Kaspersky Administration Kit 6.0 MP1/MP2

	Useful links
	Download Kaspersky Administration Kit 6.0 MP1 CF1 (build 6.0.1565) How to install an Administration Agent using Group Policy Object How to install and update Kaspersky Administration Kit 6.0 remotely

On the 17^th of October, 2007 Kaspersky Lab announces release of Critical Fix1 for Kaspersky Administration Kit 6.0 MP1 (version 6.0.1565).

Critical Fix 1 is a cumulative update of the Kaspersky Administration Kit application. It can be used either for the initial installation of the application or for updating any earlier versions of the Kaspersky Administration Kit application.

What's new in version 6.0.1565 compared with version 6.0.1405:

NEW 

• Possibility to manage Kaspersky Anti-Virus 6.0 for Windows Servers Enterprise Edition remotely has been added.

To manage the Anti-Virus via the Administration Console remotely, manually install the Anti-Virus Control plug-in. For it on each Administration Console which will be used to manage Kaspersky Anti-Virus 6.0 for Windows Servers Enterprise Edition remotely, run the file klcfginst.exe from the anti-virus distributive. This file resides in the plugin folder of the distributive.

FIXED

Administration Server side changes: 

• Administration Server could consume 100% CPU. 


• Policy could be distributed to the slave server with unlocked settings. 


• Error "Access Denied" could occur while attempting to create group task or policy on some configurations. 


• Service supporting Cisco NAC was vulnerable to Denial of Service attack. 


• Error "...DELETE statement conflicted with COLUMN REFERENCE constraint 'FK_fts_uagents__Hosts_nId'" could occur while deleting Update agents. 


• Update via network share did not work. 


• Infinite unsuccessful remote installation in case of Turkey codepage. 


• Error "FIle not found" while updating from Administration Server. 


• Administration Server crash. 


• Group task could become corrupted after Administration Server upgrade.


• Administration Server installation error in case of using MySQL with binary logging turned on (option log-bin=mysql-bin). 


• Security group builtin\Administrators could not be removed from ACLs. 


• Remote installation task could not be started repeatedly for host in case of checking switch "don't install if already installed".


• Administration Server runs slowly on some 4 CPU configurations.

Network Agent side changes. 

• Network Agent opened ports in Windows Firewall for local subnet only.


• Task of antivirus application with schedule "Run on event "Application Start"" sometimes did not start. 


• Some updates were not distributed via Update agents (group update task verdict "Some components were not updated"). 


• Real-time protection status could become wrong after upgrading Network Agent from version 5. 


• Error "Parameter with name 85 not exist" could occur while interaction with antivirus application. 


• Network Agent worked incorrectly in case of installing it into the directory with path length more than 100 characters.

The following procedure is recommended for upgrading Kaspersky Administration Kit

1. Download from the Kaspersky Lab’s sites distributive Kaspersky Administration Kit - version 6.01565. It consists of several files: 

• kasp6.0.1565_adminkitru.exe – installer of Kaspersky Administration Kit 6.0 (build 6.0.1565) 
• kasp6.0.1565_netagentmsien.exe - MSI- installer of the Network Agent version 6.0.1565. 
• kasp5.0.0474_netagentru.exe - installer of the Network Agent version 5.0.0474 for remote management by Kaspersky Anti-Virus 5.6 for ISA Servers 2000 Enterprise Edition

2. Using the klbackup.exe utility create a backup copy of the Administration Server data either with klbackup.exe utility or with backup task.

Note that in order to be able to fully restore the Administration Server data you have to save the Server's certificate (it concerns only Administration Servers versions 5.0.0474 and below – later versions save the Server’s certificate automatically).

3. Run the Kaspersky Administration Kit 6.0 installer on the computer on which the Administration Server is installed and update the current version of the Administration Server. Backward compatibility is supported between the newer and older versions of the Administration Server. All data of the older (current) version of the Administration Server will be saved during the update to the new version.

4. Run the Kaspersky Administration Kit 6.0 installer on other workstations of administrators (on the computers with the Console installed without the Server) to upgrade version of the Administration Console. When installing clear the box Kaspersky Administration Server in the Select components window.

Open the Console, connect to the Server and check if policies and tasks were updated correctly.

If the Server was upgraded unsuccessfully, reinstall the Administration Server and restore the backup copy of the Server data.

5. Create a group or a global task for installing the Network Agent 6.0.1565 on the computers within the corporate network. Run this task manually or according to the schedule. After this task is successfully completed the current version of the Network Agent will be updated on the client computers.

Beginning from Kaspersky Administration Kit 6.0 the Network Agent installed via MSI can be upgraded locally or using remote install tasks, etc!

To manage Kaspersky Anti Virus 5.6 for ISA Servers 2000 Enterprise Edition remotely Network Agent 5.0.0474 should be installed on the ISA-Server.

To manage Kaspersky Anti-Virus 5.7 for Novell NetWare remotely a special build of the Network Agent which goes with Kaspersky Anti-Virus 5.7 for Novell NetWare should be installed on the NetWare-server.

To manage Kaspersky Anti-Virus 5.7 for Linux File Servers and Workstations remotely a special build of the Network Agent which goes with Kaspersky Anti-Virus 5.7 for Linux File Servers and Workstations should be installed on client computers running under Linux OS.