Kaspersky Security for Virtualization 6.2 Light Agent

Reconfiguring SVMs using Integration Server Web Console

To manage SVM settings using Integration Server Web Console, you need to create and run a task an SVM reconfiguration task for the Integration Server to reconfigure the selected SVM.

After it starts, the task appears in the task list in Integration Server Web Console, in the SVM management section, and is added to the task queue on the Integration Server. You can view information about each task and its execution status.

When the task completes successfully, the selected SVM is reconfigured.

To create and run an SVM reconfiguration task for the Integration Server:

  1. Open Integration Server Web Console and connect to the Integration Server.
  2. Go to the SVM management section.
  3. Click the New task button and select SVM reconfiguration from the drop-down list.

    The Integration Server New Task Wizard will start.

  4. Follow the wizard instructions.

In this section

Selecting SVM for reconfiguration

Entering the configuration password

Editing SVM network settings

Changing SVM IP settings

Changing Kaspersky Security Center connection settings

Changing the configuration password and root account settings

Start task for SVM reconfiguration

Start task for SVM reconfiguration (OpenStack)

Page top
[Topic 197590]

Selecting SVM for reconfiguration

At this step, you must select the SVM or SVMs that you want to reconfigure.

The table displays information about the virtual infrastructures to which connections are configured for the Integration Server. The table also contains information about deployed SVMs. Each row of the table displays the following information about the virtual infrastructure object:

  • Name/Address

    This column contains the IP addresses or fully qualified domain names (FQDN) of the virtual infrastructure objects to which the Integration Server connects, and the names of the SVMs deployed on the hypervisors.

    Depending on the type of virtual infrastructure, the column may display:

    • IP address or the fully qualified domain name (FQDN) of the virtual infrastructure administration server
    • IP address or the fully qualified domain name of the hypervisor
    • IP address or the fully qualified domain name of the Keystone microservice
    • OpenStack project and domain name.
  • Status

    This column contains information about the status of the Integration Server's connection to the virtual infrastructure, the state of the infrastructure objects to which the connection is made, and the state of the SVMs deployed in the infrastructure.

    If the Integration Server is not connected to the virtual infrastructure object, the column displays an error message.

  • SVM version

    This column contains the SVM version number.

  • Infrastructure object type

    The column contains the type of the virtual infrastructure object that the Integration Server will connect to.

You can search the list of virtual infrastructure objects based on the Name/Address column. The table displays only those virtual infrastructure objects that meet the search criteria. To reset the search results, delete the contents of the search field.

You can update the list of virtual infrastructure objects using the Refresh button above the table. When updating a list, the Integration Server verifies the SSL certificates or fingerprints of the public key, just like what happens when adding virtual infrastructure objects to the list.

If the virtual infrastructure in which you want to reconfigure the SVM is not in the list, you need to configure a connection from the Integration Server to this virtual infrastructure.

To selecting an SVM for reconfiguration,

In the table, select the check boxes to the left of the names of the SVMs you want to reconfigure.

If SVMs are being reconfigured in an infrastructure based on the OpenStack platform, VK Cloud platform, or TIONIX Cloud Platform, simultaneous reconfiguration of SVMs deployed in different infrastructures is not supported. You can reconfigure SVMs in only one of these infrastructures at a time, or in one or more infrastructures of other types.

SVMs in OpenStack projects that are running on different Keystone microservices cannot be reconfigured simultaneously. You can simultaneously reconfigure SVMs deployed in OpenStack projects that are running on the same Keystone microservice.

Proceed to the next step of the wizard.

Page top
[Topic 74291]

Entering the configuration password

At this step, specify the configuration password that was created during SVM deployment.

Proceed to the next step of the wizard.

Page top
[Topic 67759]

Editing SVM network settings

At this step, you can edit the network settings of the SVM.

Changing the list of networks on SVMs results in the creation of new network adapters. This could change the IP address of an SVM.

To change SVM network settings:

  1. Select the Change SVM network settings check box.

    The window displays a table containing the following information about SVMs selected for reconfiguration:

    • Hypervisor address

      IP address in IPv4 format or the fully qualified domain name (FQDN) of the hypervisor on which the SVM is deployed.

      The Hypervisor address column is displayed if you are deploying the SVM to a virtual infrastructure based on Microsoft Hyper-V, XenServer, VMware vSphere, KVM, Proxmox VE, Basis, Skala-R, HUAWEI FusionSphere, Nutanix Acropolis, Alt Virtualization Server, Astra Linux, or Numa vServer.

    • OpenStack project name

      Name of the OpenStack project that the SVM is deployed in, as well as project path in the infrastructure.

      The OpenStack project name column is displayed if you are performing SVM deployment in a virtual infrastructure managed by the OpenStack platform, VK Cloud platform, or TIONIX Cloud Platform.

    • SVM name

      The name that was defined when specifying SVM settings.

  2. For each SVM, specify one or more virtual networks in the Network name column.

    The name of the virtual network that the SVM will use to connect to Light Agents, the Integration Server and the Kaspersky Security Center Administration Server.

    You can specify one or more virtual networks. To add a field for selecting virtual networks, use the button located next to the network selection field.

    If you intend to use dynamic IP addressing (DHCP) for all SVMs, the network settings will be received from the DHCP server via the first virtual network in the list of networks specified for each SVM. Make sure that the Wizard can connect to the SVM with the network settings of the first virtual network received from the DHCP server.

    If the virtual infrastructure uses the VMware Distributed Virtual Switch component, you can specify a Distributed Virtual Port Group to which the SVM will be connected.

  3. If you have selected to reconfigure SVMs deployed in a virtual infrastructure managed by the OpenStack platform, VK Cloud platform, or TIONIX Cloud Platform, you can also specify one or more security groups for each selected network in the Security group column.

    Set of network traffic filtering rules that are created in the virtual infrastructure and applied in the virtual network.

    The drop-down list displays all available security groups. You can specify one or more security groups for each selected virtual network. To select a security group, select the check box to the left of its name. The names of the selected security groups are displayed in the field.

  4. If the SVMs that you selected for reconfiguration are deployed in a virtual infrastructure running the Microsoft Hyper-V platform, you can also specify the VLAN ID.

    The ID of the virtual local area network (VLAN) that the SVM will use to connect to Light Agents, the Integration Server and the Kaspersky Security Center Administration Server.

    If VLAN is not used, the column shows No.

Proceed to the next step of the wizard.

Page top
[Topic 65904]

Changing SVM IP settings

For this step, you can edit IP addressing settings used for all SVMs. You can use dynamic or static IP addressing.

To edit the IP address settings:

  1. Select the Edit SVM IP settings check box.

    If you added virtual networks for one or more SVMs at the previous step of the Wizard, the Edit SVM IP settings check box is not displayed. You cannot proceed to the next step until the network settings of SVMs selected for reconfiguration have been configured.

  2. If you want to specify all network settings of the SVM manually, select Static IP addressing. This opens a table containing the following information:
    • Hypervisor address

      IP address in IPv4 format or the fully qualified domain name (FQDN) of the hypervisor on which the SVM is deployed.

      The Hypervisor address column is displayed if the SVM is deployed in a virtual infrastructure based on Microsoft Hyper-V, XenServer, VMware vSphere, KVM, Proxmox VE, Basis, Skala-R, HUAWEI FusionSphere, Nutanix Acropolis, Alt Virtualization Server, Astra Linux, or Numa vServer.

    • OpenStack project name

      Name of the OpenStack project that the SVM is deployed in, as well as project path in the infrastructure.

      The OpenStack project name column is displayed if the SVM is deployed in a virtual infrastructure managed by the OpenStack platform, VK Cloud platform, or TIONIX Cloud Platform.

    • SVM name

      The name that was defined when specifying SVM settings.

    • Network name

      The name of the virtual network that the SVM uses to connect to Light Agents, the Integration Server and the Kaspersky Security Center Administration Server.

    Specify the following network settings for each SVM:

    • SVM IP address
    • Subnet mask
    • Gateway
    • DNS server
    • Alternative DNS
  3. If you want to use DHCP network settings for all SVMs, select Dynamic IP addressing (DHCP).

    By default, the IP address of the DNS server and the IP address of the alternative DNS server received over the DHCP protocol are used for each SVM. If you specified several virtual networks for the SVM at the previous step, by default the network settings for the SVM are received from the DHCP server of the first virtual network in the list of the specified virtual networks.

    If you want to manually specify the IP address of the DNS server and alternative DNS server, clear the Use list of DNS servers received via DHCP check box. This opens a table containing the following information:

    • Hypervisor address

      IP address in IPv4 format or the fully qualified domain name (FQDN) of the hypervisor on which the SVM is deployed.

      The Hypervisor address column is displayed if the SVM is deployed in a virtual infrastructure based on Microsoft Hyper-V, XenServer, VMware vSphere, KVM, Proxmox VE, Basis, Skala-R, HUAWEI FusionSphere, Nutanix Acropolis, Alt Virtualization Server, Astra Linux, or Numa vServer.

    • OpenStack project name

      Name of the OpenStack project that the SVM is deployed in, as well as project path in the infrastructure.

      The OpenStack project name column is displayed if the SVM is deployed in a virtual infrastructure managed by the OpenStack platform, VK Cloud platform, or TIONIX Cloud Platform.

    • SVM name

      The name that was defined when specifying SVM settings.

    Specify the IP addresses of DNS servers in the DNS server and Alternative DNS server table columns.

Proceed to the next step of the wizard.

Page top
[Topic 65907]

Changing Kaspersky Security Center connection settings

At this step, you can edit the settings of SVM connection to the Kaspersky Security Center Administration Server.

To edit the settings for connecting SVMs to Kaspersky Security Center Administration Server:

  1. Select the Edit settings for SVM connection to Kaspersky Security Center check box.
  2. Specify the following settings:
    • Address

      Address of the device hosting the Kaspersky Security Center Administration Server. You can specify the IP address in IPv4 format or the fully qualified domain name (FQDN) of the device.

    • Port

      Number of the port for connecting the SVM to the Kaspersky Security Center Administration Server.

    • SSL port

      Number of the port for connecting an SVM to the Kaspersky Security Center Administration Server using an SSL certificate.

Proceed to the next step of the wizard.

Page top
[Topic 293532]

Changing the configuration password and root account settings

At this step, you can modify the following settings:

  • Configuration password (the password used to reconfigure SVMs).
  • Root account password.
  • Remote access mode to the SVM over SSH for the root user account.

If you want to change the configuration password, select the Change the klconfig account password (configuration password) check box and specify the new configuration password in the Password and Confirm password fields.

If you want to change the root account password, select the Change the root account password check box and specify the new password in the Password and Confirm password fields.

Passwords must be no longer than 60 characters. You can use only letters of the Latin alphabet (uppercase and lowercase letters), numerals, and the following special characters: ! # $ % & ' ( ) * " + , - . / \ : ; < = > _ ? @ [ ] ^ ` { | } ~. For security purposes, you are advised to set passwords that are at least 8 characters long and use at least three of the four categories of characters: lowercase letters, uppercase letters, numerals, and special characters.

If you want to change the mode of remote access over SSH to the SVM, select the Change remote access for the root account check box, and then select or clear the Allow remote access to SVM for the root account via SSH check box.

Proceed to the next step of the wizard.

Page top
[Topic 65890]

Start task for SVM reconfiguration

This step is displayed if the SVM reconfiguration is being performed in a virtual infrastructure based on Microsoft Hyper-V, XenServer, VMware vSphere, KVM, Proxmox VE, Basis, Skala-R, HUAWEI FusionSphere, Nutanix Acropolis, Alt Virtualization Server, Astra Linux, or Numa vServer.

This step displays all the settings of the created SVM reconfiguration task for the Integration Server:

  • The task name is generated automatically and contains the task type. You can use this name to find the task in the list in Integration Server Web Console, in the SVM management section.
  • The list at the top of the window contains information about which configuration settings will be changed for all the SVMs that you selected when creating the task. For the settings that will be changed, the new value is displayed.
  • The table at the bottom of the window contains the individual settings for each SVM.

To start the SVM reconfiguration task, click the Start button.

You can monitor the task progress in Integration Server Web Console, in the SVM management section.

Page top
[Topic 65889]

Start task for SVM reconfiguration (OpenStack)

This step is displayed if you are reconfiguring an SVM in a virtual infrastructure running the TIONIX Cloud Platform or in a virtual infrastructure running the OpenStack platform.

This step displays all the settings of the created SVM reconfiguration task for the Integration Server:

  • The task name is generated automatically and contains the task type. You can use this name to find the task in the list in Integration Server Web Console, in the SVM management section.
  • The upper part of the window displays the IP address or fully qualified domain name (FQDN) of the Keystone microservice that manages the OpenStack project in which the SVMs are deployed. The list below contains information about which configuration settings will be changed for all the SVMs that you selected when creating the task. For the settings that will be changed, the new value is displayed.
  • The table at the bottom of the window contains individual settings for each SVM:

To start the SVM reconfiguration task, click the Start button.

You can monitor the task progress in Integration Server Web Console, in the SVM management section.

Page top
[Topic 65905]