Kaspersky Endpoint Security 11 for Windows is incompatible with AES encryption modules released for previous versions of Kaspersky Endpoint Security.
When the application is installed for the first time, all libraries required for encryption are installed automatically when the full disk encryption (FDE) or file level encryption (FLE) component is selected.
Before removing or upgrading the encryption module, you must decrypt all hard drives that have been encrypted using full disk encryption (FDE). No access to folder level encryption (FLE) files will be provided after you remove Encryption Module.
When installing an upgrade on a computer that has the AES Encryption Module installed, the Kaspersky Endpoint Security 11 for Windows installer will automatically upgrade the Encryption Module and will install all libraries necessary for encryption if you are using a distribution package with the appropriate key length and are upgrading a supported configuration.
For automatic upgrade of an installed encryption module, use the appropriate distribution package for Kaspersky Endpoint Security 11:
- kes_win_11.0.0.6499_<localization>_aes256 – to upgrade an AES encryption module with a 256-bit effective key length.
- kes_win_11.0.0.6499_<localization>_aes56 – to upgrade an AES encryption module with a 56-bit effective key length
If you want to switch from the utilized encryption to encryption with a different key length, prior to upgrading the application to version 11 you must decrypt all encrypted objects and remove the utilized AES Encryption Module. After switching to encryption with a different key length, you will no longer be able to access objects that were encrypted prior to switching.
When upgrading from the following configurations, the application installer automatically removes the installed encryption module and installs all libraries necessary for encryption:
- Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 3 (build 10.2.5.3201) and encryption module version 1.1.0.73.
- Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 4 (build 10.2.6.3733) and encryption module version 1.1.0.73.
- Kaspersky Endpoint Security 10 Service Pack 2 (build 10.3.0.6294).
All other configurations are not supported. You must either delete the Encryption Module or upgrade it to version 1.1.0.73 prior to starting an upgrade of Kaspersky Endpoint Security.