Getting started

After you install Kaspersky Security Integration with Autotask, you establish a connection between it and Autotask. The connection enables you to configure integration using Kaspersky Security Integration Tool for MSP and enables Kaspersky Security Integration Service for MSP to send Service Tickets and license usage information to Autotask. To establish connection, create a new integration using Kaspersky Security Integration Tool for MSP.

The integration process varies depending on which Kaspersky Lab solution you use. This section describes how to configure integration with Kaspersky Security Center and with Kaspersky Business Hub.

Prerequisites

When configuring integration, you must specify the parameters of the Kaspersky Lab solution you integrate with (Kaspersky Security Center or Kaspersky Business Hub) and Autotask connection parameters. It is recommended that you check these parameters in advance in order to prepare for setting up integration.

Kaspersky Security Center parameters

Check the following parameters:

• Address of the computer on which Kaspersky Security Center Administration Server is installed.
• Credentials: user name and password for the computer on which Administration Server is installed.
• If you establish connection to the Administration Server through a proxy server, check the proxy server parameters: network address or domain name and credentials for the proxy server.

Kaspersky Business Hub parameters

Check the credentials of your Kaspersky Business Hub account: email address and password.

Autotask parameters

Credentials used to log in to Autotask: user name and password.

It is required to create and use a separate dedicated user with the API User security level rather than providing the credentials that you use to log in to Autotask. When creating the user, select Kaspersky Lab as an integration vendor. The created user can use only Kaspersky Security Integration.

The API User security level must be set as Not required to change password. Because the API User security level does not allow logging in through the user interface, it eliminates many security risks associated with using an integration.

To set the "Not required to change password" security level:

1. In Autotask, select Admin → Features & Settings, expand the Resources/Users node, and then click Resources/Users.
2. Right-click a user name in the Resource Name column and select Edit Resource.
3. In the Resource Management window that opens, select the Security tab, and in the Security Level drop-down list select API User (system).
4. Click the Save & Close button.

Additional prerequisites

During the integration process, it is required to add virtual servers or companies to your integration. These virtual servers or companies are then mapped to Autotask accounts.

For each client company represented by an account in Autotask, create and assign a separate Kaspersky Security Center virtual server / Kaspersky Business Hub company prior to integration.

One-to-one mapping is supported, and therefore the number of virtual servers or companies must not exceed the number of your managed accounts.

Integrating with Kaspersky Security Center

This section describes how to create and configure integration between Autotask and Kaspersky Security Center by using Kaspersky Security Integration Tool for MSP.

To successfully create integration, connect to Kaspersky Security Center Administration Server and perform the steps described in the following sections.

Connecting to Kaspersky Security Center Administration Server

When you start Kaspersky Security Integration Tool for MSP, the connection settings window opens. In this window, specify the settings to connect to Kaspersky Security Center Administration Server.

Connecting to Kaspersky Security Center Administration Server

To connect to Kaspersky Security Center Administration Server:

1. In the Start menu, select Kaspersky Security Integration Tool for MSP.
2. In the window that opens, select the Kaspersky Endpoint Security for Business solution to connect to Kaspersky Security Center Administration Server.
3. You can connect to Kaspersky Security Center Administration Server in one of the following ways:
   • By providing the connection parameters for the computer on which the Administration Server is installed.

     If you selected this method of connection, specify the following connection settings. None of the fields can be blank.

     • Address—Address of the computer on which the Administration Server is installed. You can specify this value as an IP address or as a domain name of the computer.
     • User name—User name to connect to the computer on which the Administration Server is installed, that is, to the computer whose address you specified in the Address field.
     • Password—Password to connect to the computer, on which the Administration Server is installed, that is, to the computer whose address you specified in the Address field.
   • By selecting the Administration Server certificate.

     In this case, you do not have to provide the connection parameters for the computer on which the Administration Server is installed. Kaspersky Security Integration Tool for MSP uses the certificate of Kaspersky Security Center Administration Server to connect to this Administration Server. Usage of the certificate guarantees that Kaspersky Security Integration Tool for MSP connects to the Administration Server from which the certificate was downloaded.

     The Administration Server certificate is created automatically during installation of the Administration Server and is stored in the %ProgramData%\Application Data\KasperskyLab\adminkit\1093\cert folder on the computer that has Administration Server installed. Before starting to use the Administration Server certificate for authentication, copy the certificate file, klserver.cer, to the computer on which Kaspersky Security Integration Tool for MSP is installed.

To use Administration Server certificate:

1. Click the Select Kaspersky Security Center Administration Server certificate link.
2. In the window that opens, select the Use a certificate check box, click Browse, and then navigate to the certificate file.
3. Click OK to start using the selected certificate for connection.
4. If you want to establish the connection to the Administration Server through a proxy server, select the Use proxy server check box. By default, this check box is cleared.

   If you selected the Use proxy server check box, provide the following proxy-server settings:

   • Address—Network address of the proxy server. Provide the address as a full domain name of the proxy server.
   • User name—User name to connect to the proxy server.
   • Password—Password to connect to the proxy server.
5. Click the Proceed button to connect to the Administration Server using the specified settings.

The system validates the provided settings and connects to the Administration Server.

Creating a Kaspersky Security Center integration with Autotask

After you connect to the Administration Server, the integration settings window opens, where you can create an integration between Autotask and Kaspersky Security Center by means of Kaspersky Security Integration Tool for MSP.

Creation of an integration between Autotask and Kaspersky Security Center is required only when you launch Kaspersky Security Integration Tool for MSP for the first time.

Specifying Autotask integration settings

To create integration with Autotask:

1. In the integration settings window that opens after you connect to the Administration Server, specify the following settings for the newly created integration:
   • Select platform—Select the integration platform from the drop-down list. The list contains the names of all platforms that Kaspersky Security Center can be integrated with. For integration with Autotask, select Autotask.
   • Integration name—Name of the new integration. This field cannot be blank. By default, the integration name is Integration with Autotask. The integration name is displayed in the Kaspersky Security Integration Tool for MSP window as a link that allows you to view and access the integration properties.

     For an integration with Kaspersky Business Hub, click the View integration ID link under the integration name to view the identifier of the integration. You may have to provide this ID to Kaspersky Lab Technical Support for diagnostics and troubleshooting.

   • User name—User name to be used to log in to Autotask.
   • Password—Password for the user name to be used to log in to Autotask.

     It is recommended to create and use a separate dedicated user with the API User security level rather than providing the credentials that you use to log in to Autotask. Refer to section Prerequisites for details.

2. Click the Proceed button when you have finished specifying the integration settings.

   The system validates the Autotask integration settings and permission level for the specified credentials. These settings are saved and then used by Kaspersky Security Integration with Autotask to gain access to Autotask.

   The permission level of the credentials you provided must be high enough to perform all operations in Kaspersky Security Integration Tool for MSP; otherwise, an error occurs, and integration for the user with these credentials cannot be created. For example, integration cannot be created for a user lacking permissions for editing tickets in Autotask.

Kaspersky Security Center is now integrated with Autotask.

Page top

Adding virtual servers to the integration

After an integration with Autotask is created, a window opens where you can add Kaspersky Security Center virtual servers to the integration. Kaspersky Security Center virtual servers are then mapped to the Autotask accounts.

Adding virtual servers to the integration

To add Kaspersky Security Center virtual servers to the integration:

1. In the window, which lists Kaspersky Security Center virtual servers, select the check boxes next to the existing virtual servers to add them to the integration.

   If you want to add all virtual servers to the integration, select the Select all check box.

2. Click Proceed.

   You will now be able to map these virtual servers to Autotask accounts.

Each virtual server can be added to one integration only. That is, if a virtual server is added to an integration, it is not displayed in a list of virtual servers available for another integration.

Page top

Integrating with Kaspersky Business Hub

This section describes how to create and configure integration between Autotask and Kaspersky Business Hub by means of Kaspersky Security Integration Tool for MSP.

To successfully create integration, connect to Kaspersky Business Hub and perform the steps described in the following sections.

Connecting to Kaspersky Business Hub

When you start Kaspersky Security Integration Tool for MSP, the connection settings window opens. In this window, specify the settings to connect to Kaspersky Business Hub.

Connecting to Kaspersky Business Hub

To connect to Kaspersky Business Hub:

1. In the Start menu, select Kaspersky Security Integration Tool for MSP.
2. In the window that opens, select the Kaspersky Business Hub solution.
3. Specify the following connection settings:
   • User name—Email address that you use to connect to Kaspersky Business Hub. This field cannot be blank.
   • Password—Password that you use to connect to Kaspersky Business Hub. This field cannot be blank.
4. Click the Proceed button to connect to Kaspersky Business Hub by using the specified settings.

The system validates the provided settings and establishes connection to Kaspersky Business Hub.

Creating a Kaspersky Business Hub integration with Autotask

After you connect to the Kaspersky Business Hub, the integration settings window opens, where you can create an integration between Autotask and Kaspersky Business Hub by means of Kaspersky Security Integration Tool for MSP.

Creation of an integration between Autotask and Kaspersky Business Hub is required only when you launch Kaspersky Security Integration Tool for MSP for the first time.

Specifying Autotask integration settings

To create integration with Autotask:

1. In the integration settings window that opens after you connect to Kaspersky Business Hub, specify the following settings for the newly created integration:
   • Select platform—Select the integration platform from the drop-down list. The list contains the names of all platforms that Kaspersky Business Hub can be integrated with. For integration with Autotask, select Autotask.
   • Integration name—Name of the new integration. This field cannot be blank. By default, the integration name is Integration with Autotask. The integration name is displayed in the Kaspersky Security Integration Tool for MSP window as a link that allows you to view and access the integration properties.

     For an integration with Kaspersky Business Hub, click the View integration ID link under the integration name to view the identifier of the integration. You may have to provide this ID to Kaspersky Lab Technical Support for diagnostics and troubleshooting.

   • User name—User name to be used to log in to Autotask.
   • Password—Password for the user name to be used to log in to Autotask.

     It is recommended to create and use a separate dedicated user with the API User security level rather than providing the credentials that you use to log in to Autotask. Refer to section Prerequisites for details.

2. Click the Proceed button when you have finished specifying the integration settings.

   The system validates the Autotask integration settings and permission level for the specified credentials. These settings are saved and then used by Kaspersky Security Integration with Autotask to gain access to Autotask.

   The permission level of the credentials you provided must be high enough to perform all operations in Kaspersky Security Integration Tool for MSP; otherwise, an error occurs, and integration for the user with these credentials cannot be created. For example, integration cannot be created for a user lacking permissions for editing tickets in Autotask.

Kaspersky Business Hub is now integrated with Autotask.

Page top

Adding Kaspersky Business Hub companies to the integration

After an integration with Autotask is created, a window opens where you can add Kaspersky Business Hub companies to the integration. Kaspersky Business Hub companies are then mapped to the Autotask accounts.

You cannot add separate Kaspersky Endpoint Security Cloud workspaces or Kaspersky Security for Microsoft Office 365 workspaces to the integration. You can add only entire Kaspersky Business Hub companies. All workspaces created for a company in Kaspersky Business Hub are added to the integration.

Adding companies to the integration

To add Kaspersky Business Hub companies to the integration:

1. In the window, which lists Kaspersky Business Hub companies, select the check boxes next to the existing companies to add them to the integration. Icons next to the name of each company show which workspaces are created for this company in Kaspersky Business Hub.

   If you want to add all companies to the integration, select the Select all check box.

2. Click Proceed.

   You will now be able to map these companies to Autotask accounts.

Each Kaspersky Business Hub company can be added to one integration only. That is, if a company is added to an integration, it is not displayed in a list of companies available for another integration.

Page top

Supplementary parameter

The parameter that indicates the type of Kaspersky Business Hub server to which Kaspersky Security Integration Tool for MSP connects may be included in the .config file (IntegrationUI.exe.config) of Kaspersky Security Integration Tool for MSP.

The parameter name is KESCloudServer; and its possible values are:

• production—Kaspersky Security Integration Tool for MSP works with the Production server.
• beta—Kaspersky Security Integration Tool for MSP works with the Beta server.
• test—Kaspersky Security Integration Tool for MSP works with the Test server.

You are strongly urged not to modify the KESCloudServer parameter unless you receive clear instructions from Kaspersky Lab.

The IntegrationUI.exe.config file is stored in the installation folder of Kaspersky Security Integration Tool for MSP. The default path is C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Integration Tool for MSP\IntegrationUI.exe.config.

By default, the KESCloudServer parameter is not displayed in the .config file of Kaspersky Security Integration Tool for MSP.

The KESCloudServer parameter can be specified as follows:

Page top