September 2, 2026

Create a UAG Deployment for a Nutanix Edge

In Horizon Cloud, after you create a Nutanix Edge you can configure the Unified Access Gateway (UAG) settings for that Edge.

Note: Horizon Cloud on Nutanix is currently available in Limited Availability (LA) mode only.

You cannot configure UAG settings when you create the Edge, only after the Edge has been created.

Enable SSH access to the Unified Access Gateway (UAG)

UAG log collection and diagnostic command execution for on-premises cloud providers, such as vSphere, Nutanix, and OpenStack, are performed by the module connecting to the UAG VM over SSH. SSH must be permitted from the Horizon Edge module to the UAG VM, so that Horizon Ops can collect UAG logs and run diagnostic commands for troubleshooting any issues found in UAG deployments.

The SSH protocol must be enabled on the UAG appliance.
Firewall/security-group rules must allow inbound SSH (TCP port 22) to the UAG VM's management interface from the Horizon Edge module's network.

Prerequisites

Before you can create the UAG, you must first define the Edge. See Add and Deploy a Horizon Edge for Nutanix.

You must provide one or more certificates for the Unified Access Gateway in PEM or PFX format. The certificate’s Common Name (CN) or Subject Alternative Name (SAN) must match the fully qualified domain name (FQDN) used to access the UAG.

You can create a self-signed SSL certificate using openssl as below:

```
# generate CSR and KEY
openssl req -new -newkey rsa:2048 -nodes -keyout uag.key -out uag.csr
# generate PEM and self-sign with KEY
openssl x509 -req -sha256 -days 365 -in uag.csr -signkey uag.key -out uag.pem
# combine into PEM
cat uag.pem uag.key > uag_cert.pem
```

Alternatively, you can convert an existing certificate to a single line JSON format as described at Convert Certificate Files to One-Line PEM Format.

Create the Unified Access Gateway (UAG) for the Horizon Cloud on Nutanix Edge

After you have created the Horizon Cloud on Nutanix Edge as described in Add and Deploy a Horizon Edge for Nutanix, you can configure a Unified Access Gateway.

Open the Existing Edge in Horizon Cloud and Confirm Requirements

In the Horizon Cloud console, locate the Horizon Cloud on Nutanix Edge by clicking Capacity > Horizon Edges and locate the deployed Nutanix Edge.
In the Unified Access Gateway column, click on the Not Configured status to begin the setup.
On the Requirements page, confirm that you have met the stated requirement and click Next.

General Information

On the General Information page, enter the following information and click Next.

Enter a name and description for the UAG and specify the number of Unified Access Gateway VMs to be created for this deployment.
In the Provider field, specify the provider where UAG is to be deployed.
For Number of Network Adapters, select the number of networks adapters to be used by UAG based on your data center network design.
For IP Mode, specify the IP address assignment mode for UAG VMs as below:
- If Static V4
  - Load Balancer FQDN: Provide FQDN of UAG Load Balancer to connect to desktops. Add UAG DMZ IPs to load balancer backend pool.
  - DNS: The comma separated list of DNS servers, to resolve Horizon cloud URLs and specific Internet resources.
  - DNS Search Domain: The space separated list of default search domains to be used.
  - Default Gateway: The IP address of default gateway of DMZ network (first interface).
  - Blast Extreme TCP Port: Select the TCP port on which Blast Extreme Protocol traffic will be sent by the client. Port 8443 is recommended for consistent performance and less resource utilization. Port 443 can lead to excessive CPU utilization, causing Unified Access Gateway Appliances to become unresponsive. Use 443 only if client-side restrictions prevent the use of 8443.
  - NTP Servers: Enter the list of NTP servers to use for time synchronization of the UAG cluster VMs.
- If DHCP v4:
  - Load Balancer FQDN: Enter the FQDN for the load balancer.
  - Blast Extreme TCP Port: Select the TCP port on which Blast Extreme Protocol traffic will be sent by the client. Port 8443 is recommended for consistent performance and less resource utilization. Port 443 can lead to excessive CPU utilization, causing Unified Access Gateway Appliances to become unresponsive. Use 443 only if client-side restrictions prevent the use of 8443.
  - NTP Servers: Enter the list of NTP servers to use for time synchronization of the UAG cluster VMs.
Leave the Use outbound proxy setting off, as is the default.

Resources

In the Cluster field, select the cluster to use from the available list of configured clusters.

Note: If you are unable to enter a Cluster value, it is possible that your Horizon Cloud for Nutanix Edge has not yet finished building in the associated Prism Central environment. You can open your Prism Central console to check for completion before continuing.
For the Certificate Type, choose PEM or PFX as below:
- For PEM, select and upload the PEM certificate.
- For PFX, select and upload the PFX certificate and enter the PXF file password when prompted.
For UAG Image Link, optionally specify a link to an OVA image to use for the UAG.
Click Next to continue.

Networks

In the DMZ Network section, specify the following information.

In the Subnet field, choose a subnet belonging to a DMZ network configured within the Nutanix environment.
In the Route field, optionally enter a comma-separated list of IPV4 custom routes for this interface in the form ipv4-network-address/bits ipv4-gateway-address. For example, 20.2.0.0/16 10.2.0.1,20.9.0.0/16 10.2.0.2.
Click Save to complete the UAG configuration for the Edge.

Load Balancer for UAG

You can use a customer-managed local load balancer of your choice in front of the UAG instances. For related information, see Load Balancing Unified Access Gateway for Horizon.

What to do next

After you have deployed the Horizon Cloud for Nutanix Edge and its configured UAG, you can create the image for Nutanix and then define a pool for the Nutanix image. See Managing Images for Nutanix Provider Deployments.

Was this page helpful?