Installation and initial configuration of Kaspersky Endpoint Security

You need to prepare for installation before installing Kaspersky Endpoint Security.

The scenarios below describe how to install and perform initial configuration of Kaspersky Endpoint Security, how to install and configure Kaspersky Security Center Network Agent and how to install Kaspersky Endpoint Security administration plug-ins. The installation scenario depends on the mode in which you plan to use Kaspersky Endpoint Security.

Standard mode

If you plan to use Kaspersky Endpoint Security in Standard mode, the installation procedure involves the following steps:

1. Installation and initial configuration of the Network Agent

   If you plan to manage Kaspersky Endpoint Security using Kaspersky Security Center, install and configure Kaspersky Security Center Network Agent on the protected device.

2. Installing the Kaspersky Endpoint Security administration plug-in

   If you plan to manage Kaspersky Endpoint Security using Kaspersky Security Center, install the Kaspersky Endpoint Security administration plug-in. Depending on the console used to manage Kaspersky Security Center, the following administration plug-ins are used:

   • The Kaspersky Endpoint Security management web plug-in lets you manage the application using Kaspersky Security Center Cloud Console and Kaspersky Security Center Web Console. The web plug-in is installed on the device that has the Kaspersky Security Center Web Console installed.
   • The Kaspersky Endpoint Security MMC administration plug-in lets you manage the application using Kaspersky Security Center Administration Console. The MMC plug-in is installed on the device where Kaspersky Security Center Administration Console is installed.
3. Installing application packages and graphical user interface

   Kaspersky Endpoint Security is distributed in the DEB and RPM packages. There are separate packages for the application and for the graphical user interface. Install Kaspersky Endpoint Security and, if necessary, the graphical user interface from packages in the appropriate format.

   You can perform installation in one of the following ways:

   • Using Kaspersky Security Center.
   • Using the command line.
4. Initial configuration of Kaspersky Endpoint Security

   The initial configuration must be performed to enable the protection of the client device.

   If you installed Kaspersky Endpoint Security using Kaspersky Security Center, after the installation is complete, go through the Getting started procedure.

   If you installed Kaspersky Endpoint Security using the command line, run the initial configuration script or perform the initial configuration in automatic mode after installation is completed.

Light Agent mode

Using Kaspersky Endpoint Security in Light Agent mode to protect virtual environments is not supported on operating systems based on the Arm architecture.

If you plan to use Kaspersky Endpoint Security in Light Agent mode to protect virtual environments, the installation procedure involves the following steps:

1. Installation and initial configuration of the Network Agent

   Install and configure Kaspersky Security Center Agent on virtual machines and virtual machine templates.

   If you are installing Network Agent on a template that will be used to create temporary virtual machines, it is recommended to configure settings that allow you to optimize performance on temporary virtual machines. For more details about installing on a virtual machine template, refer to the Help for Kaspersky Security for Virtualization Light Agent.

2. Installing the Kaspersky Endpoint Security administration plug-in

   Install a Kaspersky Endpoint Security administration plug-in. Depending on the console used to manage Kaspersky Security Center, the following administration plug-ins are used:

   • The Kaspersky Endpoint Security management web plug-in lets you manage the application using Kaspersky Security Center Cloud Console and Kaspersky Security Center Web Console. The web plug-in is installed on the device that has Kaspersky Security Center Web Console installed.
   • The Kaspersky Endpoint Security MMC administration plug-in lets you manage the application using Kaspersky Security Center Administration Console. The MMC plug-in is installed on the device where Kaspersky Security Center Administration Console is installed.
3. Installation of application packages and initial configuration of Kaspersky Endpoint Security

   Kaspersky Endpoint Security is distributed in the DEB and RPM packages. Install Kaspersky Endpoint Security from a package of the required format. There are separate packages for the application and for the graphical user interface.

   The graphical user interface is not supported if Kaspersky Endpoint Security is used in Light Agent mode to protect virtual environments.

   You can install the application in one of the following ways:

   • Using Kaspersky Security Center.

     Before starting the installation, you must perform the initial configuration of the application in one of the following ways:

     • In the properties of the installation package on the Settings tab (this method is available only in Kaspersky Security Center Web Console).
     • Using the configuration file, which is included in the installation package.

     You must select the Light Agent mode (KSVLA_MODE=yes in the configuration file). If you are installing Kaspersky Endpoint Security on a template from which temporary virtual machines will be created, we recommend to also enable VDI protection mode to optimize the performance of the application on temporary virtual machines (VDI_MODE=yes in the configuration file).

   • Using the command line. If installation is performed using the command line, the application usage mode is selected during initial configuration.
4. Initial configuration of Kaspersky Endpoint Security

   The initial configuration must be performed to enable the protection of the client device.

   If you installed Kaspersky Endpoint Security using Kaspersky Security Center, after the installation is complete, go through the Getting started procedure.

   If you installed Kaspersky Endpoint Security using the command line, run the initial configuration script or perform the initial configuration in automatic mode after installation is completed. During initial configuration, select Light Agent mode in one of the following ways:

   • Enter yes in the Specifying the application usage step of the initial configuration script.
   • Specify the KSVLA_MODE=yes setting in the initial setup configuration file.

   If you install Kaspersky Endpoint Security on a template that will be used to create temporary virtual machines, it is recommended to also configure the setting for optimizing the operation on temporary virtual machines. For more details about installing on a virtual machine template, refer to the Help for Kaspersky Security for Virtualization Light Agent.

In this Help section The installation and initial configuration of Kaspersky Security Center Network Agent Installing Kaspersky Endpoint Security administration plug-ins Installing and initially configuring the application using Kaspersky Security Center Installing and initially configuring the application using the command line Configuring permissive rules in the SELinux system Running the application on Astra Linux OS in closed software environment mode

Page top