{{ $t('productDocDetail.updateTime') }}: 2026-01-08

Function Description

SCP supports public, private, and network function virtualization (NFV) images. Public images are uploaded by platform administrators and used by platform administrators, tenants, and tenant users. Private images are uploaded by tenants and used by tenants and tenant users. Platform administrators can delete private images. NFV images are uploaded by administrators and used by administrators and tenants.

Public and private images are ISO or built-in images (HCI images). ISO images indicate that the image files are in the .iso format, and built-in images are converted from VMs.

Precautions

1. Cross-version image distribution is supported for SCP 6.9.0 and later versions. With the service pack for cross-image distribution installed, you can distribute public, private, network device, and advanced service images to resource pools of different cluster versions. The supported versions are as follows.

2. Cross-version image distribution has the following restrictions:

(1)Distribution to HCI 6.9.0 or earlier versions is not supported for VMs with 4K or 8K resolution enabled.

(2)Distribution to HCI 6.8.0 or earlier versions is not supported for multi-disk VM templates.

(3)Distribution to HCI 6.8.0 or earlier versions is not supported for VMs with more than one graphics card.

(4)Distribution to HCI 6.8.0 or earlier versions is not supported for VMs whose OS is Linux Kernel 4.X, Linux Kernel 4.X 64-bit, Linux Kernel 5.X 64-bit, Windows 11 64-bit, or Windows 2022 64-bit.

(5)Distribution to HCI 6.8.0 or earlier versions is not supported for VMs whose description has more than 100 characters.

(6)Distribution to HCI 6.8.0 or earlier versions is not supported for VDI VMs.

(7)Distribution to HCI 6.8.0 or earlier versions is not supported for VMs that use the Q35-based motherboard.

(8)Distribution to HCI 6.0.0 R5 or 6.0.0 R5 (EN) is not supported for HCI VMs that use the AMD or Hygon CPU.

(9)Distribution to HCI 6.8.0 or earlier versions is not supported for VMs that use the VirtIO NIC without vmTools installed.

4.2.2.1Public VM Image Management

Function Description:

The public VM image is uploaded or produced by the admin administrator and can be used by the admin administrator, tenants, and tenant users.

Precautions:

1. ISO-type public VM images can be directly uploaded and allocated to resource pools of different versions.
2. Public VM images of the built-in image type can only be allocated to resource pools of the same version and cannot be allocated to different versions.
3. When the HCI virtual machine makes the image, the image is made from the virtual machine's system disk. Therefore, please migrate important data from other disks to the system disk before making the image.

Prerequisite

1. Sangfor HCI platform has enough image storage space.
2. Please prepare the ISO image file to be uploaded.
3. If the HCI virtual machine makes the image, please install the VM optimization tool first and make it after shutting down.

4. Steps:

Upload ISO image

Step 1.Log in to the SCP platform, select Compute > Images, click the Upload button, and select the ISO file to be uploaded. Then, add a description according to the actual situation, select the corresponding operating system, select the resource pool to which the mirror is uploaded, and click the Upload button.

Step 2.After the upload is complete, click the Finish button to continue uploading or click the Close page button.

Make built-in image

Step 1.Log in to the SCP platform, select Compute > Virtual Machines, select the virtual machine that needs to be used to make the image, click More, enter the console, install the vmTools, and shut down the virtual machine.

Step 2.Click More and select Edit, then click Advanced.  It is recommended to check the Enable CPU hot add and Enable memory hot add checkboxes.

Step 3.Click More, select Create Image, enter the name and description of the mirror, select the type of operating system, select the resource pool to be distributed by the mirror, and click OK to start creating an image.

4.2.2.2Private image management

Function Description:

1. The admin can upload private VM images for tenants, and the tenants can only use private VM images. At this time, the private VM images will occupy the tenant's private VM image space.

2. The admin can upload the image to the SCP and share the image with tenants without occupying the private image space of other tenants.
3. The admin can convert a tenant's private VM image into a public VM image for other tenants to use.

Precautions:

When a private VM image is a built-in image type, it cannot be allocated to resource pools of different versions.

Prerequisite

1. The tenant has enough private image quota space.
2. Prepare the ISO file to be uploaded.
3. If the HCI virtual machine makes the image, please install the VM optimization tool first and make it after shutting down.

Steps:

Step 1.Log in to the SCP platform, select Compute > Images > Network Device Images, and click the Upload button. Then, select the platform or the specified tenant, upload the ISO file, add the description according to the actual situation, select the corresponding operating system, select the image to upload to the Resource pool, and click the Upload button.

Step 2.After successfully uploading the image to the cloud platform, the admin can delete and convert the tenant's private VM image to a public VM image. All tenants can use the image after the image is converted to a public VM image.

4.2.2.3Network Device Image Management

Function Description:

1. The administrator must upload the image to create the corresponding network device instance when the virtual network device is in use.

2. NFV equipment mainly includes NGAF (Next-Generation Firewall), ADC (Application Delivery Controller), SSL VPN, and IAM (Internet Access Management).

Precautions:

In the SCP 6.7.30 version, the classic and VPC use the same image templates. The specific NFV versions are as follows: vAF8.0.17, vAD7.0.9R1, vSSL 7.6.8R2.

 

The classic network also supports vIAG12.0.14.

Prerequisite

1. Sangfor HCI has enough image storage space.
2. Prepare Network Device Images.

Steps:

Step 1.Log in to the SCP platform, select Compute > Images > Network Device Images, and click the Upload button.

Step 2.Select the local network device image file (vma format) to be uploaded, select the resource pool to be allocated, and click the Upload button.

Step 3.After the upload is complete, click the Finish button to continue uploading or click the Close button.

4.2.2.4Advanced Service Images

Function Description:

When using the aSecurity service platform and database services, the admin administrator needs to upload the advanced service image to deploy the corresponding aSecurity service platform components or database platform components.

Prerequisite:

aSecurity service platform image version: EDR_3.5.36EN_for_HCI.vma

Precautions:

1. The resource pool has enough image storage space.
2. The advanced service image file has been prepared.

Steps:

Step 1.Log in to the SCP platform, select Compute > Images > Advanced Service Image, and click the Upload button (you can download the image file from Sangfor Community).

Step 2.Select the local advanced service image file (vma format) to be uploaded, select the service type, resource pool, and click the Upload button, as shown below.

Step 3.After the upload is complete, click the View Image button to return to the Advanced Service Image page, or click the Close button.

4.2.2.5Image Storage Settings

Function Description:

After uploading or creating an image, the system will allocate the image to the designated datastore of each resource pool according to the configuration.

Prerequisite

None.

Precautions:

None.

Steps:

Log in to the SCP as admin, select Compute > Images > Image Storage Settings, select the corresponding resource pool and click Enable or Disable to set the datastore of the image.