this sync.
- **Description**: Optional description.
6. Select the certificate to sync.
7. Review and click **Create Sync**.
### Sample request
<Note>
You can optionally specify `certificateIds` during sync creation to immediately add a certificate to the sync.
If not provided, you can add one later using the certificate management endpoints.
</Note>
```bash Request
curl --request POST \
--url https://app.infisical.com/api/v1/cert-manager/syncs/nutanix-prism-central \
--header 'Authorization: Bearer <access-token>' \
--header 'Content-Type: application/json' \
--data '{
"name": "my-nutanix-cert-sync",
"applicationId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"description": "Push TLS cert to production Nutanix cluster",
"connectionId": "550e8400-e29b-41d4-a716-446655440000",
"destination": "nutanix-prism-central",
"isAutoSyncEnabled": true,
"certificateIds": [
"550e8400-e29b-41d4-a716-446655440000"
],
"destinationConfig": {
"clusterId": "a29facad-8d6e-4f64-b745-bceca6f990d6",
"clusterName": "prod-cluster-01"
},
"syncOptions": {
"canImportCertificates": false,
"canRemoveCertificates": false
}
}'
```
### Sample response
```json Response
{
"pkiSync": {
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"name": "my-nutanix-cert-sync",
"description": "Push TLS cert to production Nutanix cluster",
"destination": "nutanix-prism-central",
"isAutoSyncEnabled": true,
"destinationConfig": {
"clusterId": "a29facad-8d6e-4f64-b745-bceca6f990d6",
"clusterName": "prod-cluster-01"
},
"syncOptions": {
"canImportCertificates": false,
"canRemoveCertificates": false
},
"applicationId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"connectionId": "550e8400-e29b-41d4-a716-446655440000",
"createdAt": "2026-05-26T00:00:00.000Z",
"updatedAt": "2026-05-26T00:00:00.000Z"
}
}
```
When a sync runs, Infisical calls the Nutanix Clustermgmt API v4 to replace the SSL certificate on the selected cluster:
After a few seconds, the Nutanix cluster will use the new certificate, no restart is required.
<Note> Each Nutanix Prism Central sync targets a single cluster. To update multiple clusters, create one sync per cluster. </Note>The Nutanix Prism Central Certificate Sync provides:
You can manually trigger certificate synchronization to the Nutanix cluster using the sync certificates functionality. This is useful for:
To manually sync certificates, use the Sync Certificates API endpoint or the manual sync option in the Infisical UI.
When a certificate is renewed in Infisical, the renewed certificate is automatically pushed to the Nutanix cluster on the next sync. If Auto-Sync is enabled, this happens without any manual action.