Installating Kaspersky Endpoint from Security Center

Posted on 2014-02-28
Last Modified: 2014-03-12
Hi Experts,

I can install the agent and Endpoint antivirus on the client computers but only agent appears as installed. On the client computers side, a prompt message ask to restart the computer as usual. When the computer is restarted, a yello triangle appears and the updates don't works. The policy don't apply, the user can set all the settings. In the update settings, we can't choose any download location, nothing appears.

I tried to deploy software in the classic way and with GPO, the second way works better but it is the same result again and again.
I have an automatic installation task that is blocked. Impossible to stop it to delete it.

It worked fine on only one client computer, which is the same than the others (WIM image applied with imagex).

Any idea ?

Thank you in advance for your help, best regards,
Question by:jet-info
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
LVL 63

Expert Comment

ID: 39896575
When running a remote installation task on a client computer without the Network Agent installed, it is necessary to have ports TCP 139 and 445, UDP 137 and 138 open on such a client computer. These ports are open by default on all domain client computers. You can open these ports automatically using the RipRep.exe utility (located in the Administration Server installation folder).

Something to note include

For Kaspersky Endpoint Security to be able to work right after the installation, its installation package includes anti-virus databases. They are not updated automatically in the package and quickly become obsolete. This is not actually a problem, because right after the protection tool is installed, the update task starts and downloads the new databases. But if the databases in the package are old enough, the computer may need to be restarted to be able to use the new databases.

To avoid this, you can update the databases in the package properties before the installation. Since this update is aimed at avoiding an unnecessary restart, the Update databases button adds to the package a subset of databases that may require a restart. The databases are copied from the server repository.

Kaspersky Endpoint Security does not work without a license. If an interactive installation takes place, the license can be specified in the setup wizard. Remote installation implies several ways for providing a license for the installed product. One of them is to specify the key file in the installation package properties.

This is a reliable, although not the most convenient way for license distribution

Author Comment

ID: 39900180
Sorry, I didn't specified that it was KES 9..

Could you provide a good Installation Package Creation tutorial or manual with the possibility of including the license key and the Administration agent please ?

Another strange thing is that the new KEP is not available in the  Actual versions of Applocations under Packages. Ther is only the old How to update it please ?

Under there is only this old version.
I tried on this Kaspersky URL but when I create a Package, there is no possibility to add the license or choose which part to install or not (firewall for example).

Where can I download the correct source to create a valid Installation Package for KEP ?

Thank you for your help, best regards,
LVL 63

Expert Comment

ID: 39900456
pse see below if they helps, actually they are all from knowledge base for KES 9 may help. Below are just some key ones to ease the finding.

How to update modules included into a Kaspersky Security Center 9 installation package

How to download updates for several programs using Kaspersky Updater for Windows and distribute them further via Kaspersky Security Center 9

Riprep. A utility for preparing client PCs for deployment

The latest Versions/Patches/Modules as below

Also before adding a license key file, ensure the time and date settings are correct on client computer(s). Pse see further below

How to activate Kaspersky Endpoint Security 8 for Windows via Kaspersky Security Center 9

There are several ways of activating Kaspersky Endpoint Security 8 for Windows:
Adding a key file to the repository
Using a key file distribution task
Adding a key file to the installation package

How to add a license key file on a client computer

In case the installation package has already been used with a remote installation task, you should restart the task with the new key file.

Also do check out the new licensing scheme: Kaspersky Endpoint Security for Business license with Kaspersky Security Center 9 as there are specific versions of Kaspersky Anti-Virus on managed computers support activation with the new type keys

There are troubleshooting tips in kb e.g. Why a host may have an “Incompatible software installed” status, although all third-party applications have been removed from it
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)


Author Comment

ID: 39916974
Nothing is working as it have to do, we are loosing our time for no result. The solution must be easy but we can't find it... We want to install it from scratch, or...
Could we upgrade to KES 10 with our valid KES9 licence which is still active for 350 days? If so, does it interferes with Kaspersky Anti-spam 8.0 for Exchange?

Thank you for your help, best regards,
LVL 63

Expert Comment

ID: 39917302
you can please see this step by step to go direct changes. Old Licenses will still work
and activate all KES 10 features except Data Encryption.

In summary, to make the upgrade from 9.0 to Kaspersky Security Center 10.0:
1. For Kaspersky Security Center 9.0, create a backup copy of the Administration Server data using the klbackup utility. This utility is included in the application distribution kit, being located in the root of the Kaspersky Security Center installation folder.
2. Install Administration Server and Administration Console (version 10.0).
You can install Administration Server on a computer where a previous version of Administration Server is installed. When you upgrade Administration Server to version 10.0, all data and settings from the previous version of the application are saved.
If you install Administration Server on another computer, you can restore the settings of the previous version using the backup and data recovery utility (klbackup).
3. Perform the initial configuration of Administration Server if the settings have not been inherited from the previous version of Administration Server.
4. Create the structure of administration groups.
5. Select client computers to which the new version of Administration Server and new versions of Kaspersky Lab applications should be installed.
6. For the selected computers, create a remote installation task for the new version of Network Agent and the new versions of the required applications. To perform remote installation of applications, you can use installation packages created automatically during the installation of Kaspersky Security Center 10.0.
7. Run the created task.
As a result, the new version of Network Agent and the new versions of Kaspersky Lab applications will be installed to the selected client computers.
8. Add the client computers that have been upgraded to the new versions of the applications, to the hierarchy of administration groups.
As a result, the protection system built on earlier versions of the applications will be managed by Kaspersky Security Center 10.0.

As for the compatibility, I did not see any direct implication on the anti-spam but pls get KES tech support to confirm.

Author Comment

ID: 39917729
I don't know if I really want to make a backup of a non working server. It fails completely...
If there is a problem, I think it is better to install it from scratch.
What do you think about it ?
Is there any risk for the Anti-Spam installation ?
LVL 63

Accepted Solution

btan earned 500 total points
ID: 39917772
Since there are so many uncertainties and there is no layest backup as well as the pressing timeline, seek your user and superior understanding to move ahead for fresh build on new hardware or new hdd. Retain the old and revisit again if viable. This alresdy comes to a point where no further risk but to rebuild the policy and configuration. Pls have the Symantec tech support on standby and contractor to facilitate all works. The anti spam is least of concern here with refresh install.

Author Closing Comment

ID: 39925654
OK, I upgraded to KES10 and now it is working normally.

Thank you !

Featured Post

Now Available: Firebox Cloud for AWS and FireboxV

Firebox Cloud brings the protection of WatchGuard’s leading Firebox UTM appliances to public cloud environments. It enables organizations to extend their security perimeter to protect business-critical assets in Amazon Web Services (AWS).

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As cyber crime continues to grow in both numbers and sophistication, a troubling trend of optimization has emerged over the last year.
There's a lot of hype surrounding blockchain technology. Here's how it works and some of the novel ways it' s now being used - including for data protection.
Using Adobe Premiere Pro, the viewer will learn how to set up a sequence with proper settings, importing pictures, rendering, and exporting the finished product.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question