The encryption module is included in the application installation package starting with Kaspersky Endpoint Security 10 Service Pack 2 version. In light of this, Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 2 for Windows is incompatible with AES encryption modules released for previous versions of Kaspersky Endpoint Security.
When the application is installed from the distribution package, all libraries required for encryption are installed automatically if the full disk encryption (FDE) or file level encryption (FLE) component is selected.
For automatic upgrade of an installed encryption module, use the appropriate distribution package for Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 2:
- kes10winsp2_mr2_<localization>_aes256 – to upgrade an AES encryption module with a 256-bit effective key length
- kes10winsp2_mr2_<localization>_aes56 – to upgrade an AES encryption module with a 56-bit effective key length
If you want to switch from the utilized encryption to encryption with a different key length, you must delete the utilized AES encryption module before upgrading the application to the Service Pack 2 Maintenance Release 2 version.
Before removing or upgrading the encryption module, you must decrypt all hard drives that have been encrypted using full disk encryption (FDE). No access to folder level encryption (FLE) files will be provided after you remove Encryption Module.
When upgrading from the following configurations, the application installer automatically removes the installed encryption module and installs all libraries necessary for encryption:
- Kaspersky Endpoint Security 10 Service Pack 1 (build 10.2.2.10535) and encryption module version 1.0.2.1068
- Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 1 (build 10.2.2.10535(MR1)) and encryption module version 1.0.2.1068
- Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 2 (build 10.2.4.674) and encryption module version 1.1.0.73
- Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 3 (build 10.2.5.3201) and encryption module version 1.1.0.73
- Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 4 (build 10.2.6.3733) and encryption module version 1.1.0.73
If you are upgrading the application from the Service Pack 1 (build 10.2.2.10535) or Service Pack 1 Maintenance Release 1 (build 10.2.2.10535(MR1)) version and an encryption module of version 1.0.0.724 or 1.0.1.814 is installed on the computer, you have to upgrade the encryption module to version 1.0.2.1068 before upgrading the application.
If you are upgrading the application from the Service Pack 1 Maintenance Release 2 (build 10.2.4.674) or Service Pack 1 Maintenance Release 4 (build 10.2.6.3733) version and an encryption module of version 1.0.0.724, 1.0.1.814 or 1.0.2.1068 is installed on the computer, you have to upgrade the encryption module to version 1.1.0.73 before upgrading the application.