For Kaspersky Security to run in the virtual infrastructure, one of the following hypervisors must be installed depending on the virtualization platform:

• Microsoft Hyper-V platform:
  • Microsoft Windows Server 2019 Hyper-V hypervisor (in full mode or in Server Core mode).
  • Microsoft Windows Server 2016 Hyper-V hypervisor (in full mode or in Server Core mode) with all available updates.
  • Microsoft Windows Server 2012 R2 Hyper-V hypervisor (in full mode or in Server Core mode) with all available updates.

  The application can be installed and run on Microsoft Windows Server (Hyper-V) hypervisors that are part of a hypervisor cluster managed by the Windows Failover Clustering service. Cluster Shared Volumes technology must be enabled on cluster nodes.

• Citrix Hypervisor platform: Citrix XenServer 7.1 LTSR hypervisor.
• VMware vSphere platform:
  • VMware ESXi 6.7 hypervisor with the latest updates
  • VMware ESXi 6.5 hypervisor with the latest updates
  • VMware ESXi 6.0 hypervisor with the latest updates

  A VMware vCenter Server 6.0, VMware vCenter Server 6.5 or VMware vCenter Server 6.7 virtual infrastructure administration server with all available updates must be installed in the virtual infrastructure to support deployment and operation of an SVM (secure virtual machine) on VMware ESXi hypervisors. There is support for the installation and operation of the application in an infrastructure managed by standalone VMware vCenter servers and by a group of VMware vCenter servers running in Linked mode.

  When protecting virtual machines in a VMware infrastructure, Kaspersky Security can use VMware NSX Manager from the VMware NSX for vSphere 6.4.2 package. If VMware NSX Manager is used, Kaspersky Security can assign NSX Security Tags to protected virtual machines.

• KVM (Kernel-based Virtual Machine) platform:

  KVM hypervisor based on one of the following operating systems:

  • Ubuntu Server 18.04 LTS
  • Ubuntu Server 16.04 LTS
  • Red Hat Enterprise Linux Server 7.6
  • CentOS 7.6

  To deploy an SVM on KVM hypervisors running the CentOS operating system, you must delete or comment out the “Defaults requiretty” line in the /etc/sudoers configuration file of the hypervisor's operating system.

• Proxmox VE platform: Proxmox VE 5.4 hypervisor.

  Only KVM-based Proxmox VE is supported. Operation of the application on a Proxmox VE hypervisor using LXC (Linux Containers) is not supported.

• Skala-R platform: R-Virtualization 7.0.6 hypervisor.

  A Skala-R Management 1.30 virtual infrastructure administration server must be installed in the virtual infrastructure to support deployment and operation of an SVM (secure virtual machine) on R-Virtualization hypervisors.

• HUAWEI FusionSphere platform: HUAWEI FusionCompute CNA 6.3.1 hypervisor.

  A HUAWEI FusionCompute VRM 6.3.1 virtual infrastructure administration server must be installed in the virtual infrastructure to support deployment and operation of an SVM (secure virtual machine) on HUAWEI FusionCompute CNA hypervisors.

To deploy SVMs on Microsoft Windows Server (Hyper-V) and VMware ESXi hypervisors, you can use a Microsoft System Center Virtual Machine Manager (referred to as Microsoft SCVMM) of one of the following versions:

• Microsoft SCVMM 2019 with the latest updates
• Microsoft SCVMM 2016 with the latest updates
• Microsoft SCVMM 2012 R2 with the latest updates

For the installation and operation of Kaspersky Security in an organization's local network, one of the following versions of Kaspersky Security Center must be installed:

• Kaspersky Security Center 11
• Kaspersky Security Center 10 Service Pack 3

This article describes how to work with Kaspersky Security Center 11.

The following services must be configured on Administration Server:

• Administration Server.

  The following services must be configured on Administration Server:

  • The activation proxy service is used when activating Kaspersky Security. The activation proxy service is configured in the properties of the Kaspersky Security Center Administration Server. If the activation proxy service is disabled, the application cannot be activated using the activation code.
  • The KSN Proxy service facilitates data exchange between Kaspersky Security and Kaspersky Security Network. The KSN Proxy service is configured in the properties of the Kaspersky Security Center Administration Server.

  For more detailed information about the activation proxy service and KSN Proxy service, please refer to the Kaspersky Security Center documentation.

• Administration Console. Administration Console must be installed on the administrator's workstation.
• Network Agent. Network Agent is responsible for interaction between Administration Server and virtual machines on which Kaspersky Security is installed.

  Network Agent must be installed on all virtual machines that you want to protect:

  • On a virtual machine where Light Agent for Windows will be installed, you can install Network Agent, which is included in the distribution kit of Kaspersky Security Center 11 or Kaspersky Security Center 10 Service Pack 3.
  • The Network Agent must be installed on the virtual machine where Light Agent for Linux will be deployed. It is included in the distribution kit of Kaspersky Security for Virtualization 5.1 Light Agent.

  The Network Agent does not need to be installed on SVMs because this component is included in the SVM images.

The operating system of the computer on which Kaspersky Security Center is installed must meet the requirements of the Integration Server component.

To install and operate the Light Agent for Windows, the virtual machine must meet the following minimum hardware requirements:

• 1.5 GHz virtual processor
• 2 GB of available disk space
• 2 GB of RAM
• Virtualized network interface with bandwidth of 100 Mbit/s

Before installing the Light Agent for Windows on a virtual machine powered by a Citrix XenServer Hypervisor, the application XenTools must first be installed.

The VMware Tools kit must be installed before installing the Light Agent for Windows on a virtual machine powered by a VMware ESXi hypervisor.

The Huawei Tools kit must be installed before installing the Light Agent for Windows on a virtual machine powered by a HUAWEI FusionCompute CNA hypervisor.

An Integration Services package must be installed on a virtual machine powered by a Microsoft Windows Server (Hyper-V) hypervisor.

One of the following guest operating systems must be installed on the virtual machine to support the installation and operation of the Light Agent for Windows:

• Windows 10 Desktop Pro / Enterprise / LTSC / RS4 / RS5 / 19H1 (32 / 64-bit)
• Windows 8.1 Update 1 Professional / Enterprise (32 / 64-bit)
• Windows 7 Professional / Enterprise Service Pack 1 (32 / 64-bit)
• Windows Server 2019 Standard / Datacenter (in full mode) (64-bit)
• Windows Server 2016 Standard / Datacenter (in full mode) (64-bit)
• Windows Server 2012 R2 Standard / Datacenter / Essentials (in full mode) (64-bit)
• Windows Server 2012 Standard / Datacenter / Essentials (in full mode) (64-bit)
• Windows Server 2008 R2 Service Pack 1 Standard / Enterprise / Datacenter (in full mode) (64-bit)

The Integrity Monitoring works only on virtual machines that have an NTFS or FAT32 file system.

To avoid delays in installing the application under Windows 7 and Windows Server 2008 R2, make sure that the Windows operating system automatically updates lists of trusted and untrusted (revoked) software vendor certificates online via Windows Update. For systems without access to Windows Update or systems on which automatic updating of lists of trusted and untrusted certificates is disabled, these lists must be kept up to date manually in accordance with the Microsoft technical support recommendations at: https://support.microsoft.com/en-us/kb/2677070 and https://support.microsoft.com/en-us/kb/2813430.

The Light Agent for Windows can protect virtual machines that are part of an infrastructure employing the following virtualization solutions:

• Citrix Virtual Apps and Desktops 7 1903
• Citrix XenApp and XenDesktop 7.15 LTSR with the latest updates installed
• Citrix Provisioning 7 1903
• Citrix Provisioning Services 7.15 with the latest updates installed
• VMware Horizon 7.8

If you are using the virtualization solutions Citrix Virtual Apps and Desktops (Citrix XenApp and XenDesktop), Citrix Provisioning (Citrix Provisioning Services) and VMware Horizon, you need to configure the recommended exclusions on the golden image.

The Light Agent for Windows can protect virtual machines on which Endpoint Sensor from Kaspersky Anti Targeted Attack Platform 3.6 is installed.

To install and operate the Light Agent for Linux, the virtual machine must meet the following minimum hardware requirements:

• 1.5 GHz virtual processor
• 2 GB of available disk space
• 2 GB of RAM
• Virtualized network interface with bandwidth of 100 Mbit/s

Software requirements for installation and operation of Light Agent for Linux:

• Perl interpreter version 5.0 or higher (www.perl.org)
• Installed Which utility
• Installed dmidecode package
• The procedure for remote installation of Light Agent for Linux requires that the sudo package is installed.

If fanotify technology is not supported by the operating system, the Linux operating system kernel module will have to be compiled to handle operations performed on file system objects. To do so, the source code of the operating system kernel and installed compilation packages (gcc, binutils, glibc, glibc-devel, make, ld) must be on the virtual machine.

Before installing the Light Agent for Linux on a virtual machine powered by a Citrix XenServer Hypervisor, the application XenTools must first be installed.

The VMware Tools kit must be installed before installing the Light Agent for Linux on a virtual machine powered by a VMware ESXi hypervisor.

The Huawei Tools kit must be installed before installing the Light Agent for Linux on a virtual machine powered by a HUAWEI FusionCompute CNA hypervisor.

An Integration Services package must be installed on a virtual machine powered by a Microsoft Windows Server (Hyper-V) hypervisor.

One of the following guest server operating systems must be installed on the virtual machine to support the installation and operation of the Light Agent for Linux:

• Debian GNU/Linux 9.8 64-bit
• Debian GNU/Linux 8.11 64-bit
• Debian GNU/Linux 8.11 i386 32-bit
• Ubuntu Server 18.04 LTS (64-bit)
• Ubuntu Server 16.04 LTS (64-bit)
• CentOS 7.6 (64-bit)
• CentOS 6.10 (64-bit)
• Red Hat Enterprise Linux Server 8 (64-bit)
• Red Hat Enterprise Linux Server 7.6 (64-bit)
• Red Hat Enterprise Linux Server 6.10 (64-bit)
• SUSE Linux Enterpise Server 15 (64-bit)
• ALT Linux 8 (64-bit)
• ALT Linux 7.0.6 (64-bit)
• Oracle Linux 7.6 (64-bit)
• Astra Linux SE 1.6 (without support for capability-based access restriction and closed software environment modes)
• Astra Linux SE 1.5 (without support for capability-based access restriction and closed software environment modes)

The computer must have one of the following operating systems to support installation and operation of the Integration Server and Integration Server Console:

• Windows Server 2019 Standard / Datacenter / Essentials (64-bit)
• Windows Server 2016 Standard / Datacenter (64-bit)
• Windows Server 2012 R2 Standard / Datacenter / Essentials (64-bit)
• Windows Server 2012 Standard / Datacenter / Essentials (64-bit)
• Windows Server 2008 R2 Service Pack 1 Standard / Enterprise / Datacenter (64-bit)

On the computer on which you are planning to install the Integration Server Console, the operating system must be installed in full mode.

The Microsoft .NET Framework 4.6 platform is required for the operation of Integration Server, Integration Server Console, and Kaspersky Security administration plug-ins. If the platform is not installed and the internet access is available, the Kaspersky Security components installation Wizard will suggest installing it during the installation of the Integration Server, Integration Server Console and Kaspersky Security management plug-ins.

The computer must meet the following minimum hardware requirements to support the installation and operation of the Integration Server and Integration Server Console:

• Quad-core 2 GHz virtual processor
• Available disk space:
  • 4 GB for the Integration Server Console
  • 4 GB for the Integration Server
• Amount of RAM:
  • 4 GB for the Integration Server Console
  • 4 GB for the Integration Server

The required volume of RAM and free disk space may change depending on the size of the virtual infrastructure. To improve the performance of the Integration Server, 10 GB of free disk space is recommended.

Windows PowerShell version 4.0 or later is required for the operation of PowerShell cmdlets. A cmdlet is used to replace the self-signed SSL certificate of the Integration Server. It is recommended to replace it after installation of the Integration Server. Windows PowerShell is not required for the operation of Kaspersky Security and protection of the virtual infrastructure.