About Integration Server Console

The Integration Server Console contains the following sections:

Integration Server settings section

In this section, you can view information about the Integration Server.

Integration Server user accounts section

In this section, you can change the passwords of accounts that are used to connect to the Integration Server.

The Virtual infrastructure protection section.

This section opens by default after the Integration Server Console is started. In this section, you can configure the connection of the Integration Server to virtual infrastructure administration servers (VMware vCenter Server and VMware Cloud Director), define or change the settings for registering and deploying Kaspersky Security services, or unregister Kaspersky Security services.

The table displays all virtual infrastructure administration servers (VMware vCenter Server and VMware Cloud Director) to which Integration Server connection is configured.

The following buttons are provided above the table:

• The Add button opens the Connection to virtual infrastructure window. In this window, you can select the type of virtual infrastructure administration servers to which you need to configure connection, and specify the connection settings to VMware vCenter Server or VMware Cloud Director: IP address in IPv4 format or fully qualified domain name (FQDN), name and password of the account used by the Integration Server to connect to the server.
• The Refresh button lets you update the status of interaction between the Integration Server and the virtual infrastructure.

For each VMware vCenter Server, the following information is displayed in the table:

• IP address in IPv4 format or fully qualified domain name (FQDN) of the VMware vCenter Server.
• Group of settings containing connection error messages (if any) and a list of actions that you can perform when configuring the connection to this VMware vCenter Server and for subsequent deployment of protection of the virtual infrastructure managed by this VMware vCenter Server. You can expand or collapse the list of possible actions for each VMware vCenter Server by clicking on the address or name of the server.
• Information about deployment of protection on VMware clusters managed by this VMware vCenter Server, presented in the format N/M, where:
  • N is the number of VMware clusters on which the file system protection service (Kaspersky File Antimalware Protection) is deployed, or a dash if the service is not registered in VMware NSX Manager.
  • M is the number of VMware clusters on which the network protection service (Kaspersky Network Protection) is deployed, or a dash if the service is not registered in VMware NSX Manager.

  The total number of VMware clusters managed by this VMware vCenter Server is shown in parentheses.

The table displays the following information for each VMware Cloud Director Server:

• IP address in IPv4 format or fully qualified domain name (FQDN) of VMware Cloud Director server.
• Group of settings containing connection error messages (if any) and the list of actions that you can perform when configuring connection to this VMware Cloud Director and for subsequent protection deployment of the virtual infrastructure managed by this VMware Cloud Director. You can expand or collapse the list of possible actions for each VMware Cloud Director server by clicking the server address or name.

If connection to VMware vCenter Server, VMware Cloud Director, or VMware NSX Manager cannot be established, the table shows a warning.

If connection error occurs because the certificate received from the VMware vCenter Server, VMware Cloud Director, or VMware NSX Manager is not trusted for the Integration Server, but the received certificate complies with the security policy of your organization, you can confirm the authenticity of the certificate and establish connection. To do so, click the link in the problem description to open the Certificate validation window and click the Install certificate button. The received certificate is saved as a trusted certificate for the Integration Server.

Certificates that are trusted in the operating system in which the Integration Server is installed are also considered to be trusted for the Integration Server.

If there are problems with the SSL certificate, it is recommended to make sure that the utilized data transfer channel is secure.

The table also displays a warning if the file system protection service (Kaspersky File Antimalware Protection) and / or the network protection service (Kaspersky Network Protection) is registered in VMware NSX Manager, but NSX Policies that defile the file / network threat protection settings are not configured.

List of possible actions for the VMware vCenter Server:

• Register Kaspersky Security services – starts the Wizard that lets you enter the settings necessary for registering Kaspersky Security services in VMware NSX Manager and deploying those services on VMware clusters, and for configuring new SVMs. When you have finished entering the settings, Integration Server registers the Kaspersky Security services in VMware NSX Manager.
• Change settings of Kaspersky Security – starts the Wizard that lets you change the connection settings for interaction between the Integration Server and VMware NSX Manager, specify or change the SVM images for the file system protection service (Kaspersky File Antimalware Protection) and/or the network protection service (Kaspersky Network Protection), and change the SVM settings that are applied on the new SVMs and previously deployed SVMs. When you have finished entering the settings, the Integration Server applies the new settings and, if necessary, re-registers the Kaspersky Security services in VMware NSX Manager.
• Unregister Kaspersky Security services – opens a window in which you can specify the Kaspersky Security service that you need to unregister in VMware NSX Manager. You can unregister one or both Kaspersky Security services. Unregistration is performed by the Integration Server.

  Kaspersky Security services can be unregistered only if all SVMs have been removed from VMware clusters and the services are not used in NSX Policies.

• Change VMware vCenter Server connection settings – opens the Connection to virtual infrastructure window in which you can change the settings for connecting the Integration Server to a VMware vCenter Server.
• Remove VMware vCenter Server from the list – opens a window in which you can confirm deletion of the settings for connecting the Integration Server to this VMware vCenter Server. The VMware vCenter Server will be removed from the list of virtual infrastructure administration servers to which the Integration Server connects.

  Removing a VMware vCenter Server from the list is possible only if Kaspersky Security services are not registered in VMware NSX Manager.

List of available actions for VMware Cloud Director:

• Map Cloud Director organizations – opens the Cloud Director organizations to virtual administration Servers mapping list window where you can map Cloud Director organizations containing tenant virtual machines to Kaspersky Security Center virtual Administration Servers.
• Change VMware Cloud Director connection settings – opens the Connection to virtual infrastructure window where you can change the settings for connecting the Integration Server to VMware Cloud Director.
• Remove VMware Cloud Director from the list – opens the window where you can confirm deletion of the settings for connecting the Integration Server to this VMware Cloud Director. The VMware Cloud Director Server will be removed from the list of virtual infrastructure administration servers to which the Integration Server connects.

Manage protection of tenant organizations section

This section is used only if the application is operating in multitenancy mode.

In this section, you can do the following:

• Connect the Integration Server to the Kaspersky Security Center Administration Server.

  The Integration Server connects to Kaspersky Security Center Administration Server to receive information about virtual Administration Servers created in Kaspersky Security Center, and to map virtual Administration Servers to Cloud Director organizations that contain tenant virtual machines.

• View or configure the list of mappings between Cloud Director organizations that contain tenant virtual machines and Kaspersky Security Center virtual Administration Servers.

  A Cloud Director organization must be mapped to a virtual Administration Server so that Kaspersky Security can be used to protect virtual machines that are part of the Cloud Director organization.