Preparing a file server for a Kaspersky Security Center Linux failover cluster

A file server works as a required component of a Kaspersky Security Center Linux failover cluster.

To prepare a file server:

1. Make sure that the file server meets the hardware and software requirements.
2. Install and configure an NFS server:
   • Access to the file server must be enabled for both nodes in the NFS server settings.
   • The NFS protocol must have version 4.0 or 4.1.
   • Minimum requirements for Linux kernel:
     • 3.19.0-25, if you use NFS 4.0
     • 4.4.0-176, if you use NFS 4.1

   Depending on your Linux distribution, install either nfs-utils package or nfs-kernel-server package by running the corresponding command:

   sudo yum install nfs-utils

   sudo apt install nfs-kernel-server

3. On the file server, create two folders and share them by using NFS. One of them is used to keep information about the failover cluster state. The other one is used to store the data and settings of Kaspersky Security Center Linux. You will specify paths to the shared folders while configuring the installation of Kaspersky Security Center Linux.

   Ensure that the following folders do not exist:

   • /mnt/KlFocStateShare
   • /mnt/KlFocDataShare_klfoc

   If any of these folders exists, recursively delete it.

   Run the following commands:

   sudo mkdir -p /mnt/KlFocStateShare

   sudo mkdir -p /mnt/KlFocDataShare_klfoc

   sudo chown ksc:kladmins /mnt/KlFocStateShare

   sudo chown ksc:kladmins /mnt/KlFocDataShare_klfoc

   sudo chmod -R 770 /mnt/KlFocStateShare /mnt/KlFocDataShare_klfoc

   sudo sh -c "echo /mnt/KlFocStateShare *\(rw,sync,no_subtree_check,no_root_squash\) >> /etc/exports"

   sudo sh -c "echo /mnt/KlFocDataShare_klfoc *\(rw,sync,no_subtree_check,no_root_squash\) >> /etc/exports"

   sudo exportfs -a

   sudo systemctl start rpcbind

   sudo systemctl start nfs-server

   Enable autostart by running the following command:

   sudo systemctl enable rpcbind

   You can specify custom folders, but we recommend that you use the suggested folder names for convenience when using the Online Help.

4. Restart the file server.

The file server is prepared. To deploy the Kaspersky Security Center Linux failover cluster, follow the further instructions in this scenario.

See also: About Kaspersky Security Center Linux failover cluster Scenario: Deployment of Kaspersky Security Center Linux failover cluster

Page top