# Setting up Hypervisors

<p class="callout info">**Necessary conditions for SafeUTM work:** 1. UEFI support.  
2. Legacy download mode must be turned off (it may also be called CSM - Compatibility Support Module).  
3. Turn off Secure Boot in UEFI.</p>

SafeUTM supports the following hypervisors:

- VMware (Workstation and ESXi) versions 6.5.0 and higher;
- Microsoft Hyper-V (2<sup>nd</sup> generation);
- VirtualBox;
- KVM;
- Citrix XenServer.

In order to work on virtual machines, there is no need to install additional drivers or utilities on SafeUTM. Guest add-ons are included in the distribution package.

---

#### General Recommendations

- OS type to create a virtual machine: Linux Fedora, 64-bit;
- Minimum hard drive capacity - 64 Gb;
- Hard drive dynamic expansion is not automated but possible upon contacting technical support;
- Minimum memory size - 8 Gb;
- An internal VM clock must be set up for keeping time in the UTC time zone.

<p class="callout warning">If during the installation of SafeUTM an error **"At least 8 GB of RAM is required"** appears on the screen, and you specified the recommended amount of RAM, then reduce the size of the resources allocated for video memory to the minimum.</p>

---

#### Microsoft Hyper-V

Only the 2<sup>nd</sup> generation VMs for Windows Server 2012 R2 or higher are supported. It is necessary to turn off Secure Boot.

Always use a regular virtual network adapter.

---

#### VMware ESXi

Before SafeUTM installation it is necessary to increase video memory for the virtual machine to 16 Mb (the default is 4 Mb).

**Vmxnet3** virtual network adapters are recommended for use.

---

#### Citrix XenServer

In case XenServer cannot be downloaded from an ISO file, follow these steps:

1. Run command `xe vm-list`. This command will show the list of virtual machines on XenServer.
2. Select a virtual machine with UTM and memorize its UUID.
3. Run command `xe vm-param-set uuid=<UUID> HVM-boot-policy=BIOS\ order HVM-boot-params:order=dc`

These steps should start the installation from the installation medium.

---

#### KVM

1. When installing SafeUTM choose **Fedora** as the type of operating system.
2. At Step 5 (virtm-manager) of installation make sure to tick **Customize configuration before installation** and click **Finish**.  
    [![1. Setting up Hypervisors.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/dpLEvrOzactL1Zi4-1-setting-up-hypervisors.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/dpLEvrOzactL1Zi4-1-setting-up-hypervisors.png)
3. For disks and NICs select/change the network interface to **virtio.**
4. For disks use **writeback** cache mode if disks are stored in qcow2 or raw files. If it is not the case, please consult your storage admin or our technical support about the cache mode selection.
5. In the window, select **Overview** in the Firmware field and select **UEFI x86\_64:/usr/share/OVMF/OVMF\_CODE.fd**. This selection will turn on UEFI and turn off **Secure Boot**.  
    [![2. Setting up Hypervisors.png](https://docs.safedns.com/uploads/images/gallery/2022-08/scaled-1680-/NwYqL4Qw4yJ4YKQ0-2-setting-up-hypervisors.png)](https://docs.safedns.com/uploads/images/gallery/2022-08/NwYqL4Qw4yJ4YKQ0-2-setting-up-hypervisors.png)

<div class="pointer-container" id="bkmrk-%C2%A0"><div class="pointer anim is-page-editable"><svg class="svg-icon" data-icon="link" role="presentation" viewbox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"></svg><div class="input-group inline block"> <button class="button outline icon" data-clipboard-target="#pointer-url" title="Copy Link" type="button"><svg class="svg-icon" data-icon="copy" role="presentation" viewbox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"></svg></button></div><svg class="svg-icon" data-icon="edit" role="presentation" viewbox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"></svg></div></div><p class="callout info">If there is no **UEFI x86\_64:/usr/share/OVMF/OVMF\_CODE.fd** on the list, you need to install ovmf package. In Ubuntu, this package is installed with the command **sudo apt install ovmf**.</p>