Kaspersky Endpoint Security 11.0.1 for Windows is incompatible with AES encryption modules released for previous versions of Kaspersky Endpoint Security for Windows.
When the application is installed from the distribution package, all libraries required for encryption are installed automatically when the full disk encryption (FDE) or file level encryption (FLE) component is selected.
When the update is installed on a computer that has the AES Encryption Module installed, the Encryption Module is updated automatically and all the libraries necessary for encryption are installed, provided that you are using a distribution package with the appropriate key length and are updating a supported configuration.
Before removing or updating the encryption module, you must decrypt all hard drives that have been encrypted using full disk encryption (FDE). No access to folder level encryption (FLE) files will be provided after you remove the encryption module.
In order to get the installed encryption module to update automatically, use the appropriate distribution package for Kaspersky Endpoint Security 11.0.1 for Windows:
- keswin_11.0.1.90_<localization>_aes256 – to update an AES encryption module with a 256-bit effective key length
- keswin_11.0.1.90_<localization>_aes56 – to update an AES encryption module with a 56-bit effective key length
If you want to switch from your encryption method to encryption with a different key length, prior to updating the application to version 11.0.1 you must decrypt all encrypted objects and remove the AES Encryption Module that was used. After switching to encryption with a different key length, you will no longer be able to access objects that were encrypted prior to switching.
When updating from the following configurations, the application installer automatically removes the installed encryption module and installs all libraries necessary for encryption:
- Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 3 for Windows (build 10.2.5.3201) and Encryption Module version 1.1.0.73
- Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 4 for Windows (build 10.2.6.3733) and Encryption Module version 1.1.0.73
- Kaspersky Endpoint Security 10 Service Pack 2 (build 10.3.0.6294)
- Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 1 for Windows (version 10.3.0.6294)
- Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 2 for Windows (version 10.3.0.6294)
- Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 3 for Windows (version 10.3.3.275)
- Kaspersky Endpoint Security 11 for Windows (version 11.0.0.6499)
All other configurations are not supported. You must either delete the Encryption Module currently installed or update it to version 1.1.0.73 prior to updating Kaspersky Endpoint Security 11.0.1 for Windows.