Installing a Windows-based Integration Server

The procedure for installing the Windows-based Integration Server depends on which version of Kaspersky Security Center you plan to use to manage the Kaspersky Security solution:

• If you want to use the Kaspersky Security Center Windows to manage the Kaspersky Security solution, you can use the Kaspersky Security components installation wizard. The wizard lets you install the Windows-based Integration Server and Integration Server Console.

  The Integration Server must be installed on the device on which the Administration Server of Kaspersky Security Center is installed. The Integration Server Console must be installed on the device where the Kaspersky Security Center Administration Console is installed.

• If you want to use Kaspersky Security Center Linux to manage the Kaspersky Security solution, do not use the Kaspersky Security Components Installation Wizard. The Windows-based Integration Server must be installed on a device with a Windows operating system, regardless of the location of the Kaspersky Security Center components. You can also install the Integration Server Console on a Windows device. Installation is performed manually.

The Integration Server and Integration Server Console must be installed under an account that belongs to the local administrator group.

Installation requires at least 4 GB of free space on the drive containing the %ProgramData% folder.

For successful installation of the Integration Server, in the settings of network equipment or traffic monitoring software you need to allow connections through the port that will be used by SVMs and Light Agents to connect to the Integration Server. By default, port number 7271 (TCP) is used.

Installing the Integration Server and Integration Server Console using the wizard

You can install the Integration Server and Integration Server Console by using the Kaspersky Security Components installation wizard in interactive mode or in silent mode.

The Microsoft .NET Framework 4.6.2, 4.7, or 4.8 is required for the Kaspersky Security Components Installation Wizard. You can install the Microsoft .NET Framework platform in advance, or the Kaspersky Security Component Installation Wizard will suggest installing it during the installation of Kaspersky Security solution components. Internet access is required to install Microsoft .NET Framework. If there are any problems with the installation of Microsoft .NET Framework, make sure that Windows updates KB2919442 and KB2919355 have been installed on the device.

Depending on the availability of Kaspersky Security Center components installed on the device, the following operations are performed once installation is started:

• If only Kaspersky Security Center Administration Console is installed on the device, the Integration Server Console is installed.
• If the Kaspersky Security Center Administration Server and Kaspersky Security Center Administration Console are installed on the device, the Integration Server and Integration Server Console are installed.

When you install the Integration Server, the data kept while removing the previous version of the Integration Server can be used.

After installation of the Integration Server Console is complete, in Kaspersky Security Center Administration Console, in the workspace of the Administration Server <server name> node on the Monitoring tab, the Deployment section displays a Manage Kaspersky Security for Virtualization <version number> Light Agent link (where <version number> is the number of the installed version of the Kaspersky Security solution). This link is used to start the Integration Server Console.

The procedure for installing the Integration Server as part of Kaspersky Security solution update differs from the "clean" installation procedure described in this section.

Installing in interactive mode using the wizard

To install the Integration Server and Integration Server Console in interactive mode using the wizard:

1. On the device where Administration Console and Kaspersky Security Center Administration Server are installed, run the ksvla-components_<solution version number>_mlg.exe file. This file is included in the distribution kit.

   Kaspersky Security components installation Wizard starts.

2. Select the localization language of the Wizard and of the Kaspersky Security components and proceed to the next step of the Wizard.

   By default, the localization language of the operating system installed on the device where the Wizard was started is used.

3. Make sure that the Install management components option is selected and proceed to the next step of the Wizard.

   The Wizard checks the amount of free space on the drive that contains the %ProgramData% folder. If there is less than 4 GB of free space on the drive, the Wizard displays an error message and you cannot proceed to the next step of the Wizard. If this is the case, close the Wizard, free up space on the drive, and restart the Kaspersky Security Components Installation Wizard.

4. In the next step, read the Kaspersky Security End User License Agreement, which is concluded between you and Kaspersky, and the Privacy Policy, which describes the processing and transmission of data.

   To continue the installation, you must confirm that you have fully read and accept the terms of the End User License Agreement and the Privacy Policy. To confirm, select both check boxes in the window of the Wizard.

   Proceed to the next step of the wizard.

5. Create the password of the Integration Server administrator (admin) account. The admin account is used for the following purposes:
   • To connect the Integration Server Console to the Integration Server if the device on which the Integration Server Console is installed is not part of a Microsoft Windows domain.
   • To connect the Integration Server Web Console to the Integration Server.

   Enter a password in the Password and Confirm password fields. The account name cannot be edited.

   A password must be no longer than 60 characters. You can use only letters of the Latin alphabet (uppercase and lowercase letters), numerals, and the following special characters: ! # $ % & ' ( ) * " + , - . / \ : ; < = > _ ? @ [ ] ^ ` { | } ~. For security purposes, you are advised to set a password that is at least 8 characters long and use at least three of the four categories of characters: lowercase letters, uppercase letters, numerals, and special characters.

   Proceed to the next step of the wizard.

6. If port 7271, which is the default port for connecting to the Integration Server, is occupied on the device where the wizard is running, the wizard will prompt you to specify a port number for connecting to the Integration Server.

   In the Port field, specify a port number in the range of 1025–65535 and proceed to the next step of the Wizard.

7. Review the information about the actions that the wizard will perform and click the Install button to begin performing the listed actions.
8. Wait for the wizard to finish.

   If an error occurs during wizard operation, the wizard rolls back the changes made.

9. Click Finish to close the Wizard window.

Information about the work of the Wizard is written to trace files of the Kaspersky Security Components Installation Wizard. If the wizard completed with an error, you can use these files when contacting Technical Support.

Installing in silent mode using the wizard

Before starting installation of the Integration Server and Integration Server Console, it is recommended to close the Kaspersky Security Center Administration Console.

To install the Integration Server and Integration Server Console in silent mode using the wizard:

ksvla-components_<solution version number>_mlg.exe -q --lang=<language ID> --accept-EulaAndPrivacyPolicy=yes --viisPass=<password> [--log-path=<file path>] [--viisPort=<port number>]

where:

• <solution version number> is the version number of the solution in X.X.X.X format.
• -q is an option specifying that the installation is performed in silent mode. If you want to run the installation interactively from the command line, do not specify this option.
• --lang=<language ID> is the identifier of the language of the components to install.

  The language ID must be indicated in the following format: ru, en, de, fr, zh-Hans, zh-Hant, ja. It is case-sensitive.

• --accept-EulaAndPrivacyPolicy=yes means that you accept the terms of the Kaspersky Security End User License Agreement, concluded between you and Kaspersky, and the Privacy Policy, which describes the processing and transmission of data. By setting this parameter to yes, you confirm the following:
  • You have fully read, understood and accept the terms and conditions of the Kaspersky Security End User License Agreement.
  • You have fully read and understood the Privacy Policy, you are aware and agree that your data will be handled and transmitted (including to third countries) as described in the Privacy Policy.

  The text of the End User License Agreement and Privacy Policy is included in the solution's distribution kit. Accepting the terms of the End User License Agreement and Privacy Policy is a prerequisite for installing Integration Server and Integration Server Console.

  You can read the text of the End User License Agreement and the Privacy Policy by executing the following command:

  ksvla-components_<solution version number>_mlg.exe --lang=<language ID> --show-EulaAndPrivacyPolicy

  The text of the End User License Agreement and the Privacy Policy is output to the license_<language ID>.txt file in the tmp folder.

• --viisPass=<password> is the password of the Integration Server administrator account (admin). The admin account is used for the following purposes:
  • To connect the Integration Server Console to the Integration Server if the device on which the Integration Server Console is installed is not part of a Microsoft Windows domain.
  • To connect the Integration Server Web Console to the Integration Server.

  A password must be no longer than 60 characters. You can use only letters of the Latin alphabet (uppercase and lowercase letters), numerals, and the following special characters: ! # $ % & ' ( ) * " + , - . / \ : ; < = > _ ? @ [ ] ^ ` { | } ~. For security purposes, you are advised to set a password that is at least 8 characters long and use at least three of the four categories of characters: lowercase letters, uppercase letters, numerals, and special characters.

• --log-path=<path to file> is the path to the file where information about installation results is saved.

  Optional parameter. By default, the installation results are logged in trace files saved at %temp%\Kaspersky_Security_for_Virtualization_<version number>_Light_Agent_BundleInitialInstall_logs_<date and time>.zip, where:

  • <version number> refers to the number of the installed version of the Kaspersky Security solution;
  • <date and time> refers to the date and time when the installation was completed in the dd_MM_yyyy_HH_mm_ss format.
• --viisPort=<port number> is the port for connecting to the Integration Server.

  Optional parameter. Port number 7271 is used by default for connecting to the Integration Server. Specify this parameter if you want to use a different port to connect to the Integration Server.

To view a description of all available command line parameters for installing and updating Kaspersky Security components, use the --help parameter.

Installing the Integration Server and Integration Server Console takes some time. Information about the work of the Wizard is written to trace files of the Kaspersky Security Components Installation Wizard. If the wizard completed with an error, you can use these files when contacting Technical Support.

Installing manually

To remove the Integration Server and Integration Server Console manually:

1. Place the ksvla-components_<solution version number>_mlg.exe file (where <version number> is the version number of the solution in X.X.X.X format) on the Windows device. This file is included in the distribution kit.
2. Extract files required for installing Integration Server and Integration Server Console by running:

   ksvla-components_<solution version>_mlg.exe -layout <folder> --accept-EulaAndPrivacyPolicy=yes

   where:

   • <solution version> is the version number of the solution in X.X.X.X format.
   • <folder> is the path to the folder to extract the Integration Server and Integration Server Console installation files into. If you do not specify a folder path, the files are extracted into the 'data' subfolder inside the folder containing the ksvla-components_<solution version number>_mlg.exe file.
   • accept-EulaAndPrivacyPolicy=yes means that you accept the terms of the Kaspersky Security End User License Agreement between you and Kaspersky and the Privacy Policy that describes processing and transmission of data. By setting this parameter to yes, you confirm the following:
     • You have fully read, understood and accept the terms and conditions of the Kaspersky Security End User License Agreement.
     • You have fully read and understood the Privacy Policy, you are aware and agree that your data will be handled and transmitted (including to third countries) as described in the Privacy Policy.

     Accepting the terms of the End User License Agreement and Privacy Policy is a prerequisite for installing Integration Server and Integration Server Console. You can read the text of the End User License Agreement and the Privacy Policy by executing the following command:

     ksvla-components_<solution version>_mlg.exe --lang=<language ID> --show-EulaAndPrivacyPolicy

     The text of the End User License Agreement and the Privacy Policy is output to the license_<language ID>.txt file in the tmp folder.

   Running the command creates two subfolders with files inside the specified folder. The AttachedContainer subfolder includes the following files, among others:

   • viis_service.msi – file required to install the Integration Server
   • viis_console.msi – file required to install Integration Server Console
3. Start the Integration Server installation process by running:

   viis_service.msi ADMIN_VIIS_PASSWORD=<password>

   where:

   • <password> is the password of the Integration Server administrator account (admin). The admin account is used for connecting Integration Server Console to Integration Server.

     A password must be no longer than 60 characters. You can use only letters of the Latin alphabet (uppercase and lowercase letters), numerals, and the following special characters: ! # $ % & ' ( ) * " + , - . / \ : ; < = > _ ? @ [ ] ^ ` { | } ~. For security purposes, you are advised to set a password that is at least 8 characters long and use at least three of the four categories of characters: lowercase letters, uppercase letters, numerals, and special characters.

4. Launch the Integration Server Console installation process by running:

   viis_console.msi

After installation is complete, you can start the Integration Server Console using the executable file located in the Integration Server Console installation folder.