I assume you may already checked the documentation, anyway refer here Windows Authentication and Kerberos to get the detail steps. Also refer the post integrated with Kerberos ISC/MSSQL/Kerberos integration [unable to obtain principal name for authentication] which could help you to proceed further.
VA will not overwrite your config unless you make any changes in their core services and it may lead to VA crash.