The Maintenance Release 3 update for Kaspersky Endpoint Security 10 Service Pack 2 for Windows contains fixes to ensure support for the Microsoft Windows 10 April Update (Redstone 4, version 1803), Microsoft Windows 10 October Update (Redstone 5, version 1809) and Microsoft Windows Server 2019 operating systems.

To install the application locally, run the setup.exe file from the full distribution package and follow the Setup Wizard instructions. For more information about installation, see Online Help.

During installation, Kaspersky Endpoint Security 10 for Windows detects and allows you to uninstall applications that may affect the performance of the user's computer or cause other problems when running at the same time as the product. The list of incompatible software is available in this article.

When installing from the full distribution package, you can upgrade from the following versions of the application:

• Kaspersky Endpoint Security 10 Service Pack 1 for Windows (build 10.2.2.10535)
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 1 for Windows (build 10.2.2.10535(MR1))
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 2 for Windows (build 10.2.4.674)
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 3 for Windows (build 10.2.5.3201)
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 4 for Windows (build 10.2.6.3733)
• Kaspersky Endpoint Security 10 Service Pack 2 for Windows (build 10.3.0.6294)
• Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 2 for Windows (build 10.2.4.674)
• Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 2 for Windows (build 10.2.2.10535(MR1))

Upgrading from beta versions to Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 3 for Windows is not supported.

Starting with Kaspersky Endpoint Security 10 Service Pack 2 for Windows, the encryption module is included in the application distribution package. All libraries required for encryption will be automatically installed to your computer in the following cases:

1. During installation of the full disk encryption (FDE) component.
2. During installation of the file level encryption (FLE) component.
3. During installation of an update on a computer that has the following versions of the application installed (provided that any of the encryption components (FDE or FLE) is installed):
   • Kaspersky Endpoint Security 10 Service Pack 2 for Windows (build 10.3.0.6294)
   • Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 2 for Windows (build 10.2.4.674)
   • Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 2 for Windows (build 10.2.2.10535(MR1))
4. During installation of an upgrade on a computer with the encryption module installed. Upgrade will be performed for the following configurations:
   • Kaspersky Endpoint Security 10 Service Pack 1 for Windows (version 10.2.2.10535) and encryption module version 1.0.2.1068.
   • Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 1 for Windows (version 10.2.2.10535(MR1)) and encryption module version 1.0.2.1068.
   • Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 2 for Windows (version 10.2.4.674) and encryption module version 1.1.0.73.
   • Kaspersky Endpoint Security 10 for Windows Service Pack 1 Maintenance Release 3 for Windows (version 10.2.5.3201) and encryption module version 1.1.0.73.
   • Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 4 for Windows (version 10.2.6.3733) and encryption module version 1.1.0.73.

If the conditions described above are met, the application installer automatically removes the installed encryption module and installs all libraries necessary for encryption.

For a description of the methods used for updating configurations different from those listed above, as well as the actions that must be performed if you want to switch from the utilized encryption to encryption with a different effective key length, please refer to the section below.

Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 3 for Windows (version 10.3.3.275) is incompatible with AES encryption modules released for previous versions of Kaspersky Endpoint Security.

When the application is installed from the distribution package, all libraries required for encryption are installed automatically when the full disk encryption (FDE) or file level encryption (FLE) component is selected.

If you want to switch to encryption with a different key length, delete the utilized AES encryption module before upgrading the application to the Service Pack 2 Maintenance Release 3 version.

Before removing or upgrading the encryption module, you must decrypt all hard drives that have been encrypted using full disk encryption (FDE). No access to folder level encryption (FLE) files will be provided after you remove Encryption Module.

When upgrading from the following configurations, the application installer automatically removes the installed encryption module and installs all libraries necessary for encryption:

• Kaspersky Endpoint Security 10 Service Pack 1 (build 10.2.2.10535) and encryption module version 1.0.2.1068.
• Kaspersky Endpoint Security 10 for Windows Service Pack 1 Maintenance Release 1 (build 10.2.2.10535(MR1)) and encryption module version 1.0.2.1068.
• Kaspersky Endpoint Security 10 for Windows Service Pack 1 Maintenance Release 2 (build 10.2.4.674) and encryption module version 1.1.0.73.
• Kaspersky Endpoint Security 10 for Windows Service Pack 1 Maintenance Release 3 (build 10.2.5.3201) and encryption module version 1.1.0.73.
• Kaspersky Endpoint Security 10 for Windows Service Pack 1 Maintenance Release 4 (build 10.2.5.3201) and encryption module version 1.1.0.73.

If you are upgrading the application from the Service Pack 1 (build 10.2.2.10535) or Service Pack 1 Maintenance Release 1 (build 10.2.2.10535(MR1)) version and an encryption module of version 1.0.0.724 or 1.0.1.814 is installed on the computer, you have to upgrade the encryption module to version 1.0.2.1068 before upgrading the application.

If you are upgrading the application from the Service Pack 1 Maintenance Release 2 (build 10.2.4.674), Service Pack 1 Maintenance Release 3 (version 10.2.5.3201) or Service Pack 1 Maintenance Release 4 (version 10.2.6.3733) version and an encryption module of version 1.0.0.724, 1.0.1.814 or 1.0.2.1068 is installed on the computer, you have to upgrade the encryption module to version 1.1.0.73 before upgrading the application.

If you are upgrading the application from the Service Pack 2 (build 10.3.0.6294), Service Pack 2 Maintenance Release 1 (build 10.3.0.6294) or Service Pack 2 Maintenance Release 2 (build 10.3.0.6294(MR2)) and have the full disk encryption (FDE) or file level encryption (FLE) component installed on the computer, all libraries required for encryption will be updated automatically.

The Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 3 for Windows update cannot be installed if you have incompatible private patches installed on your computer. The list of compatible private patches is available in this article.

The application is compatible with Kaspersky Security Center 10 Service Pack 2 Maintenance Release 1 and Kaspersky Security Center 10 Service Pack 3.

To manage the application remotely via Kaspersky Security Center 10:

1. Install Network Agent on the computer. For instructions, see Online Help.
   
2. Install the Administration Plug-in of Kaspersky Endpoint Security 10 for Windows in the Kaspersky Security Center 10 console.
   The installation file of the Administration Plug-in is included in the application distribution package. You can download the required plugin version from the list of Kaspersky Security Center 10 plugins.

Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 3 for Windows can be installed via the Kaspersky Lab update service. 

You can upgrade the following application versions using the Kaspersky Lab update service:

• Kaspersky Endpoint Security 10 Service Pack 2 for Windows (build 10.3.0.6294)
• Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 2 for Windows (build 10.2.4.674)
• Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 2 for Windows (build 10.2.2.10535(MR1))

Upgrading from beta versions to Kaspersky Endpoint Security 10 Windows Service Pack 2 Maintenance Release 3 is not supported.

Special considerations when upgrading an application via the Kaspersky Lab update service:

• After you install an update, you will not be able to roll back to the previous application version.
• An update cannot be installed if incompatible private patches have been installed on the computer. For the list of private patches compatible with the upgrade, see this article.
• The upgrade is available for applications with an active license.
• The functionality of full disk encryption will remain blocked until installation of updates for the application and encryption module completes.
• To complete the update installation, you must restart your computer.
• To complete the upgrade on a computer that has hard drives encrypted using full disk encryption (FDE), you must restart the computer twice.

For the list known issues and limitations, see this article.