The tenant protection infrastructure created using the Integration Server REST API is based on the use of virtual Kaspersky Security Center Administration Servers. Each tenant is provided with a virtual Administration Server and an account that the tenant administrator uses to connect to the virtual Administration Server.
One Kaspersky Security Center Administration Server can support up to 500 virtual Administration Servers.
Tenant virtual machines with Light Agents installed are located on the tenant's virtual Administration Server.
A tenant administrator can perform the following actions on their virtual Administration Server:
For more information about virtual Administration Servers, see the Kaspersky Security Center help.
The service provider's administrator installs the solution in their infrastructure and ensures the operation of Light Agents and other solution components:
The service provider's administrator can also configure general protection settings for tenant virtual machines.
During operation, information that may contain personal and confidential data is transmitted between Kaspersky Security Center and Kaspersky Security solution components installed in the service provider's infrastructure and on tenant virtual machines.
Before creating a tenant protection infrastructure, you need to perform the following steps:
The following components must be installed in the service provider's infrastructure:
If you are using Kaspersky Security for Virtualization 5.2 Light Agent to protect virtual machines with Windows guest operating systems, SVMs with Protection Servers versions 6.0 and 5.2 must be deployed in the service provider's infrastructure.
multitenancy
account. A multitenancy
account is created automatically as a result of Integration Server installation. It is required to interact with the Integration Server REST API.Deploying a tenant protection infrastructure consists of the following steps:
Tenant administrator are advised to change the account password they receive from the service provider's administrator.
The steps of deploying tenant protection infrastructure can be automated using the Integration Server REST API and the Kaspersky Security Center OpenAPIā¢.
To prevent unauthorized access, it is recommended to deploy the SVM and the device on which the Kaspersky Security Center Administration Server and the Integration Server are installed in a dedicated virtual network and to configure routing with address translation (SNAT) from the tenant subnets to this subnet.