Installating Kaspersky Endpoint from Security Center

jet-info used Ask the Experts™
Hi Experts,

I can install the agent and Endpoint antivirus on the client computers but only agent appears as installed. On the client computers side, a prompt message ask to restart the computer as usual. When the computer is restarted, a yello triangle appears and the updates don't works. The policy don't apply, the user can set all the settings. In the update settings, we can't choose any download location, nothing appears.

I tried to deploy software in the classic way and with GPO, the second way works better but it is the same result again and again.
I have an automatic installation task that is blocked. Impossible to stop it to delete it.

It worked fine on only one client computer, which is the same than the others (WIM image applied with imagex).

Any idea ?

Thank you in advance for your help, best regards,
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
btanExec Consultant
Distinguished Expert 2018

When running a remote installation task on a client computer without the Network Agent installed, it is necessary to have ports TCP 139 and 445, UDP 137 and 138 open on such a client computer. These ports are open by default on all domain client computers. You can open these ports automatically using the RipRep.exe utility (located in the Administration Server installation folder).

Something to note include

For Kaspersky Endpoint Security to be able to work right after the installation, its installation package includes anti-virus databases. They are not updated automatically in the package and quickly become obsolete. This is not actually a problem, because right after the protection tool is installed, the update task starts and downloads the new databases. But if the databases in the package are old enough, the computer may need to be restarted to be able to use the new databases.

To avoid this, you can update the databases in the package properties before the installation. Since this update is aimed at avoiding an unnecessary restart, the Update databases button adds to the package a subset of databases that may require a restart. The databases are copied from the server repository.

Kaspersky Endpoint Security does not work without a license. If an interactive installation takes place, the license can be specified in the setup wizard. Remote installation implies several ways for providing a license for the installed product. One of them is to specify the key file in the installation package properties.

This is a reliable, although not the most convenient way for license distribution


Sorry, I didn't specified that it was KES 9..

Could you provide a good Installation Package Creation tutorial or manual with the possibility of including the license key and the Administration agent please ?

Another strange thing is that the new KEP is not available in the  Actual versions of Applocations under Packages. Ther is only the old How to update it please ?

Under there is only this old version.
I tried on this Kaspersky URL but when I create a Package, there is no possibility to add the license or choose which part to install or not (firewall for example).

Where can I download the correct source to create a valid Installation Package for KEP ?

Thank you for your help, best regards,
btanExec Consultant
Distinguished Expert 2018

pse see below if they helps, actually they are all from knowledge base for KES 9 may help. Below are just some key ones to ease the finding.

How to update modules included into a Kaspersky Security Center 9 installation package

How to download updates for several programs using Kaspersky Updater for Windows and distribute them further via Kaspersky Security Center 9

Riprep. A utility for preparing client PCs for deployment

The latest Versions/Patches/Modules as below

Also before adding a license key file, ensure the time and date settings are correct on client computer(s). Pse see further below

How to activate Kaspersky Endpoint Security 8 for Windows via Kaspersky Security Center 9

There are several ways of activating Kaspersky Endpoint Security 8 for Windows:
Adding a key file to the repository
Using a key file distribution task
Adding a key file to the installation package

How to add a license key file on a client computer

In case the installation package has already been used with a remote installation task, you should restart the task with the new key file.

Also do check out the new licensing scheme: Kaspersky Endpoint Security for Business license with Kaspersky Security Center 9 as there are specific versions of Kaspersky Anti-Virus on managed computers support activation with the new type keys

There are troubleshooting tips in kb e.g. Why a host may have an “Incompatible software installed” status, although all third-party applications have been removed from it
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!


Nothing is working as it have to do, we are loosing our time for no result. The solution must be easy but we can't find it... We want to install it from scratch, or...
Could we upgrade to KES 10 with our valid KES9 licence which is still active for 350 days? If so, does it interferes with Kaspersky Anti-spam 8.0 for Exchange?

Thank you for your help, best regards,
btanExec Consultant
Distinguished Expert 2018

you can please see this step by step to go direct changes. Old Licenses will still work
and activate all KES 10 features except Data Encryption.

In summary, to make the upgrade from 9.0 to Kaspersky Security Center 10.0:
1. For Kaspersky Security Center 9.0, create a backup copy of the Administration Server data using the klbackup utility. This utility is included in the application distribution kit, being located in the root of the Kaspersky Security Center installation folder.
2. Install Administration Server and Administration Console (version 10.0).
You can install Administration Server on a computer where a previous version of Administration Server is installed. When you upgrade Administration Server to version 10.0, all data and settings from the previous version of the application are saved.
If you install Administration Server on another computer, you can restore the settings of the previous version using the backup and data recovery utility (klbackup).
3. Perform the initial configuration of Administration Server if the settings have not been inherited from the previous version of Administration Server.
4. Create the structure of administration groups.
5. Select client computers to which the new version of Administration Server and new versions of Kaspersky Lab applications should be installed.
6. For the selected computers, create a remote installation task for the new version of Network Agent and the new versions of the required applications. To perform remote installation of applications, you can use installation packages created automatically during the installation of Kaspersky Security Center 10.0.
7. Run the created task.
As a result, the new version of Network Agent and the new versions of Kaspersky Lab applications will be installed to the selected client computers.
8. Add the client computers that have been upgraded to the new versions of the applications, to the hierarchy of administration groups.
As a result, the protection system built on earlier versions of the applications will be managed by Kaspersky Security Center 10.0.

As for the compatibility, I did not see any direct implication on the anti-spam but pls get KES tech support to confirm.


I don't know if I really want to make a backup of a non working server. It fails completely...
If there is a problem, I think it is better to install it from scratch.
What do you think about it ?
Is there any risk for the Anti-Spam installation ?
Exec Consultant
Distinguished Expert 2018
Since there are so many uncertainties and there is no layest backup as well as the pressing timeline, seek your user and superior understanding to move ahead for fresh build on new hardware or new hdd. Retain the old and revisit again if viable. This alresdy comes to a point where no further risk but to rebuild the policy and configuration. Pls have the Symantec tech support on standby and contractor to facilitate all works. The anti spam is least of concern here with refresh install.


OK, I upgraded to KES10 and now it is working normally.

Thank you !

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial