Home > Storage > PowerFlex > White Papers > Dell PowerFlex Integration with Apache CloudStack > CloudStack Infrastructure: KVM Host setup
Libvirt is required by the CloudStack-agent and should already be installed. It is vital that libvirt be configured properly as CloudStack uses libvirt for managing the virtual machines.
1. To avoid any potential security risk to the VMs, turn off the libvirt unsecure TCP port. While adding KVM hosts, CloudStack management uses its CA framework to install TLS certificates that are also used to secure agent-mgmt server, libvirtd and qemu/vnc to enable mutual-TLS secured connections.
Set the following parameters in /etc/libvirt/libvirtd.conf:
listen_tls = 0
listen_tcp = 0
tls_port = "16514"
tcp_port = "16509"
auth_tcp = "none"
mdns_adv = 0
2. Uncomment the following line in /etc/sysconfig/libvirtd:
LIBVIRTD_ARGS="--listen"
3. Update the changes by running the following command:
systemctl mask libvirtd.socket libvirtd-ro.socket libvirtd-admin.socket libvirtd-tls.socket libvirtd-tcp.socket
4. Restart libvirt: systemctl restart libvirtd