In Self-Service, dynamic (ephemeral) VM credentials are obtained at runtime only if the project’s environment is flagged to use an external credential provider (e.g., Vault).

While creating or editing an Environment inside the Project, the administrator must tick “Allow Credential Provider”. Calm then requests usernames/passwords at launch time and injects them into blueprints, enabling dynamic credentials across all Self-Service actions run from that project.

B – Applies to blueprint design (HTTP endpoints/Open Terminal) but does not switch the project to dynamic credentials.

C – No “add dynamic credential” field exists; the toggle is “Allow Credential Provider”.

D – Dynamic credentials for variables are set inside blueprints; it still requires the environment flag and does not configure Self-Service at project level.

1. Nutanix Prism Central Self-Service Admin Guide v6.1, “Enable Dynamic Credentials for a Project Environment”, p. 32-33 (checkbox ‘Allow Credential Provider’).

2. Nutanix Calm 3.6 Documentation, Section 4.3 “Using External Credential Providers”, para 2-4 (project-level environment configuration).

3. Nutanix University NCP-MCA Courseware Module 5, slide 17 “Project Environments – Allow Credential Provider”.