Verify the following:

• Hardware and software meet the system requirements for the installed version of Kaspersky Security Center.
• The database server has enough disk space to function properly.
• The database server has the recommended settings:
  • MySQL
  • MariaDB
  • PostgreSQL

Do the following:

• Make sure that the network settings for connecting Administration Servers to external services are correct. You can check this in the logs of the proxy server or network equipment that provides access to the Internet.
• Make sure that the proxy server credentials are correct if the Administration Server downloads updates via the proxy server.
  To check this, log in to the proxy server using these credentials to check this.
• Check that the scanning of encrypted connections between the Administration Server and the proxy server is disabled if your infrastructure uses Deep Packet Inspection (DPI) or traffic decryption and analysis technologies (SSL inspection application) as part of third-party security solutions.
  If the scanning of encrypted connections is enabled, the update download fails with the error “Failed to establish the HTTPS connection: TLS error (54). ‘/’". To fix this issue, replace HTTPS with HTTP to avoid the issues with the proxy server.

Do the following:

• Make sure that the requirements from the Sources of updates block in step 4 are met.
• Check that the update source is not the KLSHARE shared folder of another Administration Server.
  Configure an update via an additional shared folder. To copy updates in advance, select the Copy downloaded updates to additional folders check box in the update task settings.
• Make sure that the credentials for connecting to the shared network folder of the update source in the task settings are correct.
  If a domain user account is used, enter the domain name. For example, company.local\User, where company.local is a company domain.
• Check that the account has read access to the shared network folder of the update source.
  To check the access, go to the shared network folder under this account and open any file in Notepad.
• Make sure that the account has a sufficient level of NTFS access in the shared network folder settings of the update source.
  If the level of NTFS access is insufficient, the error “Update task has completed. File download error.” will appear in the task log.
• Check that a network disk that is connected as a local disk, such as Z:\KAVUpdate, is not used as the update folder.

Do the following:

• Check the versions of the application management plug-ins using this guide. If the plug-in version is not supported or the plug-in is not being used, remove it.
• Remove installation packages of applications that you do not plan to use.
• Make sure that supported application versions are installed on the managed devices (including devices with the Network Agent) in the Unassigned devices section of the Administration Console.
• Make sure that you are using a supported version of Kaspersky Security Center. We recommend updating the application to the latest supported version.
• Make sure that all Administration Servers in the hierarchy have the same version, or that the Administration Server that updates the network folder with a copy of the anti-virus databases has the same version as the primary server.
• If the Administration Server has secondary Administration Servers, check that the listed components are up-to-date on all of them.

1. Select the Download updates by using the old scheme check box in the task settings.
2. Clear the Administration Server updates repository.
3. Use other recommendations for working with Kaspersky Update Utility.

• Check that the update source priority and parameters in the Download updates to the Administration Server repository task are set correctly.
• Try to remove the Download updates to the Administration Server repository task and create it again with the correct settings. Use these instructions.
• Clear the updates repository of the current server and the primary Administration Server if it is specified as the source of anti-virus database updates.

1. Collect diagnostic data on the Administration Server if you are using one server.
   If a hierarchy of Administration Servers is configured:
   1. Collect diagnostic data on the primary Administration Server if it is the source of the updates.
   2. Collect diagnostic data on the secondary Administration Server where the problem occurs.
      Wait at least 30 minutes after collecting the diagnostic data on the first server.
   3. Save the collected data for each server to a separate folder with the server name.
2. Submit a request to Technical Support through Kaspersky CompanyAccount. Attach the collected diagnostic data to the request and specify which steps from this article you have tried to perform.

1. Enable level 4 tracing for the Network Agent on the Administration Server.
2. If possible, enable screen recording. If it is not possible, take screenshots of your actions and the error.
3. Run the Download updates to the Administration Server repository and wait for it to complete.
4. Disable screen recording if it was enabled.
5. Disable tracing.
6. Export events from the Download updates to the Administration Server repository task result.
7. Export the Download updates to the Administration Server repository task to a .klt file. To do so, right-click the task and select All tasks → Export.
8. Create a report using the Report on Kaspersky software versions template for the Managed Devices group and save it to a file.
9. Collect the GetSystemInfo report with the Include Windows event logs option enabled.
10. Copy the updater.ini configuration file from the working folder of Kaspersky Update Utility if it is used to prepare the Administration Server updates repository.