To change the passwords of Integration Server accounts:

1. Open Integration Server Web Console and connect to the Integration Server.
2. Go to the Integration Server accounts section.
3. In the window that opens, select the name of the account whose password you want to change.

   The Change password window will open. The Account name field displays the name of the selected account.

4. Enter the new password in the New password and Confirm password fields.

   Passwords must be no longer than 60 characters. You can use only letters of the Latin alphabet (uppercase and lowercase letters), numerals, and the following special characters: ! # $ % & ' ( ) * " + , - . / \ : ; < = > _ ? @ [ ] ^ ` { | } ~. For security purposes, you are advised to set passwords that are at least 8 characters long and use at least three of the four categories of characters: lowercase letters, uppercase letters, numerals, and special characters.

5. Click the Save button in the Change password window.

To change the passwords of Integration Server accounts:

1. Open Integration Server Console and connect to the Integration Server.
2. In the list on the left, select the Integration Server user accounts section.
3. In the table on the right, select the name of the account whose password you want to change.
4. Click the Change the account password link located above the table to open the Account password window and enter the new password in the Password and Confirm password fields.

   Passwords must be no longer than 60 characters. You can use only letters of the Latin alphabet (uppercase and lowercase letters), numerals, and the following special characters: ! # $ % & ' ( ) * " + , - . / \ : ; < = > _ ? @ [ ] ^ ` { | } ~. For security purposes, you are advised to set passwords that are at least 8 characters long and use at least three of the four categories of characters: lowercase letters, uppercase letters, numerals, and special characters.

5. In the Account password window, click OK.

1. In the List of virtual infrastructures section, select the virtual infrastructure for which you want to change the connection settings, click the Edit button located above the table, and select Administrator account settings.
2. In the window that opens, specify the account settings:
   • OpenStack domain

     Name of the OpenStack domain that contains an account used to connect the Integration Server to the virtual infrastructure.

     The OpenStack domain field is displayed if you are configuring a connection to a virtual infrastructure based on the OpenStack platform, VK Cloud platform or TIONIX Cloud Platform.

   • User name

     Name of the user account that the Integration Server uses to connect to the virtual infrastructure during SVM deployment, removal and reconfiguration. This account must have privileges that are sufficient for SVM deployment, removal and reconfiguration.

   • Password

     Password of the user account that the Integration Server uses to connect to the virtual infrastructure during SVM deployment, removal and reconfiguration.

3. Click the Save button.

1. In the List of virtual infrastructures section, select the virtual infrastructure for which you want to change the connection settings, click the Edit button located above the table, and select Settings for account with restricted permissions.
2. In the window that opens, specify the account settings:
   • OpenStack domain

     Name of the OpenStack domain that contains an account used to connect the Integration Server to the virtual infrastructure.

     The OpenStack domain field is displayed if you are configuring a connection to a virtual infrastructure based on the OpenStack platform, VK Cloud platform or TIONIX Cloud Platform.

   • User name

     The name of the account that the Integration Server uses to connect to the virtual infrastructure while Kaspersky Security is running in order to get information about SVMs available for connection and to distribute Light Agents between SVMs.

     To connect to a virtual infrastructure based on Citrix Hypervisor, VMware vSphere, KVM, Proxmox VE, Basis, Skala-R, HUAWEI FusionSphere, Nutanix Acropolis, OpenStack, Alt Virtualization Server, Astra Linux, VK Cloud platform, or TIONIX Cloud Platform, we recommend using an account that has limited rights to perform actions in the virtual infrastructure.

     To connect to a virtual infrastructure running on the Microsoft Hyper-V platform during Kaspersky Security operation, you must use the same user account that is used for SVM deployment, removal and reconfiguration.

   • Password

     Password of the user account that the Integration Server uses to connect to the virtual infrastructure during Kaspersky Security operation.

3. Click the Save button.

1. In the List of virtual infrastructures section, select the virtual infrastructure for which you want to change the connection settings, click the Edit button located above the table, and select VMware NSX Manager settings.
2. In the window that opens, specify the account settings:
   • Address

     New IP address in IPv4 format or the fully qualified domain name (FQDN) of the VMware NSX Manager.

     If your VMware NSX Manager virtual infrastructure is clustered, specify the virtual IP address of the cluster. First, you need to assign a virtual IP address and certificate to the cluster (for more information on configuring a VMware NSX Manager cluster, see the VMware documentation).

   • User name

     Name of the account that the Integration Server uses to connect to VMware NSX Manager. A VMware NSX Manager account that has been assigned the Enterprise Administrator role is required.

   • Password

     Password of the account that the Integration Server uses to connect to VMware NSX Manager.

3. Click the Save button.

1. In the List of virtual infrastructures section, select the virtual infrastructure for which you want to confirm the authenticity of a certificate or public key, and click the Confirm certificate button.

   The Verify certificate or Verify public key fingerprint window opens (depending on the type of virtual infrastructure object).

   By clicking on the link in this window you can view information about the received certificate or the key fingerprint.

2. If the certificate complies with your organization's security policy, click the Confirm and continue button.

   The received certificate or public key fingerprint will be saved on the device where the Integration Server is installed.

   If you do not consider this public key is authentic, click the Cancel connection button to terminate the connection.

To resolve an SSL certificate validation error or public key validation error received from a virtual infrastructure object, do one of the following:

• Confirm the authenticity of the certificate or public key received from the virtual infrastructure object. To do this, you need to launch the SVM Management Wizard (in the SVM management section of the Integration Server Console) and open the list of virtual infrastructures to which the SVM Management Wizard is configured to connect (for example, see the "Selecting infrastructure for SVM deployment" step in the procedure for installing the Protection Server). The wizard prompts you to verify the authenticity of the certificate or public key in the Verify certificate or Verify public key fingerprint window (depending on the type of virtual infrastructure object).
• Replace the certificate with a new one if you do not believe that the existing certificate is authentic.

To resolve a VMware NSX Manager SSL certificate validation error, do one of the following:

• Verify the authenticity of the certificate. To view information about the received certificate, you need to click the Confirm VMware NSX Manager certificate authenticity link that is displayed in the error message. If the certificate complies with the security policy of your organization, you can confirm the authenticity of the certificate and continue connecting to VMware NSX Manager. To do so, click the Trust the certificate button in the Verify certificate window. The received certificate will be installed as a trusted certificate on the device where the Kaspersky Security Center Administration Console is installed.
• If you do not consider the certificate to be trusted, you can disconnect by clicking the Cancel button, and replace the certificate with a new one.

1. Open Integration Server Console and connect to the Integration Server.
2. In the list on the left, select the Infrastructure connection settings section.

   The list of all virtual infrastructures to which the Integration Server connects opens:

3. In the table, select a virtual infrastructure whose connection settings you want to modify, and click the Edit link above the table.

   The Change virtual infrastructure connection settings window opens.

   The Address field displays the IP address in IPv4 format or the fully qualified domain name (FQDN) of the virtual infrastructure object to which the Integration Server is connected for interaction with protected virtual infrastructure. The Address field cannot be changed.

4. Make the necessary changes. You can change the following settings for connecting the Integration Server to the virtual infrastructure:
   • Protocol

     Protocol used to connect the Integration Server to the virtual infrastructure. By default, HTTPS protocol is used.

     The Protocol field is displayed if you are configuring a connection to a virtual infrastructure based on the OpenStack platform, VK Cloud platform or TIONIX Cloud Platform.

   • OpenStack domain

     Name of the OpenStack domain that contains an account used to connect the Integration Server to the virtual infrastructure.

     The OpenStack domain field is displayed if you are configuring a connection to a virtual infrastructure based on the OpenStack platform, VK Cloud platform or TIONIX Cloud Platform.

   • User name

     Name of the user account that the Integration Server uses to connect to the virtual infrastructure during Kaspersky Security operation.

     To connect to a virtual infrastructure based on XenServer, VMware vSphere, KVM, Proxmox VE, Basis, Skala-R, HUAWEI FusionSphere, Nutanix Acropolis, OpenStack, Alt Virtualization Server, Astra Linux, Numa vServer, VK Cloud platform, or TIONIX Cloud Platform, we recommend using an account that has limited rights to perform actions in the virtual infrastructure.

     To connect to a virtual infrastructure running on the Microsoft Hyper-V platform during Kaspersky Security operation, you must use the same user account that is used for SVM deployment, removal and reconfiguration.

   • Password

     Password of the user account that the Integration Server uses to connect to the virtual infrastructure during Kaspersky Security operation.

5. Click the OK button in the Change virtual infrastructure connection settings window.

1. Open Integration Server Console and connect to the Integration Server.
2. In the list on the left, select the Infrastructure connection settings section.

   The list of all virtual infrastructures to which the Integration Server connects opens:

3. In the table, select the virtual infrastructure managed by VMware vCenter Server, and click the Edit link located above the table.

   The Change virtual infrastructure connection settings window opens.

4. Configure the settings for connecting the Integration Server to VMware NSX Manager:
   • Use VMware NSX Manager

     Enables or disables the use of VMware NSX Manager in the Kaspersky Security solution

     If VMware NSX Manager is used in the operation of the solution, Kaspersky Security can assign security tags to the protected virtual machine.

   • Address

     New IP address in IPv4 format or the fully qualified domain name (FQDN) of the VMware NSX Manager.

     If your VMware NSX Manager virtual infrastructure is clustered, specify the virtual IP address of the cluster. First, you need to assign a virtual IP address and certificate to the cluster (for more information on configuring a VMware NSX Manager cluster, see the VMware documentation).

   • User name

     Name of the account that the Integration Server uses to connect to VMware NSX Manager. A VMware NSX Manager account that has been assigned the Enterprise Administrator role is required.

   • Password

     Password of the account that the Integration Server uses to connect to VMware NSX Manager.

   If you change the password for the account used to connect to VMware NSX Manager, the Integration Server will not be able to connect to VMware NSX Manager until at least 15 minutes have passed since the new connection settings were saved.

5. Click the OK button in the Change virtual infrastructure connection settings window.

To delete a virtual infrastructure:

1. Open Integration Server Web Console and connect to the Integration Server.
2. Go to the List of virtual infrastructures section.
3. In the table, select the virtual infrastructure that you want to delete and click the Delete button above the table.
4. Confirm the deletion in the window that opens.

To delete a virtual infrastructure:

1. Open Integration Server Console and connect to the Integration Server.
2. In the list on the left, select the Infrastructure connection settings section.
3. In the table on the right side of the window, select a virtual infrastructure you want to remove, and click the Delete link.
4. Confirm the deletion in the window that opens.

If you have removed the virtual infrastructure from this list, it is recommended to remove it also from the list of virtual infrastructures, to which the SVM Management Wizard connection is configured (see, for example, the "Selecting SVMs to remove" step of the SVM removal procedure).