Appendix: Add Security VMs for guest VM migration

At any time you can add more Security VMs that will be available to protect migrating guest VMs.

If you are planning to create more Sophos Security VMs in the future you should reserve IP addresses for the Sophos Security VMs you are likely to add. To do this create a prepopulated master version of this file. This file should contain all the IP addresses of Sophos Security VMs you have, and will have in the future. You can then copy this file to each Sophos Security VM as it is created.

Important You need to perform these steps on the Security VM that you want to add and on the existing Security VMs.
  1. Open a console to the Security VM.
  2. Log on: Username is "sophos". Password is the access password you set when you installed the Security VM.
  3. Open the additional_svms.txt configuration file for editing, by running the following command: sudo vi /opt/sophos-svms/etc/additional_svms.txt
  4. Edit the file to add or remove IP addresses of Security VMs that are available to protect migrating guest VMs, with one IP address per line and no additional separating characters.
    1. Press i to open edit mode in vi.
    2. Put one IP address per line with no additional separating characters. For example:

      1.2.3.4

      5.6.7.8

    3. You don't need to include the IP address for the Security VM you're currently logged in to.
    4. Press Esc to get out of edit mode in vi.
    5. Save and close the file by entering :wq.
  5. Check the SVM log (/var/log/ssvm.log) to see if there were any errors in processing the additional Security VMs list.

    If there are no errors, the updated list is sent to all connected guest VMs so that they can get protection from the new Security VMs.