Preparing for application installation
Before installing the Kaspersky Security, you need to do the following.
General preparations
- Check the composition of Kaspersky Security Center components and verify that the Kaspersky Security Center components and virtual infrastructure components meet the hardware and software requirements of Kaspersky Security.
- Make sure that no anti-virus software is installed on the virtual machines that you want to protect using Kaspersky Security.
- Prepare the files required for installing the application:
- From Kaspersky website, download the file necessary for running the Kaspersky Security Components Installation Wizard.
- Using the Kaspersky Security Components Installation Wizard, download SVM images and SVM image description files from Kaspersky website.
- If you are not planning to use automatically created installation packages to install Light Agent, unpack the files, required for installation of Light Agent for Windows and Light Agent for Linux using the Kaspersky Security Components Installation Wizard.
- If you want to use the web interface to interact with Kaspersky Security Center, you can download the archives required for installing web plug-ins from Kaspersky website. The files required to install web plug-ins are also available in the Web Console.
- Make sure that the settings of the network equipment or software controlling traffic between virtual machines allows network traffic to pass through the ports used during installation and operation of the application.
- Make sure that you have configured the settings of the accounts that are required for installation and operation of the application.
- If the network uses dynamic IP addressing, ensure the capability to route network traffic from the SVM to the computer on which the Kaspersky Security Center Administration Server is installed.
- Install the latest Windows updates prior to installing Light Agent for Windows, Integration Server, Integration Server Console, and Kaspersky Security MMC plug-ins.
- If you want virtual machines on which the Kaspersky Security components are installed to be automatically moved into administration groups after installation of the application, create the administration groups in the Kaspersky Security Center Administration Console and configure rules for automatically moving the virtual machines to administration groups.
To ensure a secure connection between the application and the hypervisor, you are advised to use the AES256 encryption algorithm to encrypt incoming connections on the hypervisor over TLS, SSH, and other similar protocols.
Additional actions for Microsoft Windows Server (Hyper-V) hypervisor
If a Microsoft Windows Server (Hyper-V) hypervisor is installed in the virtual infrastructure, you also have to perform the following operations prior to installing Kaspersky Security:
- Ensure that the Integration Services package is installed on virtual machines that you want to protect.
- Ensure that the ADMIN$ shared network resource is enabled on the hypervisor. To enable the ADMIN$ shared network resource on Microsoft Windows Server 2012 R2 Hyper-V hypervisors, a File Server role must be assigned in advance using the server configuration wizard.
- Ensure that the drive where the ADMIN$ shared network resource is located has enough space for the SVM image. During installation of the Protection Server component, the SVM image is copied to the ADMIN$ shared network resource and then moved to the folder specified during SVM deployment.
- Ensure that hypervisors that are not included in Active Directory have Windows Remote Management (WinRM) Ver. 3.0 installed. Windows Remote Management (WinRM) version 3.0 is included in the Windows Management Framework 3.0 installation package that can be downloaded from the Microsoft website.
- If you want to use a domain account to connect the Integration Server to the hypervisor, make sure that the following conditions are met:
- Integration Server is able to determine the hypervisor address using the domain name service (DNS) of the domain of the hypervisor on which the SVM is deployed.
- The DNS server has forward and reverse records for the Integration Server.
- Zones containing records about the Integration Server and the hypervisor on which the SVM is deployed are integrated with Active Directory.
- The computer from which SVM deployment is performed is able to resolve the names of hypervisors on which the SVM is deployed.
- If you want the hypervisor user name and password, which were specified during installation of the SVM, to be encrypted when transmitted, you can use an SSL certificate to configure a secure connection between the hypervisor on which the SVM will be deployed and the computer where the Kaspersky Security Center Administration Console is installed.
Additional actions for VMware ESXi hypervisor
If a VMware ESXi hypervisor is installed in the virtual infrastructure, you also have to perform the following operations prior to installing Kaspersky Security:
- Make sure that the VMware Tools kit is installed on the virtual machines that you want to protect.
- If a proxy server is used to connect the computer hosting the Kaspersky Security Center Administration Console to the VMware vCenter Server, make sure that the virtual machines are available via the proxy server.
Additional actions for a Citrix Hypervisor (Citrix XenServer)
If a Citrix Hypervisor (Citrix XenServer) is installed in the virtual infrastructure, prior to beginning installation of Kaspersky Security you need to make sure that XenTools is installed on the virtual machines that you want to protect.
Additional actions for Proxmox VE hypervisor
If the Proxmox VE hypervisor is installed in the virtual infrastructure, before starting the installation of Kaspersky Security make sure that there is at least 30 GB of free space in the /var/tmp directory.
Additional actions for working with Citrix App Layering
If you are using the virtualization solution Citrix App Layering (formerly UniDesk), do the following prior to installing the application on the virtual machine template:
- Make the following changes to the operating system registry on the layer where the application is installed:
- In the HKLM\SYSTEM\CurrentControlSet\Services\uniflt\ registry key, create a new key of the multi-line parameter type with the name AlwaysOnBoot:
C:\ProgramData\KasperskyLab\C:\ProgramData\KasperskyLab\C:\Program Files(x86)\Kaspersky Lab\
- In HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Unifltr registry key, create a new key of the DWORD type with the name MiniFilterBypass and a value of 1.
- Restart the virtual machine.
For more information on installing antivirus software with Citrix App Layering, refer to Citrix App Layering documentation.
Additional actions for a HUAWEI FusionCompute CNA hypervisor
If a HUAWEI FusionCompute CNA hypervisor is installed in the virtual infrastructure, prior to beginning installation of Kaspersky Security you need to make sure that the HUAWEI Tools package is installed on the virtual machines that you want to protect.
Page top