Installing the Kaspersky Security solution

Installation of Kaspersky Security for Virtualization 6.2 Light Agent in the virtual infrastructure consists of the following stages:

1. Installing the Integration Server

   Depending on your infrastructure, you need to install the Windows-based Integration Server or the Linux-based Integration Server.

   For the Linux-based Integration Server, connecting to virtual infrastructure based on Microsoft Hyper-V is not supported. Use the Windows-based Integration Server to install and run Kaspersky Security in an infrastructure based on the Microsoft Hyper-V platform.

   If you want to use the Integration Server Console to manage the Windows-based Integration Server, you also need to install Integration Server Console on the device where Kaspersky Security Center Administration Console is installed, or on another device with a Windows operating system.

   If you want to use Integration Server Web Console to manage the Integration Server, you need to install the Integration Server web plug-in. After it is installed, Integration Server Web Console will be available in Kaspersky Security Center Web Console.

2. Installing Kaspersky Security management plug-ins

   If you want to manage components of the Kaspersky Security solution via Kaspersky Security Center Web Console and use Integration Server Web Console, you need to install management web plug-ins on the device where Kaspersky Security Center Web Console is installed.

   If you want to manage solution components via Kaspersky Security using Kaspersky Security Center Administration Console, you need to install management MMC plug-ins on the device where Kaspersky Security Center Administration Console is installed.

   If you are using Kaspersky Security Center Linux, you need to install the management web plug-ins. The Kaspersky Security Center Administration Console and management MMC plug-ins are not supported.

   After installing the Protection Server management plug-in, it is recommended to run the Download updates to the Administration Server storage task in Kaspersky Security Center and make sure that the task completes successfully. For details, please refer to the Kaspersky Security Center help.

   After installing the management plug-ins, you can create a default policy and an Update databases and solution modules task for the Protection Server using the Kaspersky Security Center Initial Configuration Wizard.

3. Installing Kaspersky Security Protection Servers

   The Protection Server is installed as a result of deploying SVMs on a hypervisor in a virtual infrastructure.

   You can deploy SVMs in the following ways:

   • Using the Integration Server Web Console. In the Web Console, you must first configure the connection of the Integration Server to the virtual infrastructure. Then you create a task for the Integration Server, in which you specify all the necessary SVM deployment settings, and start the task. The Integration Server runs the SVM deployment task. You can monitor the task progress in Integration Server Web Console.
   • Using the Integration Server Console. In Integration Server Console, you launch the SVM Management Wizard. Following the instructions in the wizard, you configure the wizard's connection to the virtual infrastructure, enter all the necessary SVM deployment settings, and start the deployment. The Integration Server deploys the SVMs. You can monitor the deployment progress in the wizard.
   • Without using the Integration Server management consoles, using the Integration Server REST API (open a description of REST API requests).

   If none of the above methods are suitable, you can deploy SVMs using the tools of the virtual infrastructure and then configure the SVM using the klconfig script API manually or using automation tools.

   In an infrastructure managed by VMware vCenter Server and VMware NSX Manager, if you use Integration Server Console for SVM deployment, then after the SVM deployment is complete, you need to configure the Integration Server's connection to VMware NSX Manager. If you use Integration Server Web Console for SVM deployment, you can configure a connection to VMware NSX Manager when configuring the Integration Server's connection to the virtual infrastructure or later, using the procedure for changing connection settings.

4. Preparing the Protection Servers for operation

   You must follow the steps to prepare the deployed SVMs and Protection Servers for operation.

5. Installing Light Agents and Kaspersky Security Center Network Agent

   On each virtual machine that needs to be protected using the Kaspersky Security solution, you need to install the following:

   • On a virtual machine with the Linux operating system:
     • Light Agent for Linux (Kaspersky Endpoint Security for Linux running in Light Agent mode).
     • Kaspersky Security Center Network Agent for Linux.
   • On a virtual machine with a Windows operating system:
     • Light Agent for Windows (Kaspersky Endpoint Security for Windows running in Light Agent mode)
     • Kaspersky Security Center Network Agent for Windows

   To protect your VDI, you need to install Light Agent and Network Agent on your virtual machine templates.

6. Preparing Light Agents for operation

   You must follow the steps to prepare the installed Light Agents for operation.