The Kaspersky Endpoint Security 11.0.1 for Windows contains fixes to ensure support for the Microsoft Windows 10 October Update (Redstone 5, version 1809) and Microsoft Windows Server 2019 operating systems.

To install Kaspersky Endpoint Security 11.0.1 for Windows locally, run the setup_kes.exe file from the full distribution package and follow the Setup Wizard’s instructions. For more information about installing the application, see the Online Help page.

For silent installation, add the PRIVACYPOLICY=1 parameter to the command line or to the setup.ini file. By doing this, you will accept the Privacy Policy. A file with Privacy Policy text is included in the distribution package of Kaspersky Endpoint Security 11.0.1 for Windows. You must accept the terms of the Privacy Policy in order to install or update the application. If you do not specify this parameter for silent installation, the application will not be installed.

During installation, Kaspersky Endpoint Security 11.0.1 for Windows detects and allows you to uninstall applications that may affect the computer’s performance or cause other problems when running at the same time as the product. For the full list of incompatible software, see this article.

You can update the following applications to Kaspersky Endpoint Security 11.0.1 for Windows during installation from the full distribution package:

• Kaspersky Endpoint Security 10 Service Pack 1 for Windows (version 10.2.2.10535) 
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 1 for Windows (version 10.2.2.10535(MR1)) 
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 2 for Windows (build 10.2.4.674) 
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 3 for Windows (build 10.2.5.3201) 
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 4 for Windows (build 10.2.6.3733)
• Kaspersky Endpoint Security 10 Service Pack 2 for Windows (build 10.3.0.6294)
• Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 1 for Windows (version 10.3.0.6294)
• Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 2 for Windows (version 10.3.0.6294)
• Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 3 for Windows (version 10.3.3.275)
• Kaspersky Endpoint Security 11 for Windows (version 11.0.0.6499)

It is not possible to update Kaspersky Endpoint Security for Windows version 10 SP2 (version 10.3.0.6294) and 11 (version 11.0.0.6499) if the effective key length is different from that of the distribution package originally used to install the application, even if the Full Disk Encryption (FDE) or File Level Encryption (FLE) components are not installed on the computer.

To update the application from version 10 SP2 or 11, use the appropriate distribution package for Kaspersky Endpoint Security 11.0.1 for Windows:

• keswin_11.0.1.90_<localization>_aes256 — to update the application versions installed from an AES distribution package with a 256-bit effective key.
• keswin_11.0.1.90_<localization>_aes56 — to update the application versions installed from an AES distribution package with a 56-bit effective key length.

Updating from beta versions to Kaspersky Endpoint Security 11.0.1 for Windows is not supported.

See below for more details about the conditions and methods of automatically updating the AES encryption module.

Kaspersky Endpoint Security 11.0.1 for Windows is incompatible with AES encryption modules released for previous versions of Kaspersky Endpoint Security for Windows. 

When the application is installed from the distribution package, all libraries required for encryption are installed automatically when the full disk encryption (FDE) or file level encryption (FLE) component is selected.

When the update is installed on a computer that has the AES Encryption Module installed, the Encryption Module is updated automatically and all the libraries necessary for encryption are installed, provided that you are using a distribution package with the appropriate key length and are updating a supported configuration.

Before removing or updating the encryption module, you must decrypt all hard drives that have been encrypted using full disk encryption (FDE). No access to folder level encryption (FLE) files will be provided after you remove the encryption module.

In order to get the installed encryption module to update automatically, use the appropriate distribution package for Kaspersky Endpoint Security 11.0.1 for Windows:

• keswin_11.0.1.90_<localization>_aes256 – to update an AES encryption module with a 256-bit effective key length
• keswin_11.0.1.90_<localization>_aes56 – to update an AES encryption module with a 56-bit effective key length

If you want to switch from your encryption method to encryption with a different key length, prior to updating the application to version 11.0.1 you must decrypt all encrypted objects and remove the AES Encryption Module that was used. After switching to encryption with a different key length, you will no longer be able to access objects that were encrypted prior to switching.

When updating from the following configurations, the application installer automatically removes the installed encryption module and installs all libraries necessary for encryption:

• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 3 for Windows (build 10.2.5.3201) and Encryption Module version 1.1.0.73
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 4 for Windows (build 10.2.6.3733) and Encryption Module version 1.1.0.73
• Kaspersky Endpoint Security 10 Service Pack 2 (build 10.3.0.6294)
• Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 1 for Windows (version 10.3.0.6294)
• Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 2 for Windows (version 10.3.0.6294)
• Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 3 for Windows (version 10.3.3.275)
• Kaspersky Endpoint Security 11 for Windows (version 11.0.0.6499)

All other configurations are not supported. You must either delete the Encryption Module currently installed or update it to version 1.1.0.73 prior to updating Kaspersky Endpoint Security 11.0.1 for Windows.

You can update Kaspersky Endpoint Security 11 for Windows (version 11.0.0.6499) to version 11.0.1 via the Kaspersky Lab update service.

Updating from beta versions to Kaspersky Endpoint Security 11.0.1 for Windows is not supported.

Special considerations when updating an application via the Kaspersky Lab update service: 

• After you install an update, you will not be able to roll back to the previous application version. 
• An update cannot be installed if incompatible private patches have been installed on your computer. For the list of private patches compatible with the upgrade, see this article.
• This update is available only for applications with valid license.
• The functionality of full disk encryption (FDE) will remain blocked until the application update is completed.
• To complete the update, you must restart your computer. 
• To complete the update on a computer that has hard drives encrypted using full disk encryption (FDE), you must restart the computer twice.

Kaspersky Endpoint Security 11.0.1 for Windows is compatible with Kaspersky Security Center 10 Service Pack 3.

To manage the application remotely via Kaspersky Security Center 10:

1. Install Network Agent on the computer. For instructions, see Online Help.
2. Install the Administration Plug-in for Kaspersky Endpoint Security 11.0.0 for Windows in the Kaspersky Security Center 10 console.
   The installation file of the Administration Plug-in is included in the application distribution package. You can download the required plugin version from the list of Kaspersky Security Center 10 plugins.

Version 11.0.1 of the Administration Plug-in is installed on top of version 11.0. To continue using version 11.0 of the Administration Plug-in, you must first remove version 11.0.1.

For more details about about fixes and private patches, see this article.

For more details about known issues and limitations, see this article.