[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-673313-105":59,"doc-detail-673313-en":129},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":122,"head_meta":124,"extra_data":126,"updated_unix":128},105,"en","aos-security-and-encryption-security-layers-overview","AOS-Security and Encryption - Security Layers Overview","","AOS Security Development Lifecycle (SecDL) frames security as an integrated part of every development step in the Nutanix platform, not an end-user hardening task. The material explains the CIA triad—confidentiality, integrity, and availability—and translates it into practical security layers across systems & configuration, data protection, network segmentation, and authentication/authorization. It highlights maintaining secure baselines with automation, mitigating ransomware through backups, using encryption and secure keys, employing IDPS, MFA/2FA, and aligning hardening with compliance and monitoring practices.",{"@graph":69,"@context":121},[70,84,104],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":30,"@type":76,"position":81},"https://docshare.wps.com/document/technology/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/aos-security-and-encryption-security-layers-overview/673313/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":98,"encodingFormat":97,"isAccessibleForFree":99,"interactionStatistic":100},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/aos-security-and-encryption-security-layers-overview/673313.png","ImageObject",300,407,{"name":92,"@type":93},"SALUTone","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-11-02",true,{"@type":101,"interactionType":102,"userInteractionCount":8},"InteractionCounter",{"@type":103},"ViewAction",{"@type":105,"mainEntity":106},"FAQPage",[107,113,117],{"name":108,"@type":109,"acceptedAnswer":110},"How does the Nutanix Security Development Lifecycle (SecDL) incorporate security?","Question",{"text":111,"@type":112},"SecDL integrates security into every step of the development process so security is built in from the start rather than added later via end-user hardening.","Answer",{"name":114,"@type":109,"acceptedAnswer":115},"What does the CIA triad mean in this security overview?",{"text":116,"@type":112},"It targets confidentiality, integrity, and availability: preventing unauthorized access, preventing unauthorized alteration, and ensuring authorized users can access data through resiliency and redundancy.",{"name":118,"@type":109,"acceptedAnswer":119},"How are systems hardened and kept aligned with secure baselines?",{"text":120,"@type":112},"Systems are configured to a baseline (using guides like STIG) and maintained with configuration automation tools to ensure the system stays in the desired state throughout its lifespan.","https://schema.org",{"og:url":83,"og:type":123,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":125,"canonical":83},"index,follow",{"doc_id":127,"site_id":62},673313,1793629255,{"code":4,"msg":5,"data":130},{"doc_id":127,"user_id":131,"nickname":92,"user_avatar":132,"doc_module":4,"category_id":29,"category_name":30,"doc_title":65,"doc_description":67,"doc_content":133,"file_id":134,"file_url":135,"file_type":136,"file_size":137,"view_count":8,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":138,"language":139,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":140,"faqs":141,"seo_title":142,"seo_description":67,"update_tm":128,"read_time":41},5909897206756,"https://ap-avatar.wpscdn.com/avatar/5600152dbe4a7e99502?x-image-process=image/resize,m_fixed,w_180,h_180&k=1792654152478566863","AOS-Security and Encryption  \n[ PDF generated August 10 2026. For all recent updates please see the Nutanix Bible releases notes located at [https://](https://)[ ](https://)[nutanixbible.com/release_notes.html. Disclaimer: Downloaded](nutanixbible.com/release_notes.html. Disclaimer: Downloaded) PDFs may not always contain the latest information. ]  \nSecurity is a core part of the Nutanix platform and was kept in mind from day one. The Nutanix Security Development Lifecycle (SecDL) incorporates security into every step of the development process. The Nutanix controlled parts of the platform is secure out of the box, rather than being an afterthought requiring end-users to \"harden\" the platform.  \nWhen we think about security we're really trying to achieve 3 core things (aptly named the CIA triad):  \n1. Confidentially  \n◦ Protect and secure data by preventing unauthorized access  \n2. Integrity  \n◦ Ensure the consistency and accuracy of data by preventing unauthorized alteration  \n3. Availability  \n◦ Ensure authorized users get access to data through resiliency and redundancy  \nThis can be simplified down to a simple statement: enable users to do their jobs while keeping the bad people out. When we're designing for security we need to look at a few core areas of interest which is highlighted in the following diagram:  \nSecurity Layers  \nWe will break down each section in the prior graphic in the following sections.  \nSystems & Configuration  \nTraditionally people refer to system (OS + App) security using a method called \"hardening\". This is the process to which you would secure the system by configuring things to a certain standard called a baseline.  \nThe DoD's IT org (DISA) has a sample hardening guide which they call the STIG (more details in the SCMA section following) . This includes things like directory permissions, user account management, password complexity, firewalls and a slew of other configuration settings.  \nOnce a system is configured to that standard it is considered \"secure\"however that is just the beginning of the process. System security is  \nAt a glance  \n• Patch and remove known vulnerabilities  \n• Enforce strong passwords and remove default accounts  \n• Configure permissions and user privileges  \n• Close unused ports / protocols  \n• Use automation to ensure baselines  \nsomething that must be maintained throughout its lifespan. For example, to ensure that standard hardening baseline is met, configuration automation tools should be employed. This ensures the system is always meeting your baseline \"desired state\".  \nNutanix ensures this for its CVM and AHV hypervisor using a tool we've developed called SCMA which is covered later in this section.  \nData  \nData is at the core of any business and is arguably the company's most valuable asset. When thinking of security we need to focus on ensuring data accessibility, quality, and theft avoidance.  \nOn the concept of accessibility, we constantly need access to systems and data to make decisions. One recent method of attack called 'Ransomware' threatens the ability to access data by encrypting the data and then ransoming the user to get access back. This can be avoided in a variety of methods, but also highlights to importance of backups.  \nAt a glance:  \n• Secure access control to data  \n• Always take backups  \n• Encrypt data and secure keys  \nData quality is also a critical item since a lot of decisions or actions are depending on this. For example, an attacker could get access to a system and place malicious orders or update shipping addresses diverting goods to his location. This is where logging and checksumming can be very critical to ensure data remains clean.  \nLast but not least is how do we secure or harden the data. This is typically done using encryption which renders the data useless if they don't have the keys to decrypt the data. In this case if someone were to steal an encrypted file or disk device, they would be unable to get access to the underlyi","cbCaieg5O7Jbotnb","https://ap.wps.com/l/cbCaieg5O7Jbotnb","pdf",691311,12,"English","# Security is a core part of AOS\n## CIA triad goals\n# Security layers\n## Systems & configuration\n## Data\n## Network\n## Authentication and authorization\n## Compliance & monitoring","[{\"question\":\"How does the Nutanix Security Development Lifecycle (SecDL) incorporate security?\",\"answer\":\"SecDL integrates security into every step of the development process so security is built in from the start rather than added later via end-user hardening.\"},{\"question\":\"What does the CIA triad mean in this security overview?\",\"answer\":\"It targets confidentiality, integrity, and availability: preventing unauthorized access, preventing unauthorized alteration, and ensuring authorized users can access data through resiliency and redundancy.\"},{\"question\":\"How are systems hardened and kept aligned with secure baselines?\",\"answer\":\"Systems are configured to a baseline (using guides like STIG) and maintained with configuration automation tools to ensure the system stays in the desired state throughout its lifespan.\"}]","AOS-Security and Encryption - Security Layers Overview | PDF"]