Preparing a file server for a Kaspersky Security Center Linux failover cluster

A file server works as a required component of a Kaspersky Security Center Linux failover cluster.

To prepare a file server:

1. Make sure that the file server meets the hardware and software requirements.
2. Install and configure an NFS server:
   • Access to the file server must be enabled for both nodes in the NFS server settings.
   • The NFS protocol must have version 4.0 or 4.1.
   • Minimum requirements for Linux kernel:
     • 3.19.0-25, if you use NFS 4.0
     • 4.4.0-176, if you use NFS 4.1
3. On the file server, create two folders and share them by using NFS. One of them is used to keep information about the failover cluster state. The other one is used to store the data and settings of Kaspersky Security Center Linux. You will specify paths to the shared folders while configuring the installation of Kaspersky Security Center Linux.

   Run the following commands:

   sudo yum install nfs-utils

   sudo mkdir -p /mnt/KlFocStateShare

   sudo mkdir -p /mnt/KlFocDataShare_klfoc

   sudo chown ksc:kladmins /mnt/KlFocStateShare

   sudo chown ksc:kladmins /mnt/KlFocDataShare_klfoc

   sudo chmod -R 777 /mnt/KlFocStateShare /mnt/KlFocDataShare_klfoc

   sudo sh -c "echo /mnt/KlFocStateShare *\(rw,sync,no_subtree_check,no_root_squash\) >> /etc/exports"

   sudo sh -c "echo /mnt/KlFocDataShare_klfoc *\(rw,sync,no_subtree_check,no_root_squash\) >> /etc/exports"

   sudo cat /etc/exports

   sudo exportfs -a

   sudo systemctl start rpcbind

   sudo service nfs start

   Enable autostart by running the following command:

   sudo systemctl enable rpcbind

4. Restart the file server.

The file server is prepared. To deploy the Kaspersky Security Center Linux failover cluster, follow the further instructions in this scenario.