Main purpose kaspersky security Center is in a corporate environment. Naturally, one of the main components of this protection will be anti-virus software, which is installed on devices in local network. Kaspersky Security Center allows you to automate the management of distributions of such software (by the way, and). Not everyone, however, knows that anti-virus software distributions can be supplied with fresh databases in advance so as not to download them after installation.
Let's assume that you are using the same distribution package of an anti-virus product from Kaspersky Lab (in corporate networks on the this moment it's basically Kaspersky Endpoint Security), such as a year. Accordingly, when installing an antivirus on client machines, the databases will be outdated by at least a year. Of course, client machines will immediately start downloading updates (the older the databases, the more traffic they spend). If we are talking about installing / reinstalling an antivirus on one PC, this is unlikely to be critical. But, if we talk about the mass deployment of anti-virus software, then it is better to upload fresh databases to the anti-virus distribution kit in advance. Fortunately, Kaspersky Security Center allows this.
open desired server administration and go to Additionally → Remote installation → Installation packages.
Select the desired distribution of antivirus software there and open its properties.
The screenshot below is an example. Please note that the databases in the distribution have not been updated for more than two years.
If you press the button Update bases , the distribution package will be downloaded with databases from the repository of the administration server. The database update will be accompanied by the following window:
Kaspersky Security Center allows you to manage updates software installed on client devices and fix vulnerabilities in programs from Microsoft and other software vendors by installing the necessary updates.
Kaspersky Security Center searches for updates using the update search task and downloads updates to the update repository. After the search for updates is completed, the application provides the administrator with information about available updates and about vulnerabilities in programs that can be closed with these updates.
Information about available Microsoft updates Windows is transferred from Windows Update. The administration server can be used as a server windows update(WSUS). To use the Administration Server as a Windows Update server, you must configure synchronization of updates with Windows Update. After setting up data synchronization with the update center Windows Server administration centrally provides updates at specified intervals Windows services Update on devices.
You can also manage software updates using the Network Agent policy. To do this, you need to create a Network Agent policy and configure the software updates settings in the corresponding windows of the policy creation wizard.
The administrator can view the list of available updates in the folder Software updates, included in the folder Program Management. This folder contains a list of updates received by the Administration Server Microsoft programs and other software vendors that may be distributed to devices. After viewing information about available updates, the administrator can install updates on devices.
Updating some Kaspersky programs Security Center performs by removing previous version programs and installations new version.
Before installing updates on all devices, you can perform a test installation to make sure that installed updates will not cause failures in the operation of programs on devices.
You can get information about third party software that can be updated from using Kaspersky Security Center on the Service website technical support on the Kaspersky Security Center page, in the Server Management section.
Updating the Kaspersky Security Center Administration Server, in general, is an even simpler process than its . The update is put on top current version and does not require additional configuration.
In this example, I will upgrade Kaspersky Security Center version 10.3.407 up to version 10.5.1781 . In the case of, so to speak, not the newest operating systems(I used Windows Server 2008 R2) KSC 10.5 will ask you to upgrade internet explorer up to version 10 if an earlier version is installed on the system. And in order for IE 10 to be installed, the system must have the following patches:
- KB2533623;
- KB2670838;
- KB2729094;
- KB2731771;
- KB2786081.
In practice, Windows Server 2008 R2 refused to install KB2533623 for me, saying it was not suitable. The remaining 4 patches and IE 10 are installed.
Now directly about updating Kaspersky Security Center. Let's skip the program welcome message and the license agreement and move on to the first step - creating a backup.
Creating a backup copy when updating Kaspersky Security Center. Don't forget to create a backup before upgrading the server. However, if the copy was made recently, you can skip this step. The copy can be password protected. If this is not done, the installer will notice this but allow you to continue.
An exclamation mark during the installation process is not necessarily a cause for alarm, but also a signal that a reboot is required to complete the installation of a component.
Message about the successful installation of the new version. Reboot the server to complete the installation.
After updating the KSC Administration Server, it is recommended to update the Kaspersky Security Center Administration Console to workstation, which is used to manage the KSC server, as well as update the Network Agent on computers.
The Administration Console and Network Agent are also installed over the current version.
You can install Administration Server version 11 on a device that has a previous version of Administration Server (starting from version 10 service pack one). When upgrading to version 11, all data and settings of the previous version of the Administration Server are retained.
To upgrade an Administration Server from a previous version to version 11, do the following:
- Run the setup.exe executable for version 11.
A window will open with a selection of Kaspersky Lab applications to install.
Carefully read the License Agreement between you and Kaspersky Lab and the Privacy Policy. If you agree with all points License Agreement and Privacy Policy, in the block I confirm that I have fully read, understand and accept check the boxes:
- the terms and conditions of this License Agreement;
- Privacy Policy, which describes the processing of data.
The installation of the program will continue after both checkboxes are checked. The installation wizard will prompt you to create backup Administration Server data for earlier versions.
Kaspersky Security Center supports restoring data from an Administration Server data backup created by an earlier version of the application.
- If you want to create a backup, in the window that opens Creating a backup copy of the Administration Server check the box Create a backup copy of the Administration Server.
A backup copy of the Administration Server data is created using the klbackup utility. This utility is included in the application distribution package and is located in the root of the Kaspersky Security Center installation folder.
- Install Administration Server version 11 following the instructions of the installation wizard.
- For devices on which the previous version of Network Agent was installed, create and run the task of remote installation of the new version of Network Agent .
After the remote installation task is completed, the version of Network Agent will be updated.
If you encounter problems during the installation of the Administration Server, you can restore the previous version of the Administration Server using a backup copy of the Server data created before the upgrade.
If at least one Administration Server of the new version is installed in the network, you can upgrade other Administration Servers in the network using a remote installation task that uses the installation package of the Administration Server.
When upgrading the Administration Server from an earlier version, all installed plugins are automatically deleted. Newer versions of these plugins are installed.
When updating the Administration Console from an earlier version, installed plugins that support updating are updated automatically. Plugins that do not support updating are automatically removed, then new versions of these plugins are installed.