Creating an automatic patch installation task

To create an automatic patch installation task:

1. In the Kaspersky Security Center Administration Console, select the folder or administration group in which you want to create the task.

   If you selected the Managed devices folder or an administration group containing a KSC cluster, select the Tasks tab in the workspace.

2. Click the New task button to start the New Task Wizard.
3. At the first step of the Wizard, select the following type of task: Kaspersky Security for Virtualization 6.1 Agentless → Automatic installation of patches.

   Proceed to the next step of the New Task Wizard.

4. If you started the New Task Wizard from the Tasks folder, specify the method for selecting the SVMs on which the task must be run:
   • Click the Select network devices detected by Administration Server button if you want to select SVMs from the list of devices detected by Administration Server while polling the local area network.
   • Click the Specify device addresses manually or import from list button if you want to specify the addresses of SVMs manually or import the list of SVMs from a file. Addresses are imported from a TXT file with a list of addresses of SVMs, with each address in a separate row.

     If you import a list of addresses from file or specify the addresses manually and the SVMs are identified by name, the list of SVMs for which the task is being created can be supplemented only with those SVMs whose details have already been included in the Administration Server database upon connection of SVMs or following a poll of the local area network.

   • Click the Assign task to a device selection button if the task must be run on all SVMs that are part of a selection based on a predefined criterion. For details on creating a selection of devices, please refer to the Kaspersky Security Center documentation.
   • Click the Assign task to an administration group button if the task must be run on all SVMs within an administration group.

     Depending on the specified method of SVM selection, perform one of the following operations in the window that opens:

     • In the list of detected devices, specify the SVMs on which the task will be run. To do so, select check boxes in the list on the left of the name of the relevant SVMs.
     • Click the Add or Add IP range button and specify the addresses of SVMs.
     • Click the Import button, and in the window that opens select the TXT file containing the list of SVM addresses.
     • Click the Browse button and in the opened window specify the name of the selection containing the SVMs on which the task will be run.
     • Click the Browse button and select an administration group or manually enter the name of an administration group.

   Proceed to the next step of the New Task Wizard.

5. Configure the task run schedule settings:
   • Scheduled start. Choose the task run mode in the drop-down list. The settings displayed in the window depend on the task run mode chosen.
   • Run skipped tasks. If this check box is selected, an attempt to start the task is made the next time the application is started on the SVM. In the Manually and Once modes, the task is started as soon as an SVM appears on the network.

     If this check box is cleared, the task is started on an SVM by schedule only, and in Manually and Once modes it is started only on the SVMs that are visible on the network.

   • Use automatically randomized delay for task starts. By default, the time of task start on SVMs is randomized with the scope of a certain time period. This period is calculated automatically depending on the number of SVMs covered by the task:
     • 0–200 SVMs – task start is not randomized
     • 200-500 SVMs – task start is randomized within the scope of 5 minutes
     • 500-1000 SVMs – task start is randomized within the scope of 10 minutes
     • 1000-2000 SVMs – task start is randomized within the scope of 15 minutes
     • 2000-5000 SVMs – task start is randomized within the scope of 20 minutes
     • 5000-10000 SVMs – task start is randomized within the scope of 30 minutes
     • 10000–20000 SVMs – task start is randomized within the scope of 1 hour
     • 20000–50000 SVMs – task start is randomized within the scope of 2 hours
     • over 50000 SVMs – task start is randomized within the scope of 3 hours

     If you do not need to randomize the time of task starts within an automatically calculated time period, clear the Use automatically randomized delay for task starts check box. This check box is set by default.

   • Use randomized delay for task starts within an interval of (min): If you want the task to start at a random time within a specified period of time after the scheduled task start, select this check box. In the text box, enter the maximum task start delay. In this case, the task starts at a random time within the specified period of time after the scheduled start. This check box can be changed if the Use automatically randomized delay for task starts check box is cleared.

     Randomized task start times help prevent situations in which a large number of SVMs contact the Kaspersky Security Center Administration Server at the same time.

   Proceed to the next step of the New Task Wizard.

6. In the Name field, enter the name of the automatic patch installation task and proceed to the next step of the New Task Wizard.
7. If you want the task to start as soon as the New Task Wizard finishes, select the Run task when the wizard is complete check box.

   Exit the New Task Wizard.

The created update rollback task appears in the list of tasks. If you configured a schedule for starting the task in the Task start schedule settings window, the task is started according to this schedule. You can also start or stop the task manually at any time.