back to partners
VMware by Broadcom
Expert Advantage Partner

VMware Cloud Foundation Solutions

PGTEK designs, deploys, and manages VMware Cloud Foundation environments for federal agencies and enterprise clients. With vSphere and vCenter no longer sold as standalone products, VCF 9 and VMware vSphere Foundation (VVF) are now the paths forward — and our cleared engineers know both inside and out.

// VCF 9 // VVF // Tanzu // PAIF // NSX // STIG hardening // cleared staff
// broadcom acquisition impact

The VMware Licensing Landscape Has Changed

Broadcom's acquisition of VMware eliminated standalone vSphere and vCenter licensing. Today, VMware Cloud Foundation 9 (VCF 9) — the full-stack bundle — and VMware vSphere Foundation (VVF) are the only paths forward. Federal agencies face subscription transitions, SKU consolidations, and significant cost restructuring. PGTEK's engineering team has guided organizations through this shift from day one, with deep familiarity across both commercial and federal procurement environments.

12+ years VMware
federal ops
TS/SCI cleared
engineers
VCF certified
architects
// partner services

VMware Practice Areas

From core hypervisor operations to post-acquisition licensing strategy, PGTEK provides end-to-end VMware services tailored to the security, compliance, and budget requirements of federal and regulated enterprise environments.

// vmware-cloud-foundation-9

VMware Cloud Foundation 9 (VCF 9)

VMware Cloud Foundation 9 is Broadcom's flagship platform — the complete bundle of VMware's entire product portfolio in a single subscription. VCF 9 includes vSphere, vSAN, NSX, Tanzu, and Private AI Foundation with NVIDIA, delivering a unified private cloud stack for federal agencies and enterprise organizations. PGTEK architects and deploys VCF 9 environments from greenfield builds to brownfield migrations, ensuring your organization captures the full value of the platform while meeting federal compliance and security requirements.

  • VCF 9 architecture design — compute, storage, networking, and management domains aligned to agency workload requirements
  • SDDC Manager deployment and lifecycle management — automated infrastructure provisioning and patching across the full stack
  • vSphere cluster design including HA, DRS, and resource pool configuration for mission-critical federal workloads
  • VCF 9 subscription planning and federal procurement strategy — ELA negotiation and SEWP vehicle alignment
  • Phased VCF 9 adoption roadmaps for organizations migrating from legacy standalone VMware licensing
// vmware-vsphere-foundation

VMware vSphere Foundation (VVF)

VMware vSphere Foundation is Broadcom's lighter-weight bundle for organizations that need core virtualization capabilities — vSphere and vSAN — without the full VCF 9 stack. VVF is the right fit for environments that do not require NSX, Tanzu, or Private AI Foundation, and it delivers a more cost-accessible path for agencies evaluating the transition from legacy perpetual licensing. PGTEK helps organizations determine whether VCF 9 or VVF better maps to their workload profile, budget, and mission requirements.

  • VVF vs. VCF 9 fit assessment — workload analysis, feature gap evaluation, and total cost comparison
  • VVF deployment and configuration — vSphere and vSAN on certified HCI or disaggregated hardware
  • License entitlement mapping for agencies transitioning from standalone vSphere and vSAN subscriptions
  • Upgrade path planning from VVF to VCF 9 as mission requirements evolve
  • Federal procurement support — VVF subscription sizing, true-up analysis, and budget justification documentation
// vsan / software-defined storage

VMware vSAN

VMware vSAN delivers software-defined, hyperconverged storage natively integrated with vSphere — included in both VCF 9 and VVF. It eliminates dedicated storage arrays and simplifies the infrastructure footprint for federal data centers under space and power constraints. PGTEK architects vSAN deployments from standard hybrid configurations to all-flash and NVMe-accelerated clusters, with particular expertise in stretched-cluster designs that satisfy federal continuity-of-operations requirements.

  • All-flash and hybrid vSAN cluster design and deployment on certified HCI hardware platforms
  • Stretched cluster configuration for active-active site redundancy and COOP compliance
  • Erasure coding, deduplication, and compression policy configuration for storage efficiency
  • vSAN encryption at-rest configuration aligned to federal data classification requirements
  • vSAN performance monitoring, capacity planning, and proactive health management via Skyline
// nsx / network virtualization

VMware NSX

NSX transforms network security from a perimeter model to a distributed, policy-driven architecture — a critical requirement for federal environments where east-west traffic between workloads represents a primary attack vector. Included in VCF 9, NSX enables micro-segmentation frameworks that enforce zero-trust principles at the workload level without requiring physical network changes. PGTEK maintains STIG expertise for NSX and has implemented compliant NSX deployments within DoD and civilian agency authorization boundaries.

  • NSX deployment, overlay network design, and transport zone configuration within VCF 9
  • Micro-segmentation policy design and enforcement for zero-trust east-west traffic control
  • Distributed firewall rule design aligned to federal application security requirements and ATO boundaries
  • NSX STIG implementation and continuous compliance validation for DISA authorization packages
  • Gateway firewall, NAT, and load balancing configuration for federal DMZ and enclave architectures
// tanzu / containerization

VMware Tanzu

VMware Tanzu is VMware's enterprise Kubernetes and application modernization platform — included in VCF 9. Tanzu enables federal agencies and enterprise organizations to run containerized workloads on existing vSphere infrastructure, eliminating the need for separate container platforms while maintaining the security posture and operational model of the existing VMware environment. PGTEK designs and deploys Tanzu environments for organizations modernizing legacy applications or building cloud-native workloads on-premises.

  • Tanzu Kubernetes Grid (TKG) deployment on VCF 9 — cluster provisioning, lifecycle management, and upgrade automation
  • Application containerization assessment — identifying legacy workloads suitable for modernization to Kubernetes
  • Tanzu Mission Control configuration for multi-cluster policy enforcement and compliance across environments
  • Integration with existing VMware networking (NSX) and storage (vSAN) for persistent, network-aware container workloads
  • DevSecOps pipeline integration — CI/CD toolchain connectivity and image registry configuration for federal development environments
// private-ai-foundation / nvidia

VMware Private AI Foundation with NVIDIA

VMware Private AI Foundation with NVIDIA (PAIF) is VMware's on-premises AI infrastructure platform — included in VCF 9 — built in partnership with NVIDIA to deliver GPU-accelerated AI workloads in a sovereign, private cloud environment. For federal agencies and regulated enterprises that cannot run AI workloads in public cloud, PAIF provides the infrastructure to deploy, fine-tune, and serve large language models and other AI applications entirely within agency-controlled infrastructure. PGTEK designs and implements PAIF environments on NVIDIA-certified hardware, enabling agencies to operationalize AI at scale without data leaving the boundary.

  • PAIF architecture design — NVIDIA GPU node integration within VCF 9 SDDC Manager for automated AI infrastructure provisioning
  • NVIDIA AI Enterprise software stack deployment — NIM microservices, RAPIDS, and GPU Operator configuration on vSphere
  • On-premises LLM deployment and fine-tuning infrastructure for agencies requiring data sovereignty and classification boundary control
  • GPU cluster sizing and performance modeling for AI inference and training workloads across agency use cases
  • PAIF integration with existing VCF 9 networking (NSX) and storage (vSAN) for seamless AI workload lifecycle management
// licensing transition / vcf

Broadcom Licensing Transition

The Broadcom acquisition eliminated perpetual VMware licensing and restructured the entire product catalog around subscription-based bundles. Today, VCF 9 and VVF are the only options — standalone vSphere, vSAN, and NSX are no longer available. Federal agencies face significant budgetary and contractual challenges operating under multi-year appropriations and existing enterprise license agreements. PGTEK provides structured licensing transition engagements that assess current entitlements, map existing deployments to VCF 9 or VVF, and develop cost-optimized migration roadmaps aligned to federal procurement vehicles and budget cycles.

  • Current-state license inventory and entitlement audit across all VMware product lines
  • SKU rationalization and mapping to VCF 9 or VVF subscription tiers based on workload and feature requirements
  • True-up analysis and cost modeling for subscription transition — including comparison against migration alternatives
  • Federal procurement strategy: ELA negotiation, SEWP/NASA SEWP vehicle alignment, and budget justification support
  • VCF 9 / VVF deployment planning and phased implementation for agencies completing the licensing transition
// lifecycle / compliance / stig

VMware Lifecycle & Compliance

Federal VMware environments operate under DISA STIG requirements that mandate specific hardening configurations across vSphere, vSAN, NSX, and the broader VCF 9 stack — and those requirements evolve with each product release cycle. PGTEK maintains active STIG implementation expertise and provides ongoing lifecycle management services that keep VCF environments patched, hardened, and audit-ready without disrupting production operations. Our cleared support staff are available for classified environments where third-party access would otherwise create security concerns.

  • ESXi, vCenter, NSX, and vSAN STIG implementation and validation — automated scanning with SCAP-compliant tooling
  • VCF 9 patch and update lifecycle management aligned to DISA patch cycle guidance and agency change windows
  • vSphere version upgrade planning and execution — in-place upgrades and rolling cluster migrations within SDDC Manager
  • Continuous compliance monitoring and POA&M support for ATO maintenance and annual FISMA assessments
  • Cleared engineering support (Secret/TS/SCI) for classified enclaves and programs with strict access requirements
// get started

Talk to a VMware Expert

Whether you are planning a VCF 9 deployment, navigating the licensing transition from standalone VMware products, or building an on-prem AI infrastructure with PAIF — PGTEK has the federal VMware expertise to move your program forward.

talk to a vmware expert back to partners