Getting started

After installing the application, you must perform the following actions:

• In the policy settings, enable anti-virus protection of virtual machines and network threat protection.

  By default, Kaspersky Security does not protect virtual machines (a protection profile is not assigned to objects of the protected infrastructure, and network threat protection is disabled). You can configure the settings of the policy created by default, or create and configure a new policy.

• Activate the application on all new SVMs.
• Update the application databases on all new SVMs.

Application activation

It is recommended to configure an activation task that will be automatically started on all new SVMs immediately after they are deployed.

If you are using a licensing scheme that is based on the number of protected virtual machines, you need to create two different activation tasks: one for adding a server key to SVMs for protection of virtual machines with server operating systems, and one for adding a desktop key to SVMs for protection of virtual machines with desktop operating systems.

To configure an activation task:

1. Add a key to Kaspersky Security Center key storage.
2. In the tree of the Kaspersky Security Center Administration Console, select the Managed devices folder. In the workspace, select the Tasks tab and click the Create task button. The Task Wizard starts.
3. Specify the application for which the task is being created, and the type of task. To do so, in the Kaspersky Security for Virtualization 5.0 Agentless list, select Application activation.
4. At the next step of the Wizard, choose a key from the Kaspersky Security Center key storage. To do so, click the Select button. The Select a key window opens. Select a key and click the OK button.
5. At the next step of the Wizard, configure the settings of the task run schedule:
   • In the Scheduled start drop-down list, select the Once mode. In the Start date and Start time fields, leave the default settings.
   • Select the Run skipped tasks check box.
6. At the next step of the Wizard, enter the name of the task.
7. Finish the wizard.

According to the configured schedule settings, the task will start on all new SVMs immediately after they are deployed. You can view information on the results of a task in the Kaspersky Security Center Administration Console.

Application database update

After installing the Kaspersky Security administration plug-in, the application database update task is automatically created. This task is started each time an update package is downloaded to the storage of Kaspersky Security Center Administration Server, and it lets you update the application databases on all SVMs. You can use the automatically created database update task. If necessary, you can change the settings of this task or delete it, and configure the application database update task for SVMs of one or several KSC clusters belonging to one administration group.

To update the application databases after the application is installed or upgraded:

1. Make sure that a download updates to the storage task has been created in Kaspersky Security Center. If the download updates to the storage task does not exist, create it (see the Kaspersky Security Center documentation).
2. Manually start the download updates to the storage task or wait for a scheduled task to start automatically. Make sure that the download updates to the storage task has been completed successfully (see Kaspersky Security Center documentation for details).
3. Make sure that an application database update task has been created in Kaspersky Security Center.

   The application database update task that was automatically created after installation of the Kaspersky Security administration plug-in is located on the Tasks tab in the Managed devices folder.

   If the application database update task has not been created, create it.

4. Wait for the application database update task to start according to the schedule or manually start the task.
5. Make sure that the application database update task has been completed successfully.

After the application has been installed or upgraded, SVMs relay information to Kaspersky Security Center regarding the type of application databases required for the operation of Kaspersky Security. If Kaspersky Security Center has not yet downloaded the necessary databases to the storage when the database update task is started, the task could end with an error. If this is the case, you can manually start the download updates to the storage task, wait for it to complete, and then manually start the application database update task.

Kaspersky Security checks the integrity of application databases during updates. If this check is unsuccessful, the application database update task ends with an error and Kaspersky Security continues to use the previous set of application databases. If the application database update task ends with an error on new SVMs, you are advised to contact Technical Support. If application databases are missing from SVMs, Kaspersky Security will not protect the virtual machines.