Installing a Light Agent on tenant virtual machines

At this step of the deployment of the tenant security infrastructure, the following actions are performed:

• Kaspersky Security Center Network Agent, which is configured to connect to the tenant's virtual Administration Server, is installed on tenant virtual machines.
• Tenant virtual machines are moved to the Managed devices folder of the virtual Administration Server configured for the tenant.
• Light Agent for Linux or Light Agent for Windows is installed on tenant virtual machines.

  To protect virtual machines running Windows guest operating systems, use the Light Agent for Windows component included in Kaspersky Security for Virtualization 5.2 Light Agent.

The listed actions can be performed both on the service provider's side and on the tenant's side after the tenant administrator receives the virtual Administration Server connection settings.

If installation is performed on the service provider's side

You can use the Kaspersky Security Center OpenAPI to automatically install applications on the tenant virtual machines and move virtual machines to administration groups. Refer to the Knowledge Base for more details.

You can also use other installation options:

• Remote installation of applications on virtual machines using the Installation Wizard or remote installation task.

  In the Light Agent for Linux installation package, you need to include the autoinstall.ini configuration file, which configures the settings for using Kaspersky Endpoint Security for Linux in Light Agent mode. For more details, see the Kaspersky Endpoint Security for Linux Help.

  For each tenant, you need to prepare a Network Agent installation package whose properties include the connection settings for the virtual Administration Server configured for this tenant.

  You can specify the administration group to which the virtual machine will be moved after Network Agent is installed on it in the properties of a package or a remote installation task. For more information about configuring installation packages and the deployment procedure, see the Kaspersky Security Center Help.

  You can distribute installation packages to the selected virtual Administration Servers using the Administration Server task or automate the distribution of packages using Kaspersky Security Center OpenAPI. Refer to the Knowledge Base for more details.

• Deploying virtual machines from a virtual machine template.

  For each tenant, you need to prepare a virtual machine template with a Light Agent as well as a Network Agent configured to connect to the tenant's virtual Administration Server. Then you can deploy virtual machines for the tenant from this template.

  When installing Network Agent on a virtual machine template, it is recommended to enable optimization of Network Agent settings for VDI.

If installation is performed on the tenant's side

If there are installation packages or virtual machine templates prepared by the service provider's administrator, the tenant's administrator can install Network Agent and Light Agent on the tenant virtual machines.