Licensing options in a cloud environment

Work in a cloud environment is outside the basic functionality of Kaspersky Security Center and therefore requires a dedicated license.

Two Kaspersky Security Center licensing options are available for working in a cloud environment:

Paid AMI (in Amazon Web Services) or Usage-based monthly billed SKU (in Microsoft Azure).
This grants a license for Kaspersky Security Center as well as licenses for Kaspersky Endpoint Security for Linux and Kaspersky Security for Windows Server. You have to pay according to the rules of the cloud environment that you use.

This model lets you have not more than 200 client devices for one Administration Server.
A free-of-charge, ready-to-use image using a proprietary license, according to the Bring Your Own License (BYOL) model.
For Kaspersky Security Center licensing in AWS or Azure, you must have a license for one of the following applications:
- Kaspersky Security for Virtualization
- Kaspersky Hybrid Cloud Security
The BYOL model lets you have up to 100,000 client devices for one Administration Server. This model also lets you manage devices outside the AWS, Azure, or Google environment.

You can choose the BYOL model in any of the following cases:
- You already own a valid license for Kaspersky Security for Virtualization.
- You already own a valid license for Kaspersky Hybrid Cloud Security.
- You are willing to purchase a license immediately before deployment of Kaspersky Security Center.
At the stage of initial setup, Kaspersky Security Center prompts you for an activation code or key file.

If you choose BYOL, you will not have to pay for Kaspersky Security Center through Azure Marketplace or AWS Marketplace.

In both cases, Vulnerability and Patch Management is automatically activated, and Mobile Device Management cannot be activated.

You may encounter an error when trying to activate the feature Support of the cloud environment using the license for Kaspersky Hybrid Cloud Security.

Upon subscribing to Kaspersky Security Center, you get an Amazon Elastic Compute Cloud (Amazon EC2) instance or a Microsoft Azure virtual machine with Kaspersky Security Center Administration Server. The installation packages for Kaspersky Security for Windows Server and Kaspersky Endpoint Security for Linux are available on the Administration Server. You can install these applications on devices in the cloud environment. You do not have to license these applications.

If a managed device is not visible to the Administration Server for more than a week, the application (Kaspersky Security for Windows Server or Kaspersky Endpoint Security for Linux) on the device will shift to limited functionality mode. To activate the application again, you have to make the device on which the application is installed visible to the Administration Server again.