→Kaspersky Endpoint Security 10 for Windows (for workstations and file servers)→Settings and Features

Kaspersky Endpoint Security 10 for Windows (for workstations and file servers)

Known issues and limitations of Kaspersky Endpoint Security 10 SP2 and SP2MR1 for Windows

2018 Jun 14 ID: 13276

For more information about the issues of Microsoft Windows 10 and Microsoft Windows Server 2016 support, see this article.

Full disk encryption (FDE) of hard drives and removable drives

For correct operation of the hard drive encryption feature, system reboot is required after the installation of the product.
The authentication agent does not support hieroglyphics and the special symbols "|" and "\".
When there are processes that attempt to access encrypted drives before the application has granted them access to such devices, the application shows a warning saying that such processes must be terminated. If all such processes cannot be terminated, the encrypted drives have to be reconnected.
Unique IDs of hard drives are displayed in the device encryption statistics in inverted format.
It is not recommended to format the devices during the process of their encryption.
In some cases, when more than one removable drives are connected to the computer, the encryption policy is applied only to one of the drives. Upon the next attempt of connecting the drives that were not encrypted, the policy works correctly.
Encryption may fail to start on a heavily fragmented hard drive. In this case, hard drive defragmentation should be performed.
During hard drive encryption, hibernation is blocked from the time when the encryption task starts and until the first reboot of a computer under Microsoft Windows 7 / 8 / 8.1 / 10 operating systems, and after installation of hard drive encryption – until the first reboot of Microsoft Windows 7 / 8 / 8.1 / 10 operating systems. During hard drive decryption, hibernation is blocked from the time when the boot hard drive is fully decrypted until the first reboot of the operating system. When the Quick Start option is enabled in the Microsoft Windows 8 / 8.1 / 10 operating systems, blocking of hibernation makes it impossible to shut down the operating system.
It is not recommended to use the xbootmgr.exe tool with additional providers enabled (such as DISPATCHER, NETWORK, DRIVERS, and others).
Formatting of an encrypted removable drive is not supported on a computer with Kaspersky Endpoint Security installed.
Formatting of an encrypted removable drive with the FAT32 file system is not supported (the device is displayed as encrypted). To be able to format the drive, reformat it to the NTFS file system.
Issues of restoring the operating system from a backup copy to an encrypted GPT device are described in this article.
Coexistence of several download agents on one encrypted computer is not supported.
It is impossible to access a removable drive that was previously encrypted on a different computer in case of simultaneous existence of the following conditions: there is no connection to the Kaspersky Security Center server; the user attempts authorization using a new token (a newly issued or replacement token) or a new password. If this happens, the computer has to be restarted. After the computer restart, access to the encrypted removable drive will be granted.
In some cases, discovery of USB devices by the authentication agent is not supported when xHCI mode for USB is enabled in BIOS settings.
Full-disk encryption (FDE) of the SSD part of the drive, which is used for caching the most frequently used data, is not supported for SSHD devices.
Full-disk encryption of 32-bit Microsoft Windows 8 / 8.1 / 10 operating systems running in UEFI mode is not supported.
Before the next encryption of the decrypted hard drive, computer restart is required.
Hard drive encryption is incompatible with Kaspersky Anti-Virus for UEFI. It is not recommended to use full disk encryption on computers with Kaspersky Anti-Virus for UEFI installed.
Creating authentication agent accounts based on MS accounts is supported with the following restrictions: single sign-on technology is not supported; automatic authentication agent account creation is not supported if the option of creating accounts for users who entered the system during last N days has been selected.
If the FDE account name is "domain"/"Windows account name", then after changing the computer name you must also update the domain part of the account names created for local users on this computer. For example, the computer name is USER and your local user account name is Username, and the FDE account has been created under the name USER/Username. If the computer name (USER) has been changed (for example, to USER-PC) , then you must change the FDE account name from USER/Username to USER-PC/Username. To change the FDE account name, use the local FDE accounts management task. Until the FDE account name is changed, only the old name can be used for preboot authentication (in the example: USER/Username).
If the user restarts the computer when the message "Your password has been changed. Click OK" is displayed, the new password is not saved. therefore, the old password must be used for the next preboot authentication.
If the user can only allowed to access the host computer encrypted using FDE with a token and has performed the access restoring procedure, make sure that after restoring access to the encrypted host, the user is allowed to access it using the password in the authentication agent. In some cases, the password set when restoring access is not saved. In this case, the user will have to restore access to the encrypted host once again at the next computer restart.
The single sign-on feature of the application is incompatible with similar third-party solutions.
FDE is not supported on Hyper-V and Citrix virtual platforms.
To see the list of devices which support hard drive encryption with limitations, please follow this link.
If hard disks on the computer have been encrypted with BitLocker, and encryption keys are being stored using the Trusted Platform Module (TPM), then after upgrading to Creators Update (Redstone 2) the PIN-code used to access the encryption key must contain at least 6 digits.

Encryption of files and folders (FLE)

Once you have installed the application, you must restart the operating system for the file and folder encryption functionality to work properly.
If encryption is unavailable on the computer, then in case it tries to access an encrypted file on the computer with encryption enabled, direct access to the file may be provided. The encrypted file located in a shared folder on the computer computer where the encryption functionality of Kaspersky Endpoint Security is available, is copied unencrypted to the computer with encryption functionality unavailable.
You are advised to decrypt files that were encrypted with Encrypting File System, before encrypting files with Kaspersky Endpoint Security.
After a file is encrypted, its size increases by 4 KB.
After a file is encrypted, the "Archive" attribute is set in the file properties.
When unpacking an encrypted archive, files from this archive overwrite those in the target folder in case any files with identical names are detected. The user is not informed of the overwriting operation.
Portable File Manager errors are not displayed in the Portable File Manager interface.
Kaspersky Endpoint Security does not launch Portable File Manager on a computer with file encryption functionality installed.
When file encryption functionality is used, the application is incompatible with the Sylpheed email client.
Editing of the swap file settings is not supported: the operating system uses default values instead of user-defined settings.
Using FLE for full disk encryption is not recommended. For encryption of the system drive, use FDE.
Safe removal should be used when working with encrypted removable drives. If a removable drive is removed unsafely, data safety on the removable drive is not guaranteed.
After the files are encrypted, their non-encrypted original copies undergo safe removal.
Synchronization of offline files using Client-Side Caching service (CSC) is not supported. It is recommended to prohibit offline management of shared resources at the level of group policies: offline files are still available for editing; however, changes made to an offline file can be lost after synchronization. For more information, please follow this link.
Creation of an encrypted archive in the root of the system hard drive is not supported.
In some cases, problems can be experienced when attempting to access encrypted files over the network. If this happens, it is recommended to move files to a different source or make sure that the computer used as a file server is managed by the same Kaspersky Security Center Administration Server.
In some cases, changing the keyboard layout causes the password entry window for an encrypted self-extracting archive to stop responding. To solve this problem, close the password entry window, switch the keyboard layout in your operating system, and re-enter the password for the encrypted archive.
When using file encryption on systems with several disk partitions, it is recommended that you use the automatic pagefile.sys file size identification option. Otherwise, the file pagefile.sys may be moved to a different partition upon computer restart.
After applying file encryption rules, including the files located in the Documents folder, make sure all users for which the encryption was enabled have access to the files. Each of users can log in with Kaspersky Security Center connected. When the user tries to access the encrypted files with no connection to Kaspersky Security Center, the system may stop responding.
Encryption of files used by the system at the startup is not recommended. Otherwise, when the system tries to access these files without connection to Kaspersky Security Center, the system may stop responding or may show multiple requests on access to the files.
Password expiration term cannot be disabled for encryption of removable drives that support the portable mode.
Encryption of files and folders is not supported on Citrix virtual platforms.

Licensing

Device Control

Installing the application

After being installed to an infected computer, the application does not inform the user of required scan of the computer. Problems with the application activation may be experienced. To solve this problem, run the critical areas scan after the application installation.
When non-ASCII characters (such as Russian letters) are used in the setup.ini file (including in the "InstallDir" parameter), it is recommended to use notepad.exe and save the file in "Encoding: Unicode" encoding or otherwise save the setup.ini file in UTF-16LE encoding. Other encodings are not supported.
If changing of application settings is password-protected, use the following commands to remove the encryption module:
- For the AES encryption module (256 bit): msiexec /x {090EAE5F-F428-49D5-9CAF-BEED98A702CA} KLLOGIN=<login> KLPASSWD=<password> /qn
- For the AES encryption module (56 bits): msiexec /x {51DAFEE1-44D0-4E1E-8F6B-80F57FEC5AE0} KLLOGIN=<login> KLPASSWD=<password> /qn
During the product settings import from the cfg file, the value for participation in Kaspersky Security Network is not applied. After the settings are imported, you must review the Kaspersky Security Network Statement and select whether you agree to participate in Kaspersky Security Network. You can find the text of the Kaspersky Security Network Statement in the product interface or in the file ksn_*.txt in the product installation folder.
When the encryption module (FLE or FDE) or the Device Control component is removed then installed again, computer restart is required before installation.
During installation of product patches, the option Start Kaspersky Endpoint Security 10 for Windows on computer startup is enabled by default.
The attempts to install any version of the AES encryption module on a computer with Kaspersky Endpoint Security 10 Service Pack 2 for Windows installed fail with the error informing that the newer version of the application is installed on the computer, even if no encryption components are installed. Starting with Kaspersky Endpoint Security 10 Service Pack 2, the encryption module does not have a separate installation file. Encryption libraries are included into the application installation package. Thus, Kaspersky Endpoint Security 10 Service Pack 2 for Windows is incompatible with AES encryption modules released for previous versions of Kaspersky Endpoint Security. All libraries required for encryption are installed automatically when the full disk encryption (FDE) or file level encryption (FLE) component is selected.

Web Control

Firewall

Support of virtual platforms

Other

Under server operating systems, no warning of required advanced disinfection is displayed.
If a scan of startup objects detects an infected file and the user has not applied Advanced Disinfection, then restoring the infected file from Quarantine before restarting the computer results in a permanent deletion of the file after the restart.
In some cases, web addresses added to the list of trusted web addresses can be processed incorrectly.
In some cases, application events are displayed incorrectly in Kaspersky Security Center reports.
Recovery of objects moved to Quarantine by Mail Anti-Virus is not supported.
System Watcher: full information about processes is not displayed.
In some cases, at the first startup of Kaspersky Endpoint Securit, the application with a digital signature may be moved to an incorrect group. Later the group will be automatically changed to the correct one.
Vulnerability scan takes a long time if many updates for Microsoft Windows are not installed on the host.
When checking mail with the MS Outlook plug-in, we recommend that you use the Cached Exchange Mode (option Use Cached Exchange Mode). For more information about the Cached Exchange Mode and Microsoft recommendations on its use, please follow this link.
When using lon-premises relay in the network with different localizations of Kaspersky Endpoint Security installed on the computers, use Update Utility of the compatible version to download application module updates.
When switching from global KSN to local KSN through Kaspersky Security Center or vice versa, the option of participation in KSN is disabled in the application policy. After switching, you must review the Kaspersky Security Network Statement and select whether you agree to participate in Kaspersky Security Network. You can view the Kaspersky Security Network Statement in the application interface or while editing the application policy.
If you want to use PIN for disk encryption using the Microsoft BitLocker technology on the computers with Microsoft Windows 10 RS2 installed, set the minimum PIN length to 6 characters. If the PIN is shorter than 6 characters, the encryption process ends with the error Failed to prepare the system volume for encryption.
When a malicious object blocked by third-party software is scanned for the second time, the user does not get the second notification about the threat. This information is displayed in the product log and the report in Kaspersky Security Center.

Was this information helpful?

Yes No

Back to "Settings and Features"

Kaspersky Endpoint Security 10 for Windows (for workstations and file servers)

Version 10.3.3.304: Hardware and Software Requirements

For Kaspersky Endpoint Security 10 for Windows to work properly, the computer must meet the following requirements:

General requirements:

1 GHz or faster processor (with support of the SSE2 instruction set).
RAM:
- 1 GB (for 32-bit operating systems)
- 2 GB (for 64-bit operating systems)
2 GB of free hard disk space

Operating systems

Microsoft Windows 10 Home / Professional / Education / Enterprise x86 / х64

For details about support for Microsoft Windows 10, please refer to this article.

Microsoft Windows 8.1 Professional / Enterprise x86 / х64
Microsoft Windows 8 Professional / Enterprise x86 / х64
Microsoft Windows 7 Home / Professional / Enterprise x86 / х64 SP1 and later
Microsoft Windows Server 2019 Essentials / Standard / Datacenter х64
Microsoft Windows Server 2016 Essentials / Standard / Datacenter х64

For details about support for Microsoft Windows Server 2019 and Microsoft Windows Server 2016, please refer to this article.

Microsoft Windows Server 2012 R2 Foundation / Essentials / Standard / Datacenter х64
Microsoft Windows Server 2012 Foundation / Essentials / Standard / Datacenter х64
Microsoft Small Business Server 2011 Essentials / Standard х64
Windows MultiPoint Server 2011 x64
Microsoft Windows Server 2008 R2 Foundation / Standard / Enterprise / Datacenter х64 SP1
Microsoft Windows Server 2008 Standard / Enterprise / Datacenter х64 SP2
Microsoft Small Business Server 2008 Standard / Premium х64

Server platform support limitations

The ReFS file system is supported with limitations.
The Server Core and Cluster Mode configurations are not supported.
Disk encryption (Kaspersky FDE) and encryption of files on server platforms are not supported.

For other details regarding support for server platforms, please refer to this article.

Supported virtual platforms

VMWare ESXi 6.0.0 3620759
Microsoft Hyper-V 3.0
Citrix XenServer 7.0
Citrix XenDesktop 7.13
Citrix Provisioning Services 7.13

Issues and limitations:

Full disk encryption (FDE) on Hyper-V virtual machines is not supported.
Full disk encryption (FDE) and encryption of files and folders (FLE) are not supported on Citrix virtual platforms.
For Kaspersky Endpoint Security for Windows to be compatible with Citrix PVS, the Ensure compatibility with Citrix PVS option must be enabled during installation. This option can be enabled in the Setup Wizard or using the command line parameter /pCITRIXCOMPATIBILITY=1. In case of remote installation, you must add the /pCITRIXCOMPATIBILITY=1 key to the kud file.

For other details regarding support for virtual platforms, please refer to this article.

Version 10.3.3.275: Hardware and Software Requirements

For Kaspersky Endpoint Security 10 for Windows to work properly, the computer must meet the following requirements:

General requirements:

1 GHz or faster processor (with support of the SSE2 instruction set).
RAM:
- 1 GB (for 32-bit operating systems)
- 2 GB (for 64-bit operating systems)
2 GB of free hard disk space

Operating systems:

Microsoft Windows 10 Pro / Enterprise x86 / х64

For details about support for Microsoft Windows 10, please refer to this article.

Microsoft Windows 8.1 Pro / Enterprise x86 / х64
Microsoft Windows 8 Pro / Enterprise x86 / х64
Microsoft Windows 7 Professional / Enterprise / Ultimate x86 / х64 SP1 or later
Microsoft Windows Server 2019 х64
Microsoft Windows Server 2016 х64

For details about support for Microsoft Windows Server 2019 and Microsoft Windows Server 2016, please refer to this article.

Microsoft Windows Server 2012 R2 Standard х64
Microsoft Windows Server 2012 Foundation / Standard х64
Microsoft Small Business Server 2011 Standard х64
Microsoft Windows Server 2008 R2 Standard / Enterprise х64 SP1
Microsoft Windows Server 2008 Standard / Enterprise х64 SP2

Server platform support limitations

The ReFS file system is supported with limitations.
The Server Core and Cluster Mode configurations are not supported.
Disk encryption (Kaspersky FDE) and encryption of files on server platforms are not supported.

For other details regarding support for server platforms, please refer to this article.

Supported virtual platforms

VMWare ESXi 6.0.0 3620759
Microsoft Hyper-V 3.0
Citrix XenServer 7.0
Citrix XenDesktop 7.13
Citrix Provisioning Services 7.13

Issues and limitations:

Full disk encryption (FDE) on Hyper-V virtual machines is not supported.
Full disk encryption (FDE) and encryption of files and folders (FLE) are not supported on Citrix virtual platforms.
For Kaspersky Endpoint Security for Windows to be compatible with Citrix PVS, the Ensure compatibility with Citrix PVS option must be enabled during installation. This option can be enabled in the Setup Wizard or using the command line parameter /pCITRIXCOMPATIBILITY=1. In case of remote installation, you must add the /pCITRIXCOMPATIBILITY=1 key to the kud file.

For other details regarding support for virtual platforms, please refer to this article.

Version 10.3.0.6294MR2: Hardware and Software Requirements

For correct functioning of Kaspersky Endpoint Security 10 for Windows, your computer must meet the following requirements:

General requirements:

1 GHz processor or faster (with support of the SSE2 instruction set)
RAM:
- 1 GB (for 32-bit operating systems)
- 2 GB (for 64-bit operating systems)
2 GB of free space of the hard drive

Operating systems:

Microsoft Windows 10 Pro x86 / х64
Microsoft Windows 10 Enterprise x86 / х64

For details about support for Microsoft Windows 10, please refer to this article.

Microsoft Windows 8.1 Pro x86 / х64
Microsoft Windows 8.1 Enterprise x86 / х64.
Microsoft Windows 8 Pro x86 / х64
Microsoft Windows 8 Enterprise x86 / х64
Microsoft Windows 7 Professional x86 / х64 SP1 and later
Microsoft Windows 7 Enterprise x86 / х64 SP1 and later
Microsoft Windows 7 Ultimate x86 / х64 SP1 and later
Microsoft Windows Server 2019 х64
Microsoft Windows Server 2016 х64

For details about support for Microsoft Windows Server 2019 and 2016, please refer to this article.

Microsoft Windows Server 2012 R2 Standard х64
Microsoft Windows Server 2012 Foundation х64
Microsoft Windows Server 2012 Standard х64
Microsoft Small Business Server 2011 Standard х64
Microsoft Windows Server 2008 R2 Standard х64 SP1
Microsoft Windows Server 2008 R2 Enterprise х64 SP1
Microsoft Windows Server 2008 Standard x86 / х64 SP2
Microsoft Windows Server 2008 Enterprise x86 / х64 SP2

The following operating systems are no longer supported:

Microsoft Windows XP
Microsoft Windows Vista
Microsoft Windows Embedded
Microsoft Windows Server 2003
Microsoft Windows Server 2003 R2

Installation on the above operating systems is not supported.

Support limitations for server platforms:

Limited support of ReFS.
Server Core and Cluster Mode configurations are not supported.
Disk encryption (Kaspersky FDE) and file encryption are not supported on server platforms.

Supported virtual platforms:

VMWare ESXi 6.0.0 3620759
Microsoft Hyper-V 3.0
Citrix XenServer 7.0
Citrix XenDesktop 7.13
Citrix Provisioning Services 7.13

Support limitations for virtual platforms:

Full disk encryption (FDE) on Hyper-V virtual machines is not supported.
Full disk encryption (FDE) and encryption of files and folders (FLE) are not supported on Citrix virtual platforms.

For other details regarding support for virtual platforms, please refer to this article.

Version 10.3.0.6294MR1: Hardware and Software Requirements

For Kaspersky Endpoint Security 10 for Windows to work properly, the computer must meet the following requirements:

General requirements:

1 GHz or faster processor (with support of the SSE2 instruction set).
RAM:
- 1 GB (for 32-bit operating systems)
- 2 GB (for 64-bit operating systems)
2 GB of free disk space on the hard drive

Operating systems:

Microsoft Windows 10 Pro x86 / х64
Microsoft Windows 10 Enterprise x86 / х64

For details about support for Microsoft Windows 10, please refer to this article.

Microsoft Windows 8.1 Pro x86 / х64
Microsoft Windows 8.1 Enterprise x86 / х64
Microsoft Windows 8 Pro x86 / х64
Microsoft Windows 8 Enterprise x86 / х64
Microsoft Windows 7 Professional x86 / х64 SP1 and later
Microsoft Windows 7 Enterprise x86 / х64 SP1 and later
Microsoft Windows 7 Ultimate x86 / х64 SP1 and later
Microsoft Windows Server 2016 х64

For details about support for Microsoft Windows Server 2016, please refer to this article.

Microsoft Windows Server 2012 R2 Standard х64
Microsoft Windows Server 2012 Foundation х64
Microsoft Windows Server 2012 Standard х64
Microsoft Small Business Server 2011 Standard х64
Microsoft Windows Server 2008 R2 Standard х64 SP1
Microsoft Windows Server 2008 R2 Enterprise х64 SP1
Microsoft Windows Server 2008 Standard x86 / х64 SP2
Microsoft Windows Server 2008 Enterprise x86 / х64 SP2

The following operating systems are no longer supported:

Microsoft Windows XP
Microsoft Windows Vista
Microsoft Windows Embedded
Microsoft Windows Server 2003
Microsoft Windows Server 2003 R2

Installation on the above operating systems is not supported.

Server platform support limitations:

The ReFS file system is supported with limitations.
The Server Core and Cluster Mode configurations are not supported.
Disk encryption (Kaspersky FDE) and encryption of files on server platforms are not supported.

Supported virtual platforms:

VMWare ESXi 6.0.0 3620759
Microsoft Hyper-V 3.0
Citrix XenServer 7.0
Citrix XenDesktop 7.13
Citrix Provisioning Services 7.13

Issues and limitations:

Full disk encryption (FDE) on Hyper-V virtual machines is not supported.
Full disk encryption (FDE) and encryption of files and folders (FLE) are not supported on Citrix virtual platforms.

For other details regarding support for virtual platforms, please refer to this article.

Version 10.3.0.6294: Hardware and Software Requirements

For Kaspersky Endpoint Security 10 for Windows to work properly, the computer must meet the following requirements:

General requirements:

1 GHz or faster processor (with support of the SSE2 instruction set).
RAM:
- 1 GB (for 32-bit operating systems)
- 2 GB (for 64-bit operating systems)
2 GB of free disk space on the hard drive

Operating systems:

Microsoft Windows 10 Pro x86 / х64
Microsoft Windows 10 Enterprise x86 / х64

For details about support for Microsoft Windows 10, please refer to this article.

Microsoft Windows 8.1 Pro x86 / х64
Microsoft Windows 8.1 Enterprise x86 / х64
Microsoft Windows 8 Pro x86 / х64
Microsoft Windows 8 Enterprise x86 / х64
Microsoft Windows 7 Professional x86 / х64 SP1 and later
Microsoft Windows 7 Enterprise x86 / х64 SP1 and later
Microsoft Windows 7 Ultimate x86 / х64 SP1 and later
Microsoft Windows Server 2016 х64

For details about support for Microsoft Windows Server 2016, please refer to this article.

Microsoft Windows Server 2012 R2 Standard х64
Microsoft Windows Server 2012 Foundation х64
Microsoft Windows Server 2012 Standard х64
Microsoft Small Business Server 2011 Standard х64
Microsoft Windows Server 2008 R2 Standard х64 SP1
Microsoft Windows Server 2008 R2 Enterprise х64 SP1
Microsoft Windows Server 2008 Standard x86 / х64 SP2
Microsoft Windows Server 2008 Enterprise x86 / х64 SP2

The following operating systems are no longer supported:

Microsoft Windows XP
Microsoft Windows Vista
Microsoft Windows Embedded
Microsoft Windows Server 2003
Microsoft Windows Server 2003 R2

Installation on the above operating systems is not supported.

Server platform support limitations:

The ReFS file system is supported with limitations.
The Server Core and Cluster Mode configurations are not supported.
Disk encryption (Kaspersky FDE) and encryption of files on server platforms are not supported.

Supported virtual platforms:

VMWare ESXi 6.0.0 3620759
Microsoft Hyper-V 3.0
Citrix XenServer 7.0
Citrix XenDesktop 7.13
Citrix Provisioning Services 7.13

Issues and limitations:

Full disk encryption (FDE) on Hyper-V virtual machines is not supported.
Full disk encryption (FDE) and encryption of files and folders (FLE) are not supported on Citrix virtual platforms.

For other details regarding support for virtual platforms, please refer to this article.

Version 10.2.6.3733: Hardware and Software Requirements

For Kaspersky Endpoint Security 10 for Windows to work properly, the computer must meet the following requirements:

General requirements:

Intel Pentium processor 1 GHz or faster
1 GB of RAM
2 GB of free disk space on the hard drive

Operating systems

Microsoft Windows 10 Pro / Enterprise x86 / х64
Microsoft Windows 8.1 Pro / Enterprise x86 / х64
Microsoft Windows 8 Pro / Enterprise x86 / х64
Microsoft Windows 7 Professional / Enterprise / Ultimate x86 / х64 SP1 or later
Microsoft Windows 7 Professional / Enterprise / Ultimate x86 / х64
Microsoft Windows Vista x86 / х64 SP2 or later
Microsoft Windows XP Professional x86 SP3 or later
Microsoft Windows Server 2019 х64
Microsoft Windows Server 2016 Standard / Essentials х64

For details about support for Microsoft Windows Server 2019 and 2016, please refer to this article.

Microsoft Windows Server 2012 R2 Foundation / Standard / Essentials х64
Microsoft Windows Server 2012 Foundation / Standard / Essentials х64
Microsoft Small Business Server 2011 Standard х64
Microsoft Windows MultiPoint Server 2011 х64
Microsoft Small Business Server 2008 Standard / Premium x64.
Microsoft Windows Server 2008 R2 Foundation / Standard / Enterprise х64 SP1 or later
Microsoft Windows Server 2008 Foundation / Standard / x86 / Enterprise х64 SP2 or later
Microsoft Windows Server 2003 R2 Standard / Enterprise x86 / x64 SP2 or later
Microsoft Windows Server 2003 Standard / Enterprise x86 / x64 SP2
Microsoft Windows Embedded 8.0 Standard x64
Microsoft Windows Embedded 8.1 Industry Pro x64
Microsoft Windows Embedded Standard 7* x86 / x64 SP1
Microsoft Windows Embedded POSReady 7* x86 / x64

Microsoft Windows 10 and Microsoft Windows Server 2016 are supported with limitations.

Special considerations and support limitations for embedded systems

It is recommended to run Microsoft Windows Embedded 8.0 Standard x64 (Standard 8) or Microsoft Windows Embedded 8.1 Industry x64 (Industry 8.1) on devices with 2GB or more of RAM.
File level encryption (FLE) and full disk encryption (FDE) functionality is not supported in embedded operating systems.

Supported virtual platforms

VMWare ESXi 5.5.0 2718055 Update 2
VMWare ESXi 5.5.0 3568722 Update 3b
VMWare ESXi 5.5.0 2718055 Update 2
Microsoft Hyper-V 3.0 (Windows Server 2012 R2)
Citrix XenServer 6.5
Citrix XenDesktop 7.8
Citrix Provisioning Server 7.8

Server platform support limitations

The ReFS file system is supported with limitations.
The Server Core and Cluster Mode configurations are not supported.
Disk encryption (Kaspersky FDE) and encryption of files on server platforms are not supported.

Version 10.2.5.3201: Hardware and Software Requirements

For proper functioning of Kaspersky Endpoint Security 10 for Windows, your computer must meet the following requirements:

General requirements

Intel Pentium 1GHz and faster
1 GB available RAM
2 GB of free disk space
Microsoft Internet Explorer 7.0 and later
Microsoft Windows Installer 3.0 and later
Internet connection for activating the application and for updating databases and application modules

Hardware and software requirements for workstations

Microsoft Windows 10 Pro x86 / х64
Microsoft Windows 10 Enterprise x86 / х64
Microsoft Windows 8.1 Pro x86 / х64
Microsoft Windows 8.1 Enterprise x86 / х64
Microsoft Windows 8 Pro x86 / х64
Microsoft Windows 8 Enterprise x86 / х64
Microsoft Windows 7 Professional x86 / х64 SP1 and later
Microsoft Windows 7 Enterprise / Ultimate x86 / х64 SP1 and later
Microsoft Windows 7 Professional x86 / х64
Microsoft Windows 7 Enterprise / Ultimate x86 / х64
Microsoft Windows Vista x86 / х64 SP2 and later
Microsoft Windows XP Professional x86 SP3 and later
Microsoft Windows Server 2019 х64
Microsoft Windows Server 2016 Standard / Essentials х64

For details about support for Microsoft Windows Server 2019 and 2016, please refer to this article.

Microsoft Windows Server 2012 R2 Foundation / Standard / Essentials х64
Microsoft Windows Server 2012 Foundation / Standard / Essentials х64
Microsoft Small Business Server 2011 Standard х64
Microsoft Windows MultiPoint Server 2011 х64
Microsoft Small Business Server 2008 Standard / Premium x64
Microsoft Windows Server 2008 R2 Foundation / Standard / Enterprise х64 SP1 and later
Microsoft Windows Server 2008 Foundation / Standard / Enterprise х86 / х64 SP2 and later
Microsoft Windows Server 2003 R2 Standard / Enterprise x86 / x64 SP2 and later
Microsoft Windows Server 2003 Standard / Enterprise x86 / x64 SP2
Microsoft Windows Embedded 8.0 Standard x64
Microsoft Windows Embedded 8.1 Industry Pro x64
Microsoft Windows Embedded Standard 7* x86 / x64 SP1
Microsoft Windows Embedded POSReady 7* x86 / x64

Microsoft Windows 10 and Microsoft Windows Server 2016 are supported with limitations.

Limitations of embedded operating systems support

We recommend that you use Microsoft Windows Embedded 8.0 Standard x64 (Standard 8) or Microsoft Windows Embedded 8.1 Industry x64 (Industry 8.1) on devices with at least 2 GB RAM.
Encryption of files (FLE) and hard drives (FDE) is not supported in the embedded operating systems.

Supported virtual platforms:

VMWare ESXi 5.5.0 2718055 Update 2
VMWare ESXi 5.5.0 3568722 Update 3b
VMWare ESXi 5.5.0 2718055 Update 2
Microsoft Hyper-V 3.0 (Windows Server 2012 R2)
Citrix XenServer 6.5
Citrix XenDesktop 7.8
Citrix Provisioning Server 7.8

Server platform support limitations:

The ReFS file system is supported with limitations.
The Server Core and Cluster Mode configurations are not supported.
Disk encryption (Kaspersky FDE) and encryption of files on server platforms are not supported.

Version 10.2.4.674: Hardware and Software Requirements

For proper functioning of Kaspersky Endpoint Security 10 for Windows, your computer must meet the following requirements:

General requirements:

Intel Pentium processor at 1 GHz and faster
1 GB of free RAM
2 GB of free disk space
Microsoft Internet Explorer 7.0 or later
Microsoft Windows Installer 3.0 or later
Internet connection (required for activating and updating the application)

Hardware and software requirements:

Microsoft Windows 10 TH2 Pro version 1511 x86 / х64
Microsoft Windows 10 TH2 Enterprise version 1511 x86 / х64
Microsoft Windows 8.1 Pro x86 / х64
Microsoft Windows 8.1 Enterprise x86 / х64
Microsoft Windows 8 Pro x86 / х64
Microsoft Windows 8 Enterprise x86 / х64
Microsoft Windows 7 Professional x86 / х64 SP1 and later
Microsoft Windows 7 Enterprise / Ultimate x86 / х64 SP1 and later
Microsoft Windows 7 Professional x86 / х64
Microsoft Windows 7 Enterprise / Ultimate x86 / х64
Microsoft Windows Vista x86 / х64 SP2 and later
Microsoft Windows XP Professional x86 SP3 and later
Microsoft Windows Server 2012 R2 Standard / Essentials / Enterprise х64
Microsoft Windows Server 2012 Foundation / Standard / Essentials х64
Microsoft Small Business Server 2011 Standard / Essentials х64
Microsoft Windows MultiPoint Server 2011 х64
Microsoft Windows Server 2008 R2 Standard / Enterprise / Foundation х64 SP1 and later
Microsoft Windows Server 2008 R2 Standard / Enterprise / Foundation х64
Microsoft Windows Server 2008 Standard / Enterprise х86 / х64 SP2 and later
Microsoft Small Business Server 2008 Standard / Premium x64
Microsoft Windows Server 2003 R2 Standard / Enterprise x86 / x64 SP2 and later
Microsoft Windows Server 2003 Standard / Enterprise x86 / x64 SP2 and later
Microsoft Windows Embedded 8.0 Standard x64
Microsoft Windows Embedded 8.1 Industry Pro x64
Microsoft Windows Embedded Standard 7 x86 / x64 SP1
Microsoft Windows Embedded POSReady 7 x86 / x64

Limitations of embedded operating systems support

We recommend that you use Microsoft Windows Embedded 8.0 Standard x64 (Standard 8) or Microsoft Windows Embedded 8.1 Industry x64 (Industry 8.1) on devices with at least 2 GB RAM.
Encryption of files (FLE) and hard drives (FDE) is not supported in the embedded operating systems.

Server platform support limitations:

The ReFS file system is supported with limitations.
The Server Core and Cluster Mode configurations are not supported.
Disk encryption (Kaspersky FDE) and encryption of files on server platforms are not supported.

Version 10.2.2.10535MR1: Hardware and Software Requirements

For Kaspersky Endpoint Security 10 for Windows to work properly, the computer must meet the following requirements:

General requirements

Intel Pentium processor 1 GHz or faster
1 GB available RAM
2 GB of free hard disk space
Microsoft Internet Explorer 7.0 or later
Microsoft Windows Installer 3.0 or later
Internet connection for activating the application and for updating databases and application modules.

Operating systems

Microsoft Windows 8.1 Update Pro x86 / х64
Microsoft Windows 8.1 Update Enterprise x86 / х64
Microsoft Windows 8.1 Pro x86 / х64
Microsoft Windows 8.1 Enterprise x86 / х64
Microsoft Windows 8 Pro x86 / х64
Microsoft Windows 8 Enterprise x86 / х64
Microsoft Windows 7 Professional x86 / х64 SP1 and later
Microsoft Windows 7 Enterprise / Ultimate x86 / х64 SP1 and later
Microsoft Windows 7 Professional x86 / х64
Microsoft Windows 7 Enterprise / Ultimate x86 / х64
Microsoft Windows Vista x86 / х64 SP2 or later
Microsoft Small Business Server 2011 Essentials х64
Microsoft Small Business Server 2011 Standard х64
Microsoft Small Business Server 2008 Standard x64
Microsoft Small Business Server 2008 Premium x64
Microsoft Windows Server 2012 R2 Standard х64
Microsoft Windows Server 2012 Foundation / Standard х64
Microsoft Windows MultiPoint Server 2011 x64
Microsoft Windows Server 2008 R2 Standard х64 SP1 and later
Microsoft Windows Server 2008 R2 Standard х64
Microsoft Windows Server 2008 R2 Enterprise х64 SP1 and later
Microsoft Windows Server 2008 R2 Enterprise х64
Microsoft Windows Server 2008 R2 Foundation x64 SP1 and later
Microsoft Windows Server 2008 R2 Foundation x64
Microsoft Windows Server 2008 Standard х86 / х64 SP2 and later
Microsoft Windows Server 2008 Enterprise х86 / х64 SP2 and later
Microsoft Windows Server 2003 R2 Standard x86 / x64 SP2 and later
Microsoft Windows Server 2003 R2 Enterprise x86 / x64 SP2 and later
Microsoft Windows Server 2003 Standard x86 / x64 SP2
Microsoft Windows Server 2003 Enterprise x86 / x64 SP2 and later
Windows Embedded 8.0 Standard x64
Windows Embedded 8.1 Industry Pro x64
Windows Embedded Standard 7 with SP1 x86 / х64
Windows Embedded POSReady 7 x86 / х64

Special considerations and support limitations for embedded systems

It is recommended to run Microsoft Windows Embedded 8.0 Standard x64 (Standard 8) or Microsoft Windows Embedded 8.1 Industry x64 (Industry 8.1) on devices with 2GB or more of RAM.
File level encryption (FLE) and full disk encryption (FDE) functionality is not supported in embedded operating systems.

Server platform support limitations

The ReFS file system is supported with limitations.
The Server Core and Cluster Mode configurations are not supported.

Support limitations for Microsoft Windows 8.1

The update of Windows 8 to Windows 8.1 is not supported.
ReFS file system is limited for the iSwift / iChecker technology.
It is not possible to hide Kaspersky Endpoint Security 10 in the Start menu.

Supported virtual platforms

VMWare ESXi 5.5.0 1623387 Update 1
VMWare ESXi 5.5.0 2068190 Update 2
Microsoft Hyper-V 3.0 (Windows Server 2012)
Citrix XenServer 6.2
Citrix XenDesktop 7.5
Citrix Provisioning Server 7.1

Virtual platform support Issues and limitations

To enable Kaspersky Endpoint Security compatibility with Citrix PVS, perform installation with the Ensure compatibility with Citrix PVS option enabled. This option can be enabled in the Setup Wizard or using the command line parameter /pCITRIXCOMPATIBILITY=1. In case of remote installation, you must add the /pCITRIXCOMPATIBILITY=1 key into the kud file.
Installation of Kaspersky Endpoint Security 10 Service Pack 1 to a Microsoft Windows XP virtual machine running on Citrix XenDesktop is not supported.
Using Target Device for creating images of virtual machines with Kaspersky Endpoint Security 10 Service Pack 1 installed that run under Microsoft Windows XP and Microsoft Windows Vista is not supported.

Version 10.2.2.10535: Hardware and Software Requirements

For Kaspersky Endpoint Security 10 for Windows to work properly, the computer must meet the following requirements:

General requirements

Intel Pentium processor 1 GHz or faster
1 GB available RAM
2 GB of free hard disk space
Microsoft Internet Explorer 7.0 or later
Microsoft Windows Installer 3.0 or later
Internet connection for activating the application and for updating databases and application modules.

Operating systems

Microsoft Windows 8.1 Update Pro x86 / х64
Microsoft Windows 8.1 Update Enterprise x86 / х64
Microsoft Windows 8.1 Pro x86 / х64
Microsoft Windows 8.1 Enterprise x86 / х64
Microsoft Windows 8 Pro x86 / х64
Microsoft Windows 8 Enterprise x86 / х64
Microsoft Windows 7 Professional x86 / х64 SP1 and later
Microsoft Windows 7 Enterprise / Ultimate x86 / х64 SP1 and later
Microsoft Windows 7 Professional x86 / х64
Microsoft Windows 7 Enterprise / Ultimate x86 / х64
Microsoft Windows Vista x86 / х64 SP2 or later
Microsoft Small Business Server 2011 Essentials х64
Microsoft Small Business Server 2011 Standard х64
Microsoft Small Business Server 2008 Standard x64
Microsoft Small Business Server 2008 Premium x64
Microsoft Windows Server 2012 R2 Standard х64
Microsoft Windows Server 2012 Foundation / Standard х64
Microsoft Windows MultiPoint Server 2011 x64
Microsoft Windows Server 2008 R2 Standard х64 SP1 and later
Microsoft Windows Server 2008 R2 Standard х64
Microsoft Windows Server 2008 R2 Enterprise х64 SP1 and later
Microsoft Windows Server 2008 R2 Enterprise х64
Microsoft Windows Server 2008 R2 Foundation x64 SP1 and later
Microsoft Windows Server 2008 R2 Foundation x64
Microsoft Windows Server 2008 Standard х86 / х64 SP2 and later
Microsoft Windows Server 2008 Enterprise х86 / х64 SP2 and later
Microsoft Windows Server 2003 R2 Standard x86 / x64 SP2 and later
Microsoft Windows Server 2003 R2 Enterprise x86 / x64 SP2 and later
Microsoft Windows Server 2003 Standard x86 / x64 SP2
Microsoft Windows Server 2003 Enterprise x86 / x64 SP2 and later
Windows Embedded 8.0 Standard x64
Windows Embedded 8.1 Industry Pro x64
Windows Embedded Standard 7 with SP1 x86 / х64
Windows Embedded POSReady 7 x86 / х64

Special considerations and support limitations for embedded systems

It is recommended to run Microsoft Windows Embedded 8.0 Standard x64 (Standard 8) or Microsoft Windows Embedded 8.1 Industry x64 (Industry 8.1) on devices with 2GB or more of RAM.
File level encryption (FLE) and full disk encryption (FDE) functionality is not supported in embedded operating systems.

Server platform support limitations

The ReFS file system is supported with limitations.
The Server Core and Cluster Mode configurations are not supported.

Support limitations for Microsoft Windows 8.1

The update of Windows 8 to Windows 8.1 is not supported.
ReFS file system is limited for the iSwift / iChecker technology.
It is not possible to hide Kaspersky Endpoint Security 10 in the Start menu.

Supported virtual platforms

VMWare ESXi 5.5.0 1623387 Update 1
VMWare ESXi 5.5.0 2068190 Update 2
Microsoft Hyper-V 3.0 (Windows Server 2012)
Citrix XenServer 6.2
Citrix XenDesktop 7.5
Citrix Provisioning Server 7.1

Virtual platform support issues and limitations

To enable Kaspersky Endpoint Security compatibility with Citrix PVS, perform installation with the Ensure compatibility with Citrix PVS option enabled. This option can be enabled in the Setup Wizard or using the command line parameter /pCITRIXCOMPATIBILITY=1. In case of remote installation, you must add the /pCITRIXCOMPATIBILITY=1 key into the kud file.
Installation of Kaspersky Endpoint Security 10 Service Pack 1 to a Microsoft Windows XP virtual machine running on Citrix XenDesktop is not supported.
Using Target Device for creating images of virtual machines with Kaspersky Endpoint Security 10 Service Pack 1 installed that run under Microsoft Windows XP and Microsoft Windows Vista is not supported.

Version 10.3.3.275: Hardware and Software Requirements

For Kaspersky Endpoint Security 10 for Windows to work properly, the computer must meet the following requirements:

General requirements:

1 GHz or faster processor (with support of the SSE2 instruction set).
RAM:
- 1 GB (for 32-bit operating systems)
- 2 GB (for 64-bit operating systems)
2 GB of free hard disk space

Operating systems:

Microsoft Windows 10 Pro / Enterprise x86 / х64

For details about support for Microsoft Windows 10, please refer to this article.

Microsoft Windows 8.1 Pro / Enterprise x86 / х64
Microsoft Windows 8 Pro / Enterprise x86 / х64
Microsoft Windows 7 Professional / Enterprise / Ultimate x86 / х64 SP1 or later
Microsoft Windows Server 2019 х64
Microsoft Windows Server 2016 х64

For details about support for Microsoft Windows Server 2019 and Microsoft Windows Server 2016, please refer to this article.

Microsoft Windows Server 2012 R2 Standard х64
Microsoft Windows Server 2012 Foundation / Standard х64
Microsoft Small Business Server 2011 Standard х64
Microsoft Windows Server 2008 R2 Standard / Enterprise х64 SP1
Microsoft Windows Server 2008 Standard / Enterprise х64 SP2

Server platform support limitations

The ReFS file system is supported with limitations.
The Server Core and Cluster Mode configurations are not supported.
Disk encryption (Kaspersky FDE) and encryption of files on server platforms are not supported.

For other details regarding support for server platforms, please refer to this article.

Supported virtual platforms

VMWare ESXi 6.0.0 3620759
Microsoft Hyper-V 3.0
Citrix XenServer 7.0
Citrix XenDesktop 7.13
Citrix Provisioning Services 7.13

Issues and limitations:

Full disk encryption (FDE) on Hyper-V virtual machines is not supported.
Full disk encryption (FDE) and encryption of files and folders (FLE) are not supported on Citrix virtual platforms.
For Kaspersky Endpoint Security for Windows to be compatible with Citrix PVS, the Ensure compatibility with Citrix PVS option must be enabled during installation. This option can be enabled in the Setup Wizard or using the command line parameter /pCITRIXCOMPATIBILITY=1. In case of remote installation, you must add the /pCITRIXCOMPATIBILITY=1 key to the kud file.

For other details regarding support for virtual platforms, please refer to this article.

Database Update	Yes
Support	Yes
Error fix	Yes

Kaspersky Endpoint Security 10 for Windows (for workstations and file servers)

Known issues and limitations of Kaspersky Endpoint Security 10 SP2 and SP2MR1 for Windows

Full disk encryption (FDE) of hard drives and removable drives

Encryption of files and folders (FLE)

Licensing

Device Control

Installing the application

Web Control

Firewall

Support of virtual platforms

Other

Kaspersky Endpoint Security 10 for Windows (for workstations and file servers)

Status: Full Support

Database Update

Support

Error fix

Documentation

License agreement

Download

Additional Downloads

Packages for remote management

Kaspersky Endpoint Security 10 for Windows (for workstations and file servers)

Version 10.3.3.304: Hardware and Software Requirements

General requirements:

Operating systems

Server platform support limitations

Supported virtual platforms

Issues and limitations:

Version 10.3.3.275: Hardware and Software Requirements

General requirements:

Operating systems:

Server platform support limitations

Supported virtual platforms

Issues and limitations:

Version 10.3.0.6294MR2: Hardware and Software Requirements

General requirements:

Operating systems:

Support limitations for server platforms:

Supported virtual platforms:

Support limitations for virtual platforms:

Version 10.3.0.6294MR1: Hardware and Software Requirements

General requirements:

Operating systems:

Server platform support limitations:

Supported virtual platforms:

Issues and limitations:

Version 10.3.0.6294: Hardware and Software Requirements

General requirements:

Operating systems:

Server platform support limitations:

Supported virtual platforms:

Issues and limitations:

Version 10.2.6.3733: Hardware and Software Requirements

General requirements:

Operating systems

Special considerations and support limitations for embedded systems

Supported virtual platforms

Server platform support limitations

Version 10.2.5.3201: Hardware and Software Requirements

General requirements

Hardware and software requirements for workstations

Limitations of embedded operating systems support

Supported virtual platforms:

Server platform support limitations:

Version 10.2.4.674: Hardware and Software Requirements

General requirements:

Hardware and software requirements:

Limitations of embedded operating systems support

Server platform support limitations:

Version 10.2.2.10535MR1: Hardware and Software Requirements

General requirements

Operating systems

Special considerations and support limitations for embedded systems

Server platform support limitations

Support limitations for Microsoft Windows 8.1

Supported virtual platforms

Virtual platform support Issues and limitations

Version 10.2.2.10535: Hardware and Software Requirements

General requirements

Operating systems