Nutanix CVM Troubleshooting Command Reference: Stargate, Curator, Cassandra, Genesis, and Cluster Health

TL;DR A Nutanix CVM incident should be investigated as an evidence chain, not as a race to restart services. Begin with cluster status, compare local and cluster-wide service state, check resiliency, identify the service that owns the symptom, collect its logs, and use targeted NCC checks to validate what you found. This reference is intentionally … Explore: Nutanix CVM Troubleshooting Command Reference: Stargate, Curator, Cassandra,…

OpenTelemetry for AI Agents: Trace Models, Tool Calls, Tokens, Latency, and Cost

TL;DR AI agent observability requires more than a request log and a model latency chart. A single agent invocation can contain planning, multiple model calls, tool execution, retries, retrieval, memory operations, and nested agents. OpenTelemetry’s developing Generative AI semantic conventions now provide a common vocabulary for many of those operations, including agent, workflow, model, and … Explore: OpenTelemetry for AI Agents: Trace Models, Tool Calls,…

How to Secure an MCP Server with OAuth 2.1, Scoped Access, and Audit Logging

TL;DR A production Model Context Protocol server should not treat possession of any bearer token as sufficient authority. It should validate who issued the token, confirm that the token was minted for that specific MCP resource, enforce narrowly defined scopes at both the transport and tool layers, and record authorization decisions without logging credentials or … Explore: How to Secure an MCP Server with OAuth…

Designing the AI Agent Identity Lifecycle in Microsoft Entra

Once an AI agent has access to enterprise systems, identity cannot be treated as a one-time setup task. It needs a lifecycle. That lifecycle starts before the agent is created and ends only after the identity, permissions, logs, and downstream access paths have been retired or archived appropriately. This is where many agent programs will … Explore: Designing the AI Agent Identity Lifecycle in Microsoft…

How to Install and Update VCF PowerCLI 9.1 on Windows, macOS, and Linux

TL;DR PowerCLI is now distributed through the VCF.PowerCLI package. The older VMware.PowerCLI package is deprecated, although many familiar cmdlets and underlying VMware.* modules remain in use. For a new installation, use: For an existing VMware.PowerCLI installation, audit scripts for explicit Import-Module VMware.PowerCLI statements, prefer a clean migration where practical, and use -AllowClobber and -SkipPublisherCheck only … Explore: How to Install and Update VCF PowerCLI 9.1…

The AI Agent Identity Problem: Treat Agents Like Service Principals, Not Chatbots

Most AI agent conversations start in the wrong place. The first question is usually, “What can the agent do?” Can it answer questions? Can it search documents? Can it open tickets? Can it call APIs? Can it update records? Can it trigger a workflow? Those are useful questions, but they are not the first questions … Explore: The AI Agent Identity Problem: Treat Agents Like…

VCF 9.1 for AI Workloads: The Decisions Infrastructure Teams Need to Make Before the First GPU Cluster

AI demand rarely arrives as a clean infrastructure request. It usually starts as a conversation. A data science team has a model they want to test. A business unit wants an internal assistant. A security team wants retrieval-augmented generation close to sensitive data. A platform team is asked whether the existing private cloud can “just … Explore: VCF 9.1 for AI Workloads: The Decisions Infrastructure…

Introduction to VMware Cloud Foundation Operations: Why VCF Operations Is Critical Today

TL;DR VCF Operations is no longer just an observability tool sitting beside the VMware Cloud Foundation stack. In the VCF 9.x operating model, it is becoming a central part of how teams manage the fleet, monitor health, support lifecycle workflows, handle certificates and passwords, improve diagnostics, understand cost, and enforce operational governance. That shift matters. … Explore: Introduction to VMware Cloud Foundation Operations: Why VCF…

When RAG Fails, Treat Retrieval Like a Production System

Retrieval-augmented generation became popular because it solved a real problem. Large language models do not automatically know your internal policies, diagrams, runbooks, tickets, contracts, architecture decisions, or platform standards. RAG gives the model a way to answer with enterprise context instead of relying only on training data. That is the promise. The production reality is … Explore: When RAG Fails, Treat Retrieval Like a Production…

VCF Express Patches: A Practical Runbook for Planning, Applying, and Validating Updates

TL;DR VCF Express Patches should be handled through a repeatable runbook, not an improvised maintenance window. The practical workflow is to confirm the current VCF and component baseline, synchronize depot metadata, review release-note applicability, validate backups and platform health, patch lifecycle and management services where needed, apply component updates through VCF Operations, and capture enough … Explore: VCF Express Patches: A Practical Runbook for Planning,…

VCF Express Patches: The Operating Model Shift Behind Faster Security Response

TL;DR VCF Express Patches are not just smaller updates with a faster name. They represent a more active Day-2 lifecycle model for VMware Cloud Foundation 9.1 environments. Instead of waiting for every fix to arrive in a larger scheduled maintenance release, teams now need a repeatable process for tracking component applicability, synchronizing depot metadata, validating … Explore: VCF Express Patches: The Operating Model Shift Behind…

The Five Personas of Private AI: Platform Owner, Model Owner, Data Owner, Security Owner, and Business Owner

Private AI will not fail in most enterprises because the model cannot run. It will fail because nobody can answer a simple question clearly: Who owns this thing? That question sounds basic until the first production AI use case crosses infrastructure, GPUs, model runtime, vector data, business logic, identity, audit logging, security policy, and operational … Explore: The Five Personas of Private AI: Platform Owner,…

Designing a Practical Private AI Operating Model with VCF 9.1

From Platform Capability to Operational Reality VCF 9.1 gives VMware teams a stronger private AI story. But having the platform capability is not the same thing as having an operating model. That distinction matters. A production AI platform needs more than GPU hosts and a few model endpoints. It needs clear consumption boundaries, network isolation, … Explore: Designing a Practical Private AI Operating Model with…

The AI-Ready Cluster Is Different: GPU Placement, Memory Tiering, Storage Policy, and Lifecycle Windows

Traditional virtualization design habits do not automatically translate to inference-heavy AI platforms. That is not because virtualization suddenly stopped being useful. It is because the constraint model changed. For years, many virtualization clusters were designed around CPU consolidation, memory overcommit, shared storage resilience, and generalized mobility. That model worked well for mixed enterprise workloads where … Explore: The AI-Ready Cluster Is Different: GPU Placement, Memory…

AI Is Pushing VMware Beyond Virtualization

How VCF 9.1 Reframes the Private Cloud Conversation For years, the VMware conversation was mostly about virtualization, consolidation, lifecycle management, and private cloud standardization. Those topics still matter. They are not going away. But AI has changed the center of gravity. The question is no longer just, “Can the platform run VMs reliably?” The better … Explore: AI Is Pushing VMware Beyond Virtualization

Tool Calling Governance Is the New Agent Security Boundary

Introduction The moment an AI agent can call tools, the security conversation changes. A chatbot that only generates text can still create risk, but an agent that can query systems, send messages, update records, open tickets, run code, trigger workflows, or call internal APIs has crossed into operational territory. At that point, the prompt is … Explore: Tool Calling Governance Is the New Agent Security…

When to Keep AI On-Prem: Data Gravity, Latency, Sovereignty, and Cost as Architecture Inputs

AI placement is becoming a real architecture decision. For the first wave of generative AI adoption, many organizations could experiment with hosted models, isolated copilots, and proof-of-concept retrieval systems without making hard infrastructure choices. That window is closing. AI is moving from isolated experiments into business workflows, operational systems, and agentic patterns that can retrieve … Explore: When to Keep AI On-Prem: Data Gravity, Latency,…

The Enterprise AI Orchestration Boundary

Most teams ask the wrong first question when they begin building LLM applications. They ask whether they should use LangChain, LlamaIndex, raw API calls, MCP, a custom agent framework, or whatever library is getting attention this month. That question matters, but it is not the architecture question. The better question is this: where should orchestration … Explore: The Enterprise AI Orchestration Boundary