Critical Fix 1 update for Kaspersky Endpoint Security 11.2.0 for Windows (version 11.2.0.2254) was released on January 22, 2020.

The Critical Fix 1 update:

• Includes the fix of an issue with files located in shared folders.
• Intended for Kaspersky Endpoint Security 11.2.0 for Windows (version 11.2.0.2254).
• Is compatible with all patches for version 11.2.0.

For more information about Kaspersky Endpoint Security 11.2.0 for Windows (version 11.2.0.2254), see this article.

Installation from the distribution package

To install the application locally, run the setup_kes.exe file from the full distribution package and follow the Setup Wizard instructions. For more information about installing the application, see the Online Help page.

During installation, Kaspersky Endpoint Security for Windows detects applications that may affect the computer’s performance or cause other problems (up to complete inoperability) when running at the same time as the product. For the full list of incompatible software, see this article.

Upgrading

You can update the following applications to version Critical Fix 1 for Kaspersky Endpoint Security 11.2.0 for Windows during installation from the full distribution package:

• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 3 for Windows (version 10.2.5.3201) See below for details on installing on a computer with the AES encryption module.
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 4 for Windows (version 10.2.6.3733) See below for details on installing on a computer with the AES encryption module.
• Kaspersky Endpoint Security 10 Service Pack 2 for Windows (version 10.3.0.6294)
• Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 1 for Windows (version 10.3.0.6294)
• Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 2 for Windows (version 10.3.0.6294)
• Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 3 for Windows (version 10.3.3.275)
• Kaspersky Endpoint Security 11.0.0 for Windows (version 11.0.0.6499)
• Kaspersky Endpoint Security 11.0.1 for Windows (version 11.0.1.90)
• Kaspersky Endpoint Security 11.1.0 for Windows (version 11.1.0.15919)
• Kaspersky Endpoint Security 11.1.1 for Windows (version 11.1.1.126)
• Kaspersky Endpoint Security 11.2.0 for Windows (version 11.2.0.2254)

If the Full Disk Encryption (FDE) or the File Level Encryption (FLE) components are installed on the computer, upgrading the application installed from a distribution kit with one key length using a distribution kit with a different key length is not supported. To install the update, use the distribution package that has the same effective key length as the version that is being updated. For example:

• keswin_11.2.0.2254_<localization>_aes256 if you are upgrading an application that was installed from the AES256 distribution package
• keswin_11.2.0.2254_<localization>_aes256 if you are upgrading an application that was installed from the AES56 distribution package

If no encryption components are installed, to upgrade to version Critical Fix 1 for Kaspersky Endpoint Security for Windows 11.2.0, you can use the installer with any key length.

Updating via the Kaspersky Lab update service

Critical Fix 1 for Kaspersky Endpoint Security 11.2.0 for Windows can be installed via the Kaspersky update service on top of the following versions:

• Kaspersky Endpoint Security 11.2.0 for Windows (version 11.2.0.2254)

Special considerations when updating an application via the Kaspersky Lab update service:

• This update is only available for applications with a valid license.
• To complete the upgrade, you must restart your computer.

The required encryption libraries will be automatically installed in the following cases:

• When the application is installed for the first time, provided that the full disk encryption (FDE) or file level encryption (FLE) components are selected.
• When installing the update on a computer which has:
  • Kaspersky Endpoint Security for Windows 10 Service Pack 2 or later is installed
  • Full disk encryption (FDE) or file level encryption (FLE) components are installed
  • if the 11.2.0 installer with the suitable key length is used.
• When installing the update on a computer which has:
  • Version later than Kaspersky Endpoint Security for Windows 10 Service Pack 2 and the AES encryption module are installed
  • the distribution package used for updating has the appropriate key length and that updating is supported for the existing configuration.

For automatic upgrade of an installed encryption module, use the appropriate distribution package for Kaspersky Endpoint Security 11.2.0 for Windows:

• keswin_11.2.0.2254_<localization>_aes256 – to update an AES encryption module with a 256-bit effective key length
• keswin_11.2.0.2254_<localization>_aes56 – to update an AES encryption module with a 56-bit effective key length

Supported configurations that allow automatic update of an AES encryption module:

• Kaspersky Endpoint Security 10 for Windows Service Pack 1 Maintenance Release 3 (version 10.2.5.3201) and encryption module version 1.1.0.73.
• Kaspersky Endpoint Security 10 for Windows Service Pack 1 Maintenance Release 4 (version 10.2.6.3733) and encryption module version 1.1.0.73.

Other configurations of Kaspersky Endpoint Security for Windows and AES encryption modules are not supported. You must remove the encryption module or upgrade it to version 1.1.0.73 before running an upgrade.

Before removing or upgrading the encryption module, decrypt all hard drives that have been encrypted using Kaspersky Disk Encryption technology (FDE). You will not be able to access encrypted files after you remove the encryption module.

If you want to switch from the utilized encryption to encryption with a different key length, prior to upgrading the application to version 11.2.0 you must decrypt all encrypted objects and remove the utilized AES Encryption Module. After switching to encryption with a different key length, you will no longer be able to access objects that were encrypted prior to switching.

The application is compatible with Kaspersky Security Center 11 (version 11.0.0.1131). The administration web plug-in for Kaspersky Endpoint Security for Windows version 11.2.0 is compatible with Kaspersky Security Center Web Console version 11.1.144.

To manage the application remotely via Kaspersky Security Center:

1. Install Network Agent on the computer. See the Online Help page for instructions.
2. Install the Kaspersky Endpoint Security 11.2.0 for Windows management plug-in in the Kaspersky Security Center Administration Console or in the Kaspersky Security Center Web Console.
   The management plug-in installer is included in the application installation package. You can download the required plug-in version from the list of Kaspersky Security Center plug-ins.

The MMC plug-in installer is included in the application installation package. 

The installation package of the web plug-in is available on the downloads page as well as in the application plug-in management window of Kaspersky Security Center Web Console.

For details, see this article.