Starting with Kaspersky Endpoint Security 10 Service Pack 2, the encryption module is included in the application distribution package as a library (cab). Thus, Kaspersky Endpoint Security 10 Service Pack 2 for Windows is incompatible with AES encryption modules released for previous versions of Kaspersky Endpoint Security.
When the application is installed, all libraries required for encryption are installed automatically when the full disk encryption (FDE) or file level encryption (FLE) component is selected.
For automatic upgrade of an installed encryption module, use the appropriate distribution package for Kaspersky Endpoint Security 10 Service Pack 2:
- kes10winsp2_<localization>_aes256 – to upgrade an AES encryption module with a 256-bit effective key length.
- kes10winsp2_<localization>_aes56 – to upgrade an AES encryption module with a 56-bit effective key length.
If you want to switch from the utilized encryption to encryption with a different key length, you must delete the utilized AES encryption module before upgrading the application to the Service Pack 2 version.
Note that you have to decrypt all hard disks that have been encrypted using full disk encryption (FDE), before removing Encryption Module. No access to folder level encryption (FLE) files will be provided after you remove Encryption Module.
When upgrading from the following configurations, the application installer automatically removes the installed encryption module and installs all libraries necessary for encryption:
- Kaspersky Endpoint Security 10 Service Pack 1 (build 10.2.2.10535) and encryption module version 1.0.2.1068.
- Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 1 (build 10.2.2.10535(MR1)) and encryption module version 1.0.2.1068.
- Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 2 (build 10.2.4.674) and encryption module version 1.1.0.73.
- Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 3 (build 10.2.5.3201) and encryption module version 1.1.0.73.
If you are upgrading the application from the Service Pack 1 (build 10.2.2.10535) or Service Pack 1 Maintenance Release 1 (build 10.2.2.10535(MR1)) version and an encryption module of version 1.0.0.724 or 1.0.1.814 is installed on the computer, you have to upgrade the encryption module to version 1.0.2.1068 before upgrading the application.
If you are upgrading the application from the Service Pack 1 Maintenance Release 2 (build 10.2.4.674) or Service Pack 1 Maintenance Release 3 (build 10.2.5.3201) version and an encryption module of version 1.0.0.724, 1.0.1.814 or 1.0.2.1068 is installed on the computer, you have to upgrade the encryption module to version 1.1.0.73 before upgrading the application.