Trademark Notice

The ZCenter Management Platform trademark and other ZStack trademarks are trademarks of Shanghai YunZhou Information Technology Co., Ltd. All other trademarks or registered trademarks mentioned in this document are the property of their respective owners.

Notice

The products, services, or features you purchase are subject to the commercial contracts and terms of Shanghai YunZhou Information Technology Co., Ltd. All or part of the products, services, or features described in this document may be outside the scope of your purchase or usage. Unless otherwise agreed in the contract, the company makes no representations or warranties, express or implied, regarding the contents of this document.

Due to product version upgrades or other reasons, the contents of this document are updated from time to time. Unless otherwise agreed, this document serves as usage guidance only, and all statements, information, and recommendations in this document constitute no warranty of any kind, express or implied.

Quick Start Workflow

ZCenter Management Platform is a management platform for enterprise IT. It brings scattered virtualization environments (ZStack ZSphere and VMware) into a unified portal for resource inventory viewing, content library management, platform monitoring and alarming, license management, and system configuration.

The platform adopts a microservice architecture: each feature module is developed, deployed, and run independently, without changing the portal framework itself.

Note:

How to obtain (ZVF: ZStack Virtualization Framework): ZCenter Management Platform is delivered together with ZStack ZSphere. Deploy ZSphere first, then upload the ZCenter installation package through Unified Deployment in ZSphere to complete the deployment and obtain a ZCenter Management Platform (see 1.1 Unified Deployment).

For first-time use, complete the following steps in order to enter daily management:

StepOperationLocationResult
① Unified DeploymentUpload the ZCenter installation package in the ZSphere service list to complete the deploymentZSphere → Platform Services → Service List → ZCenter ServiceObtain a ZCenter Management Platform
② Log inLog in with the initial account and change the passwordLogin page → Account SecurityComplete security settings
③ Add management nodesConnect ZSphere / VMware environmentsSystem Configuration → Management NodesEnvironment resources are synchronized into the platform
④ View resourcesBrowse the resources under each management nodeInventoryStart daily operations
Note:

About the license: after ZCenter Management Platform is deployed from ZSphere through Unified Deployment, it comes with a permanent ZCenter Standard Edition license — it works out of the box, with no separate license installation or upload required. The license status can be viewed under Licensing. (License pools for ZSphere Enterprise environments are managed separately; see 2.5.2 License Pool.)

Note:

This guide takes the platform administrator's perspective and describes the purpose and operations of each feature in the order of the first-level menus in the left sidebar.

1. Quick Start

1.1 Unified Deployment (Obtaining ZCenter Management Platform)

In the ZVF solution, ZCenter Management Platform is delivered together with ZStack ZSphere and is deployed on ZSphere through Unified Deployment, with no separate server or environment preparation required.

Prerequisite: ZStack ZSphere has been deployed.

Deployment steps:

  • Log in to ZStack ZSphere and go to Platform Services > Service List
  • Find ZCenter Service and upload the ZCenter installation package
  • Follow the prompts to complete the deployment and obtain a ZCenter Management Platform

After the deployment is complete, log in through the access URL of the ZCenter Management Platform (see 1.2 System Login and Account Security).

Note:

Related capability: after Unified Deployment is complete and a ZSphere environment is connected to ZCenter, users that exist on both sides with the same username and the same authentication source can redirect from ZCenter to ZSphere without a password (see 2.2 Inventory · Passwordless Redirect to ZSphere).

1.2 System Login and Account Security

For the first login to ZCenter Management Platform:

  • Default username: admin
  • Initial password: password

After logging in, change the initial password promptly: click the avatar in the upper-right corner > Account Security, and follow the prompts to change the password.

Figure 1. Login page

Login page
Figure 2. Account security settings

Account security settings
Note:

Recommendation: change the initial password immediately after the first login, and enable security policies such as the login verification code and password complexity in System Configuration → Platform Settings → Global Settings as needed.

1.3 Adding a Management Node

A management node is a virtualization environment managed by ZCenter (one ZSphere or VMware environment is one management node). After a management node is added, the resources in that environment are synchronized into the platform for unified viewing and operations.

On the System Configuration > Management Nodes page, click Add Management Node and fill in:

FieldDescription
NameCustom name of the management node
DescriptionOptional description
TypeVMware / ZStack ZSphere
Access IPAccess address of the environment
Username / PasswordCredentials for connecting to the environment

After completing the form, confirm the creation. Once the environment is connected and its data is synchronized, its resources can be viewed in the Inventory.

Figure 3. Add Management Node form

Add Management Node form

1.4 Viewing the Inventory

After the management node synchronization is complete, go to the Inventory and view virtual machines and other resources by management node, data center, type, and other dimensions to start daily management.

2. Features

The first-level menus in the left sidebar of ZCenter Management Platform are as follows, and this chapter describes them one by one:

First-Level MenuPurpose
HomePlatform overview dashboard
InventoryView virtualization resources by management node
Content LibrariesImage / template / image storage management
Platform O&MSystem alarms + system O&M (monitoring, reports, logs, tags)
LicensingCurrent license and license pool
System ConfigurationAccount management / management nodes / platform settings

2.1 Home

The Home page is the platform overview dashboard. It presents core data such as the resource overview and alarm overview in charts, helping you intuitively grasp the current running status of the platform from multiple dimensions and quickly locate items that need attention.

Figure 4. Home dashboard

Home dashboard

2.2 Inventory

The Inventory is organized by management node and centrally displays the resources in each virtualization environment.

  • ZStack ZSphere: resource overview of ZSphere-type management nodes
  • VMware: resource overview of VMware-type management nodes
  • Dynamic entries: the platform automatically generates an entry for each connected management node

The pages support filtering virtual machines and other resources by data center, type, and other dimensions.

Figure 5. Inventory overview

Inventory overview

Creating a Virtual Machine

In the Inventory, you can start the Create Virtual Machine wizard and follow the prompts to select the target data center, specifications, image, and so on to complete the creation.

Figure 6. Create Virtual Machine wizard

Create Virtual Machine wizard

Passwordless Redirect to ZSphere

After a ZSphere environment is connected to ZCenter (as a management node), unified passwordless redirect is supported: click the entry of that ZSphere environment in the Inventory to go directly from ZCenter to the corresponding native ZSphere console, without entering the username and password again.

Conditions and notes:

  • One-way redirect: only the ZCenter → ZSphere direction is supported.
  • Matching condition: passwordless redirect is available to a user only when a user with the same username and the same authentication source exists on both ZCenter and ZSphere. "Same authentication source" means the accounts on both sides come from the same authentication system — for example, both are local users, or both come from the same third-party identity source. The local admin matches only the local admin on ZSphere, not a same-named account from a third-party source.
  • Unmatched users: if the current user has no corresponding account with the same username and source on ZSphere, passwordless redirect is not available, and the user needs to log in to ZSphere manually.
Note:

Prerequisite: passwordless redirect depends on Unified Deployment and the integrated user system of the ZVF solution (see 1.1 Unified Deployment).

2.3 Content Libraries

Content Libraries centrally manage images, templates, and image storage, providing a unified source of materials for creating virtual machines and other resources. It contains three second-level menus:

Second-Level MenuPurpose
Image FilesManage image resources under each management node (including export records)
Template FilesManage virtual machine templates
Image StorageManage image storage (image servers)

2.3.1 Image Files

The Image Files page manages the image resources managed by the platform and contains two tabs:

  • Image: displays the image list under each management node, supports filtering by management node, data center, and type, and supports uploading/creating, editing, and deleting images. When creating an image, the source is specified with a single management node field.
  • Export Records: displays the history and status of image export tasks.

Images are used as the operating system source when creating virtual machines.

Figure 7. Content Libraries - Image Files - image list

Content Libraries - Image Files - image list

2.3.2 Template Files

The Template Files page manages virtual machine templates. A template solidifies a configured virtual machine (including specifications, image, disks, and so on) into a reusable template for fast, batch creation of virtual machines with the same specifications. It supports filtering by management node, and templates can be edited and deleted.

Figure 8. Content Libraries - Template Files

Content Libraries - Template Files

2.3.3 Image Storage

The Image Storage page manages the storage locations of images (image servers). It displays the image storage under each management node along with capacity, status, and other information, and is where image files are physically stored. It supports filtering by management node.

Figure 9. Content Libraries - Image Storage

Content Libraries - Image Storage

2.4 Platform O&M

Platform O&M covers monitoring, operations, and information display for virtual machine resources, and is divided into System Alarms and System O&M.

2.4.1 System Alarms

System Alarms is organized into three groups in the internal sidebar — Resource Monitoring, Alarm Messages, and Alarm Configuration — covering the complete closed loop of "view monitoring → define rules → receive alarms → take action".

Resource Monitoring · VM Monitoring

Provides visual queries of virtual machine resource usage for operations. You can filter by tag, type, resource, time range, and other dimensions to view the CPU, memory, disk, and network utilization of virtual machines on the platform in real time, quickly locate high-load / low-load virtual machines in a given environment, and export the resource table. Select the filters and click Query to display the monitoring information.

Figure 10. VM Monitoring

VM Monitoring

Resource Monitoring · Optimization Suggestions

Set utilization thresholds for virtual machines; virtual machines exceeding the thresholds are automatically identified and listed, providing data for resource optimization and cleanup decisions. The system has three built-in rule categories: high-load virtual machines, low-load virtual machines, and idle virtual machines:

  • Each rule can define its own monitoring time range;
  • Optimization metrics cover CPU average/maximum utilization, memory average/maximum utilization, disk average/maximum utilization, outbound bandwidth, and inbound bandwidth, with customizable thresholds.

Operations: view the configured optimization rules on the Optimization Suggestions > Rule Settings page; click Create Rule to customize a rule and select the management node and optimization metrics; open the rule detail page to view the virtual machine data matching the metrics.

Figure 11. Optimization Suggestions - rule list

Optimization Suggestions - rule list
Figure 12. Optimization Suggestions - rule detail

Optimization Suggestions - rule detail

Alarm Messages · Resource Alarms

Displays the alarm records triggered/resolved by the platform's alarm rules. The list records every triggered and resolved alarm; click a record to view the alarm notification details. Through Actions, a message can be marked as Handled, Ignored, or used to notify the relevant people.

Note:

Alarm records are generated here automatically only after rules have been configured in Alarm Rules.

Figure 13. Resource alarm list

Resource alarm list

Alarm Messages · Platform Alarms

Displays the alarm messages generated by each connected management node (as opposed to resource alarms triggered by ZCenter's own rules). They are presented as a list; click a record to expand its details, and filter by resource category to quickly classify and troubleshoot by source.

Figure 14. Platform Alarms

Platform Alarms

Alarm Configuration · Alarm Rules

Configure alarm rules and alarm levels for monitored objects. The platform provides common built-in alarm rules, and administrators can add, modify, and delete rules as needed. Each rule can specify the virtual machines to monitor and be associated with trigger and recovery message templates to deliver the alarm content to recipients.

Note:

Monitored objects: simply select the virtual machine resources to monitor in the alarm rule. On ZCenter Management Platform, alarms are delivered to all administrators by default, so there is no need to specify notification recipients separately here.

Figure 15. Alarm Rules

Alarm Rules

Alarm Configuration · Message Templates

Manage the message templates used when an alarm is triggered or resolved. When an alarm occurs or recovers, the system sends notifications to recipients in the format and content of the selected template. Email and SMS notification methods are supported, ensuring that compliant alarm messages are received in time.

Note:

Email/SMS servers are configured in System Configuration → Platform Settings → Notification Settings.

Figure 16. Message Templates

Message Templates

2.4.2 System O&M

System O&M is organized into three groups in the internal sidebar: Report Management, Tag Management, and Message Log.

Report Management

Consolidates resource and performance data into reports for capacity planning and operations analysis. Filtering is uniformly by management node, and reports can be exported.

ReportDescription
VM ReportInventory-style report of the virtual machines on the platform
VM Performance ReportReport of virtual machine CPU, memory, disk, and network performance data
Host Performance ReportReport of physical host performance data
Compute Cluster Resource Capacity ReportReport of compute cluster resource capacity and usage
Figure 17. Report Management

Report Management

Tag Management · Tags

Manage platform tags. You can create tags and bind/unbind them to various resources to classify and label resources, making it easy to filter and group by tag in lists.

Figure 18. Tag Management

Tag Management

Message Log · Operation Logs

Records platform operation traces and contains two tabs:

  • Platform Operation Logs: displays each operation's login IP, result, description, resource name, start/finish time, request data, and response data, and can be exported by time.
  • Background Task Logs: displays the execution records and status of background tasks.
Figure 19. Operation Logs

Operation Logs

2.5 Licensing

Licensing is used to view the platform license status and manage license pools.

2.5.1 Current License

After ZCenter Management Platform is deployed from ZSphere through Unified Deployment, it comes with a permanent ZCenter Standard Edition license — no separate installation, upload, or purchase is required, and all Standard Edition features are available for long-term use once the deployment is complete. This page is used to view the current status of this built-in license.

Figure 20. Current License

Current License

2.5.2 License Pool

A license pool is a shared quota pool. After an administrator uploads a consolidated license package to activate the license pool, the licensing method of ZSphere Enterprise environments can be switched from Local License to Shared License. The environments then consume quota from the pool on demand, allowing quota to be reallocated across environments.

  • Local License: each environment uses its own independent license, and quotas are not shared.
  • Shared License: the environment joins the license pool and consumes quota from the shared pool.
  • Scope: only ZStack ZSphere (ZSV) Enterprise environments; the only supported license type is CPU Socket.
OperationLocationResult
Import a license packageCurrent License page → upload the license packageThe pool obtains its total quota; the first upload activates the pool
Add environmentsLicense Pool page → Add EnvironmentAfter validation passes, the environments switch to Shared License
View quotaLicense Pool page → OverviewView total / used / available quota and expiration
Remove environmentsLicense Pool page → RemoveThe environments switch back to Local License and their quota is reclaimed into the pool

Join conditions (validated on submission; if any is not met, the join fails with a message): ① the environment is ZSphere and in a normal state; ② the main license type matches the license pool, and the pool's available quota is greater than or equal to the environment's used quota; ③ the license pool currently supports only environments whose local license type is CPU Socket.

The quota overview displays the total quota, platform-wide usage, shared pool remaining (0 is displayed when negative), a usage progress bar (blue below 60%, orange at 60% or above, red at 85% or above), issue date, and expiration date. A license pool consists of multiple stacked licenses; when one of them expires, its quota is frozen and the available quota decreases accordingly.

Disconnected environments: when an environment loses contact with the license server (a disconnected state caused by network interruption, shutdown, destruction, and similar situations), its quota is frozen. The page proactively indicates this in the top banner, the status column of the list, and below the overview progress bar. Administrators can force-remove a disconnected environment directly at any time (a confirmation dialog explains that the quota will be reclaimed and the environment must rejoin after recovery). After removal, the quota is reclaimed into the pool and the associated accounts can be cleaned up normally.

Figure 21. License pool overview

License pool overview
Figure 22. Add Environment

Add Environment
Note:

For complete license pool operations and boundary descriptions, see the companion document "License Pool Operation Guide".

2.6 System Configuration

System Configuration consists of Account Management, Management Nodes, and Platform Settings.

2.6.1 Account Management

ZCenter has a complete account system that is managed by binding users to roles with different permissions. Account Management contains three third-level menus: User, Role, and AccessKey Management.

User

The User page displays the list of created users and their basic information, and supports both single creation and batch import.

Creating a user: in System Configuration > Account Management > User, click Create User, and choose Add Manually or Batch Import (for batch import, download the template, fill in the required CSV fields, and import). For manual creation, fill in: username, password (or click Auto-generate), Require Password Change, Require Periodic Password Changes, phone number, and email, then confirm the creation.

Note:

The management platform edition has no "organization" concept, so the create-user form does not contain "Organization" or "Role" options.

Figure 23. Create User

Create User

Role

Roles embody permissions and limit the operation scope of users. Features that are not selected cannot be viewed or used by the user.

Creating a role: in System Configuration > Account Management > Role, click Create Role, enter the role name, keep the type as Platform Role, select the feature menus available to this role in the permission tree, and confirm the creation. The permission tree is arranged in the current menu order.

Figure 24. Create Role / permission configuration

Create Role / permission configuration

AccessKey Management

Generate an AccessKey (AK/SK) for a user with one click, to be used as identity credentials for integration with other platforms or online API debugging.

Figure 25. AccessKey Management

AccessKey Management

2.6.2 Management Nodes

Management Nodes are used to connect and manage virtualization environments (for the adding procedure, see 1.3 Adding a Management Node).

Note:

After a ZSphere-type management node is connected, users with the same username and source on both sides can redirect without a password from the Inventory to the native ZSphere console (see 2.2 · Passwordless Redirect to ZSphere).

  • Entry: System Configuration > Management Nodes, click Add Management Node.
  • Form: Name / Type (VMware | ZStack ZSphere) / Access IP / Username / Password.
  • The Type column in the list identifies the platform type of each environment; editing, deleting, and other operations are supported.
Figure 26. Management node list

Management node list

2.6.3 Platform Settings

Platform Settings is organized into three groups in the internal sidebar — System Settings, Feature Settings, and Account Settings — with eight third-level menus in total.

System Settings · Custom UI

Customize UI styles of ZCenter Management Platform such as the platform name, web logo, and theme color as needed, so that the portal matches your corporate brand.

Figure 27. Custom UI

Custom UI

System Settings · Alarm Synchronization

Alarm Synchronization periodically synchronizes monitoring alarm data from the managed environments. Currently there is only one task, "Monitoring Alarm Synchronization"; you can view its running status, start/stop it, and open its details to configure the synchronization schedule as needed.

Figure 28. Alarm Synchronization

Alarm Synchronization

System Settings · Global Settings

Configure platform-level policies, divided into platform policy and time policy:

  • Platform Policy
  • Login Verification Code: enable verification code checking on the login page.
  • Concurrent Sessions per User: allow multiple people to log in and operate with the same account at the same time.
  • Third-Party User Login: enable third-party login methods.
  • Enable HTTPS: enable HTTPS protection for the web portal.
  • Password Complexity Configuration: require passwords to match the configured complexity policy.
  • Time Policy
  • Recycle Bin Retention Period: how long resources are kept in the recycle bin; the number of days is customizable.
  • Message Notification Retention Period: the display time range of platform messages.
  • Token Timeout: the timeout duration of the login session token.
Figure 29. Global Settings

Global Settings

Feature Settings · Notification Settings

Manage the platform's notification server configuration for sending alarms and other messages. Two modes are supported:

  • Email Servers: configure the name, description, email type (SMTP), server address and port, username, password, and so on.
  • SMS: configure the type (such as Alibaba Cloud), name, description, AccessKey ID / Secret, and so on.
Note:

The email/SMS delivery of alarm message templates (2.4.1 Message Templates) depends on the servers configured here.

Figure 30. Notification Settings

Notification Settings

Feature Settings · HTTPS Configuration

Upload a custom certificate (cert file) to enable HTTPS for the portal, and restore the default certificate when needed.

Figure 31. HTTPS Configuration

HTTPS Configuration

Feature Settings · Third-Party Authentication

Configure IDP (identity provider) authentication servers for unified identity authentication and single sign-on (SSO). The OIDC, OAuth2, CAS, and LDAP / AD protocols are currently supported (LDAP/AD is built in).

Operations: click Add Third-Party Authentication Server, select the protocol type, and configure the parameters. After the configuration is complete, a third-party login entry appears below the login button on the login page, and users can select the corresponding protocol to sign in to the system via SSO.

Figure 32. Third-Party Authentication

Third-Party Authentication

Account Settings · Account Information

View and maintain the basic information of the currently logged-in account (such as phone number and email). To make sure you receive email/SMS alarm notifications, fill in and save the correct contact information here.

Figure 33. Account Information

Account Information

Account Settings · Account Security

Security settings of the current account, including changing the login password. It is recommended to change the initial password here immediately after the first login.

Figure 34. Account Security

Account Security

2.7 User Panel

Click the avatar in the upper-right corner to expand the user panel:

ItemDescription
Account SecuritySecurity settings such as changing the password
Switch Language中文简体 / English
Log OutSafely end the current session

3. FAQ

QuestionAnswer
How do I obtain ZCenter Management Platform?Deploy ZStack ZSphere first, then upload the ZCenter installation package in ZSphere "Platform Services → Service List" to complete Unified Deployment (see 1.1)
Which account do I use for the first login?Default username admin, initial password password; change it immediately after logging in
Do I need to install/upload a license?No. After Unified Deployment from ZSphere, the platform comes with a permanent ZCenter Standard Edition license and works out of the box
Why do I still need to log in when going from ZCenter to ZSphere?Passwordless redirect requires a user with the same username and the same authentication source on both sides; otherwise you need to log in to ZSphere manually
Is passwordless redirect bidirectional?No. This version supports only the one-way ZCenter → ZSphere direction
Adding a ZSphere management node fails to connectCheck whether the access IP, username, password, and other fields are correct and whether the network is reachable
Resources of an environment are missing from the InventoryConfirm that the environment has been added as a management node and its data synchronization is complete
Why does adding an environment to the license pool fail?① The environment is not ZSphere or is in an abnormal state; ② the main license type does not match the license pool, or the available quota is less than the environment's used quota
How long do I have to wait before removing a disconnected environment?No wait is needed; it can be removed directly at any time (a confirmation dialog appears, and the quota is reclaimed)
When is the quota reclaimed after removing an environment?Immediately; the "available" value in the overview increases accordingly
Who receives the alarms?On the management platform, alarms are delivered to all administrators by default; when adding a subscription, only the monitored objects need to be specified

Appendix: Glossary

TermDescription
ZVFZStack Virtualization Framework, consisting of ZStack ZSphere and ZCenter Management Platform
Unified DeploymentThe way ZCenter is deployed by uploading the installation package through ZCenter Service in ZSphere "Platform Services → Service List", with no separate environment required
Passwordless redirectAfter ZSphere is connected to ZCenter, users with the same username and authentication source on both sides can go one-way from ZCenter into the native ZSphere console without a password
Same authentication sourceThe accounts on both sides come from the same authentication system (both local, or both from the same third-party identity source); one of the matching prerequisites for passwordless redirect
Management nodeA virtualization environment managed by ZCenter, of type VMware or ZStack ZSphere
Data centerThe region/site division of resources
TypeThe management node type (VMware / ZStack ZSphere), used for list display and filtering
License pool / license serverThe shared quota pool holding the total quota
ZSphere EnterpriseThe Enterprise Edition of the virtualization platform; the only environment type that can join the license pool in this version
Local LicenseThe environment uses its own license and does not consume the shared pool
Shared LicenseThe environment consumes quota from the shared pool (that is, it has joined the license pool)
QuotaThe licensing unit of measure, in CPU Sockets
DisconnectedThe environment has lost contact with the license server, and its occupied quota is frozen
Overcommitted / over quotaThe environment's usage exceeds its licensed quota
Alarm synchronizationThe synchronization task for underlying monitoring alarms
AccessKey (AK/SK)Access credentials for integrating with other platforms or online API debugging