Installing a Light Agent on tenant virtual machines
At this step of the deployment of the tenant security infrastructure, the following actions are performed:
- Kaspersky Security Center Network Agent, which is configured to connect to the tenant's virtual Administration Server, is installed on tenant virtual machines.
- Tenant virtual machines are moved to the Managed devices folder of the virtual Administration Server configured for the tenant.
- Light Agent for Linux or Light Agent for Windows is installed on tenant virtual machines.
The listed actions can be performed both on the service provider's side and on the tenant's side after the tenant administrator receives the virtual Administration Server connection settings.
If installation is performed on the service provider's side
You can use the following installation methods:
- Using Kaspersky Security Center OpenAPI, automate the installation of applications on tenant virtual machines and the movement of virtual machines to administration groups (open a description of Kaspersky Security Center OpenAPI methods).
- Remotely install applications on virtual machines using the Kaspersky Security Center wizard or remote installation task.
- Deploy virtual machines from a virtual machine template.
If you want to use Kaspersky Security Center OpenAPI or Kaspersky Security Center remote installation tools, then for each tenant you need to prepare the installation packages required to install Light Agent and Kaspersky Security Center Network Agent. You can distribute installation packages to the selected virtual Administration Servers using the Administration Server task or automate the distribution of packages using Kaspersky Security Center OpenAPI (open the description of Kaspersky Security Center OpenAPI methods).
In the package properties or in the properties of the remote installation task, you can specify the administration group that the virtual machine should be assigned to after Network Agent is installed on it. For more information about configuring installation packages and the deployment procedure, see the Kaspersky Security Center Help.
If you want to deploy virtual machines from a virtual machine template, then for each tenant you need to prepare a virtual machine template that has an installed Network Agent configured to connect to the tenant's virtual Administration Server and an installed Light Agent. Then you can deploy virtual machines for the tenant from this template.
When installing Network Agent on a virtual machine template, it is recommended to enable optimization of Network Agent settings for VDI.
If installation is performed on the tenant's side
If there are installation packages or virtual machine templates prepared by the service provider's administrator, the tenant's administrator can install Network Agent and Light Agent on the tenant virtual machines.