To deploy blueprints to Calm SaaS and execute them, the administrator must first configure a site-to-site VPN tunnel and a tunnel entity in the environment where the blueprint will be deployed. A site-to-site VPN tunnel is a secure connection between two networks over the internet that allows Calm SaaS to communicate with the on-premises or cloud environment. A tunnel entity is a logical representation of the VPN tunnel in Calm SaaS that contains the tunnel configuration and credentials. The administrator must also register the environment and the provider accounts in Calm SaaS before deploying the blueprints. References: Nutanix Certified Professional - Multicloud Automation (NCP-MCA) Exam Blueprint Guide, page 9; Nutanix Calm SaaS User Guide, section 3.1.1 and 3.1.2.