Kaspersky Security for Virtualization 5.2 Light Agent

Installing Light Agent for Linux via Kaspersky Security Center

You can install Light Agent for Linux remotely from the administrator's workstation using Kaspersky Security Center.

Installation is performed by using the Remote Installation Wizard or by using the remote installation task (for details, please refer to the Kaspersky Security Center help).

If fanotify technology is not supported by the operating system of the virtual machine on which you are planning to install Light Agent for Linux, prior to beginning installation, make sure that the source code of the operating system kernel is in the default folder on the virtual machine and that the compilation packages (gcc, binutils, glibc, glibc-devel, make, ld) have been installed.

Prior to beginning remote installation of Light Agent for Linux and Network Agent, you must perform the following actions on the virtual machine:

  1. Verify the capability to connect a client application (for example, PuTTY) to the virtual machine over the SSH protocol.

    If you cannot connect to the device, open the /etc/ssh/sshd_config file and make sure that the settings have the following values:

    PasswordAuthentication no

    ChallengeResponseAuthentication yes

    If necessary, edit the values of settings, save the /etc/ssh/sshd_config file, and restart the SSH service by using the sudo service ssh restart command.

  2. Disable the sudo password prompt for the user account that is used to connect to the virtual machine. To do this, perform the following actions:
    1. Open the sudoers configuration file by using the sudo visudo command.
    2. Specify the following in the file: <user name> ALL = (ALL) NOPASSWD: ALL

      where <user name> is the user account that will be used to connect to the virtual machine over the SSH protocol.

    3. Save the sudoers file and then close it.
    4. Reconnect to the virtual machine over SSH and run the sudo whoami command to make sure that the sudo service does not require a password.

Remote installation utilizes the installation package that contains the set of parameters required for installing Light Agent for Linux and Kaspersky Security Center Network Agent. The Kaspersky Security Components Installation Wizard automatically creates this installation package during installation of Kaspersky Security MMC plug-ins and Integration Server. This installation package is stored in the Kaspersky Security Center Administration Console tree in the AdditionalRemote installationInstallation packages folder with the name Kaspersky Security for Virtualization 5.2 Light Agent for Linux (5.2.X.X), where 5.2.X.X is the application version number.

You can use the installation package that was automatically created by the Kaspersky Security Components Installation Wizard, or manually create an installation package.

Joint installation of Light Agent for Linux and Network Agent that is included in Kaspersky Security Center distribution kit is not supported. If you are using the remote installation task to install Light Agent for Linux, make sure that the Install Network Agent along with this application check box is cleared in the task settings. The supported version of Network Agent is included in the installation package for Light Agent for Linux and will be installed automatically as a result of remote installation of Light Agent for Linux.

The presence of Network Agent on the virtual machine is checked prior to beginning installation. If an installed version of Network Agent that is incompatible with Light Agent for Linux component is detected, installation ends with an error. You must remove Network Agent from the virtual machine and run the remote installation of Light Agent for Linux again.

In this section:

Creating a Light Agent for Linux installation package

Configuring Network Agent settings in the Light Agent for Linux installation package properties

Page top
[Topic 128864]

Creating a Light Agent for Linux installation package

Prior to creating an installation package, unpack the distribution package of Light Agent for Linux to a folder that can be accessed by Kaspersky Security Center Administration Server.

To manually create a Light Agent for Linux installation package:

  1. Open Kaspersky Security Center Administration Console.
  2. In the console tree, select AdvancedRemote installationInstallation packages.
  3. Click the Create installation package button.

    The New Package Wizard starts.

  4. In the wizard window that opens, click the Create installation package for a Kaspersky application button.
  5. Enter the name of the installation package and proceed to the next step of the wizard.
  6. Select the distribution kit of Kaspersky Security. To do so, open the standard window of Microsoft Windows by using the Browse button and specify the path to the lightagent.kud file.

    The Wizard window will display the application name.

    Proceed to the next step of the wizard.

  7. Read the End User License Agreement concluded between you and Kaspersky, and the Privacy Policy describing the handling and transmission of data.

    To continue creating the installation package, confirm that you have fully read and accept the terms of the End User License Agreement and the Privacy Policy. To confirm, select both check boxes in the window of the Wizard.

    Proceed to the next step of the wizard.

  8. The wizard downloads the files required for installation of the application to the Administration Server of Kaspersky Security Center. Wait for the download to finish.
  9. Finish the wizard.

The created installation package is stored in the Kaspersky Security Center Administration Console tree in the AdditionalRemote installationInstallation packages folder. You can use one and the same installation package multiple times.

After creating a Light Agent for Linux installation package, you need to configure the installation package settings. In the installation package properties window, you can specify the settings for connecting Network Agent, which will be installed on the virtual machine together with Light Agent for Linux, to the Kaspersky Security Center Administration Server.

Page top
[Topic 94992]

Configuring Network Agent settings in the Light Agent for Linux installation package properties

In the properties of the Light Agent for Linux installation package, you can configure the settings for connecting Network Agent, which will be installed on the virtual machine together with Light Agent for Linux, to the Kaspersky Security Center Administration Server.

To configure the Network Agent settings:

  1. Open Kaspersky Security Center Administration Console.
  2. In the console tree, select AdvancedRemote installationInstallation packages.
  3. In the list of installation packages, select the Light Agent for Linux installation package and open the Settings: <installation package name> window by double-clicking it.
  4. In the window that opens, in the list on the left, select the Settings section and configure the following settings for connecting Network Agent to the Kaspersky Security Center Administration Server:
    • Administration Server address

      IP address in IPv4 format or fully qualified domain name (FQDN) of the computer, on which the Kaspersky Security Center Administration Server is installed.

    • Port number.

      Port number, which is used to connect Network Agent to Kaspersky Security Center Administration Server.

      By default, port number 14000 is specified.

    • SSL port number

      Port number, which is used to connect Network Agent to Administration Server via SSL protocol.

      By default, port number 13000 is specified.

    • Use Administration Server certificate

      If the check box is set, the specified certificate will be used to authenticate the access to the Administration Server. The Administration Server certificate is the default certificate in Kaspersky Security Center 12 and 13. You can also specify the certificate by pressing the Browse button and selecting the certificate file.

      If this check box is cleared, the certificate file will be received from the Administration Server upon first connection to it over the address specified in the Administration Server address field.

      It is not recommended to clear the check box because it is not secure to automatically receive an Administration Server certificate when connecting to it.

      This check box is set by default.

    • Use SSL connection

      If the check box is selected, the connection to Kaspersky Security Center Administration Server is performed through the secure port via SSL protocol.

      This checkbox is set by default.

    Except for the Settings section, all sections in the Settings: <installation package name> window are identical to the standard sections used in Kaspersky Security Center. For descriptions of the standard sections, please refer to the Kaspersky Security Center help.

  5. Click OK in the Settings: <installation package name> window.
Page top
[Topic 132074]