ZVF 1.0.0 Release Notes

ZVF 1.0.0 summarizes the component versions, new features, improvements, compatibility notes, resolved issues, and security updates included in this release.

Component Versions

Component Version
ZSphere 5.1.0
ZCenter 5.1.0
ZStone 5.5.6
ZMigrate 1.10.134

Highlights

The highlights of ZVF 1.0.0 include:

ZSphere

  • VM Encryption

    ZSphere 5.1.0 supports encryption at rest and in transit for VMs. Encryption at rest protects data stored in virtual disks, snapshots, and backups. Encryption in transit protects memory and disk data during VM hot migration.

  • Platform Service Management

    ZSphere 5.1.0 allows you to deploy and manage ZLR and ZCenter services in the UI. ZCenter deployed through Platform Services supports automatic database backup.

  • Third-Party Backup Software Integration

    This release adds Commvault integration for VM backup and restore and further improves Veeam backup and restore capabilities.

ZCenter

  • ZVF Integration: Unified Deployment and Passwordless Redirect

    ZCenter is delivered together with ZSphere. You can obtain a ZCenter Management Platform through Unified Deployment in ZSphere, with no separate environment required. After a ZSphere environment is connected to ZCenter, users that exist on both sides with the same username and authentication source can redirect from ZCenter to ZSphere without entering a password again.

  • Centralized Multi-Environment Management of ZSphere

    ZCenter centrally manages multiple ZSphere virtualization environments in one portal. You can view and manage hosts, VMs, data storage, and network resources across environments and perform routine operations such as creating VMs.

  • Integrated Monitoring, Alarming, and Operations

    Combines monitoring, alarming, and operations for virtualization resources. Capabilities include resource usage monitoring, load optimization suggestions, alarm rules and messages, reports, tags, and operation logs.

  • Centralized License and License Pool Management

    Centralizes license and license pool management across environments. You can view license usage, distribute licenses from license pools, and handle disconnected environments.

ZStone

  • High-Performance Storage Pools Support Two Replicas and Replica Switching

    Starting with ZStone 5.5.6, high-performance storage pools support two replicas. You can also switch an existing high-performance storage pool between two and three replicas. This enables you to select and adjust the number of replicas based on service requirements for data reliability and storage utilization.

New Features

ZSphere

  • VM Encryption

    ZSphere 5.1.0 adds encryption at rest and in transit for VMs to protect stored VM data and data transmitted during hot migration.

    Key capabilities include:

    • Encryption at Rest: Encrypts and decrypts data stored in virtual disks, snapshots, and backups at the hypervisor layer. No Guest OS adaptation is required.
    • Key Providers: Supports external KMS providers and the built-in NKP. All storage types except ZHPS support VM and disk encryption.
    • Encryption State Changes and Lifecycle Management: Allows you to enable or disable encryption when a VM is stopped and perform lifecycle operations such as snapshot, backup, and clone on encrypted VMs. Snapshots and backups are automatically encrypted and inherit the source DEK.
    • Encryption in Transit: Encrypts memory and disk data during VM hot migration. TLS encryption is mandatory for encrypted VMs and can be enabled as needed for unencrypted VMs.
  • Platform Service Management

    ZSphere 5.1.0 adds Platform Service Management, allowing you to deploy ZLR and ZCenter services in the ZSphere UI. Automatic backup applies only to ZCenter deployed through Platform Services. Each day at 00:00, the system backs up the ZCenter database, synchronizes the backup file to the management node, and retains only the latest backup.

  • Commvault Backup and Restore

    This release supports backup and restore of ZSphere VMs through Commvault 11.40.51, expanding integration with third-party data protection software.

ZCenter

  • Passwordless Redirect to ZSphere

    After a ZSphere environment is connected to ZCenter, users that exist on both sides with the same username and authentication source can redirect from ZCenter to ZSphere without entering a password again. Users without a matching account must log in to ZSphere.

  • Centralized Multi-Environment Management

    ZCenter centrally manages multiple ZSphere environments and automatically synchronizes environment and resource information. In one portal, you can view hosts, VMs, data storage, distributed switches, distributed port groups, security groups, and recycle bin resources, create VMs, and view resource details. You can also extend centralized management to VMware vSphere environments.

  • Content Library Management

    ZCenter centrally manages images, VM templates, and image storage. You can view and export images, upload or create images, and edit or delete images.

  • Platform O&M

    ZCenter centrally monitors VMs and platform resources and provides system alarms, load optimization suggestions, alarm rules, and message templates. You can also view VM reports, VM performance reports, host performance reports, and compute cluster capacity reports, and use tags, platform operation logs, and background task logs for resource management and troubleshooting.

  • Centralized License and License Pool Management

    License management provides separate views for licenses and license pools. You can view license status and usage and distribute or reclaim license quota by environment. After ZCenter is deployed through Unified Deployment in ZSphere, it includes a permanent ZCenter Standard Edition license without requiring separate license installation or upload. When a disconnected environment is removed, its license quota is also reclaimed.

  • Account and Permission Management

    ZCenter centrally manages users, roles, and AccessKeys. A user can be bound to multiple roles, and role permissions can be configured at menu granularity. You can also generate AccessKeys for users as identity credentials for integration with other systems or API calls.

ZStone

  • High-Performance Storage Pools Support Two Replicas and Replica Switching

    When creating a high-performance storage pool, you can select two or three replicas based on your service requirements. The default value is three replicas. Compared with three replicas, two replicas reduce data redundancy overhead and improve storage utilization. In two-replica mode, at least three logical failure domains (nodes) are still required to ensure Raft consistency. One node acts as a witness that participates in voting but does not store a complete copy of the data.

    For an existing high-performance storage pool in the Healthy state, you can switch the number of replicas from two to three or from three to two. Changing the number of replicas triggers data migration. During the switch, the storage pool state changes to Recovering, and service performance might be affected. Perform this operation outside of peak business hours.

  • Delete an Empty High-Performance Storage Cluster

    Starting with ZStone 5.5.6, you can delete a high-performance storage cluster directly from the UI if the cluster contains no servers. If servers remain in the cluster, the platform disables the delete action and prompts you to remove the servers first. This feature allows you to clean up high-performance storage clusters that were not fully initialized or whose servers have all been removed.

Improvements

ZSphere

  • Log Server Enhancements

    The log server supports multi-level alarms, tiered notifications, and platform operation logs. Logs and alarms of different levels can be delivered to external logging systems for centralized storage, query, and analysis.

  • Block Device Performance Monitoring

    You can view performance metrics for NVMe and FC block devices, including throughput, IOPS, and latency, to understand block device status and troubleshoot performance issues.

  • Built-In QXL Driver in VMTools

    VMTools includes a QXL driver for UEFI VMs. When used with a QXL video device and the SPICE remote desktop protocol, the driver provides 2D graphics acceleration and allows screen resolution adjustment.

  • VM Console Permission Control

    You can separately configure permissions for pasting local commands, using command tools, managing VM power, and enabling read-only mode in the VM console. This enhancement allows console operations to be controlled by role.

  • Data Disk Storage Relocation

    You can migrate only the data disks of a VM. Both cold and hot migration are supported from SAN storage to SAN storage. Cold migration is supported between NFS storage systems or between ZCE distributed storage systems. This enhancement lets you relocate data disks based on capacity, performance, or service planning without migrating the system disk.

  • Network and Hostname Configuration During VM Cloning

    When cloning a VM, you can customize network interface parameters and specify the VM hostname, reducing network and operating system configuration after cloning.

  • Veeam Backup and Restore Performance

    This release optimizes the Veeam backup and restore path to improve backup and restore efficiency.

ZStone

  • Read-Only Access When the License Is Abnormal or Expired

    ZStone 5.5.6 optimizes access control when a license is abnormal or expired. When the license status is Abnormal or Expired, you can still access the ZStone UI, browse feature pages, and view resource lists, resource details, and runtime status. The platform enters read-only mode, and operations that change platform configuration or resource status, such as creating, modifying, or deleting resources and handling alarms, are not available.

Compatibility Notes

ZCenter

  • ZSphere Versions: ZCenter supports centralized management of multiple ZSphere environments running Enterprise Edition 5.1.0 or later.
  • VMware vSphere Environments: Management of VMware vSphere environments is available as an additional capability.
  • Account System: ZCenter 5.1.0 is a single management platform without an organization or tenant system. Capabilities for multi-tenant operations, such as organizations, service catalogs, resource distribution, and billing, are provided by the ZCenter Cloud Module (a value-added module) and will be released separately.

Resolved Issues

ZSphere

VM Management

  • Fixes an issue where periodically collecting network interface status on a Windows VM with VMTools installed might cause PowerShell processes to accumulate and CPU usage to become excessively high.
  • Fixes an issue where VM uptime might be reset after hot migration, host change, host reconnection, or management node restart.

Storage Management

  • Fixes an issue where creating a shared disk from a disk image on SAN storage might fail due to incorrect format conversion handling during disk creation.
  • Fixes an issue where an image storage might not be deleted after it becomes disconnected because the system cannot clean up the remote OVA package.
  • Fixes an issue where the virtual allocatable capacity of a storage pool might not be updated automatically after an unexpected shutdown of a ZStone storage node or reconnection of data storage. This issue might cause resource creation to fail.
  • Fixes an issue where a timer ID overflow after libvirt runs for an extended period might cause libvirt to become abnormal and affect operations such as disk expansion.

Backup and Restore

  • Fixes an issue where metadata such as the operating system type and motherboard type might differ from the source VM after the VM is restored through Veeam or Commvault. Due to compatibility restrictions, a source VM using UEFI + I440FX is converted to Legacy + I440FX during restore.
  • Fixes an issue where Windows file-level restore (FLR) cannot be selected after a Windows VM is backed up in Veeam 12.
  • Fixes an issue where a backup task might fail with Job ID already in use because the system periodically removes the backup task lock file from the temporary directory.
  • Fixes an issue where a CBT backup on thin-provisioned SAN storage might unexpectedly expand a disk and pause the VM.
  • Fixes an issue where a VM might crash during backup.
  • Fixes an issue where a backup task might fail due to a false I/O Hung detection when block job progress remains unchanged for a short period.
  • Fixes an issue where a restore task might fail during high-concurrency Veeam restore because a system call is interrupted when the API Proxy Data Agent writes to an NBD volume.
  • Fixes an issue where connection refused might be displayed during API Proxy installation before the service is ready, potentially causing users to incorrectly assume that the deployment has failed.
  • Fixes an issue where concurrent CBT export or CBT enablement tasks might fail due to NBD port contention.
  • Fixes an issue where NBD export might fail during Veeam backup of a VM with a snapshot chain on SAN storage because the system does not activate the complete disk snapshot chain.

Platform O&M

  • Fixes an issue where KVM Agent memory usage might continue to increase after extended operation, affecting the stability of host task execution.
  • Fixes an issue where custom attribute values might be empty in CSV files exported from VM, host, data storage, bare metal host, distributed switch, or distributed storage resource lists.

Security Updates

ZSphere

  • Updates the kernels of Kylin V10 SP3 and Kylin V10 SP3 2403 to fix CVE-2026-46333 and CVE-2026-43494.
  • Updates the H84r kernel to fix Linux KVM vulnerabilities CVE-2026-53359 and CVE-2026-46113.
  • Updates the Linux kernels and related drivers of supported operating systems to fix CVE-2026-31431 and CVE-2026-43284.
  • Upgrades Redis to 7.2.11 to fix CVE-2025-49844.
  • Updates the Kylin V10 SP3 2403 kernel to fix CVE-2026-46331.