Before installing Kaspersky Embedded Systems Security, do the following:
Make sure no other anti-virus applications are installed on the protected device. You must remove Kaspersky Anti-Virus 8.0 for Windows Servers Enterprise Edition. You do not need to remove Kaspersky Security 10 for Windows Server to install Kaspersky Embedded Systems Security.
Make sure that the account you use to run the Setup Wizard belongs to the administrators group on the protected device.
After completing the actions described above, proceed with the installation procedure. Following the Setup Wizard instructions, specify the installation settings for Kaspersky Embedded Systems Security. The Kaspersky Embedded Systems Security installation process can be stopped at any step of the Setup Wizard. To do so, click the Cancel button in the Setup Wizard window.
You can read more about the installation (uninstallation) settings.
To install Kaspersky Embedded Systems Security using the Setup Wizard:
If the Protect computer with Anti-Virus Bases configuration is selected, all Kaspersky Embedded Systems Security components are included by default except the Firewall and Performance Counters components.
When you install the Protect computer with Anti-Virus Bases configuration of application over an application version that does not use signature analysis and anti-virus databases to protect your computer, the set of application components will be automatically extended by adding the following components:
Real-Time File Protection
On-Demand Scan.
Network Threat Protection.
The components enabling updates are not included in the Protect computer with Default Deny technology configuration.
If the Protect computer with Default Deny technology configuration is selected, the following components are included by default:
Core
Exploit Prevention
Applications Launch Control
System Tray Icon
When you install the Protect computer with Default Deny technology configuration of application over an application version that uses signature analysis and anti-virus databases to protect your computer, the set of application components will be automatically reduced by removing the following components:
Real-Time File Protection
On-Demand Scan.
the components enabling updates
This configuration is recommended for protecting devices with limited resources. In this case, you can activate the application for a long term, and the Applications Launch Control component provides computer protection.
In the welcome screen of the Kaspersky Embedded Systems Security Setup Wizard, click the Next > button.
The End User License Agreement window opens.
Review the terms of the License Agreement and Privacy Policy.
If you agree to the terms and conditions of End User License Agreement and Privacy Policy, select the I confirm that I have fully read, understand, and accept the terms and conditions of these End User License Agreements and I am aware and agree that my data will be handled and transmitted (including to third countries) as described in the Privacy Policy. I confirm that I have fully read and understand the Privacy Policy check boxes.
If you do not accept the End User License Agreement and/or Privacy Policy the installation will be aborted.
Click Next >.
The Custom installation window opens.
Select the components to be installed.
The SNMP Protocol Support component of Kaspersky Embedded Systems Security will only appear in the list of components suggested for installation if the Microsoft Windows SNMP service is installed on the protected device.
To cancel all changes, click the Reset button in the Custom installation window. Click Next >.
In the Select destination folder window, do the following:
If required, specify a folder to which Kaspersky Embedded Systems Security files will be copied.
If required, review the information about available space on local drives by clicking the Disk button.
Click Next >.
In the Configure window, you can exclude objects and folders from the protection scope and configure Real-Time File Protection.
In the Import settings from configuration file window, specify a path to the configuration file, if you want to import Kaspersky Embedded Systems Security settings from an existing configuration file created in a previous version of the application.
In the Activation of the application window, do one of the following:
If you want to activate the application, specify a Kaspersky Embedded Systems Security key file for application activation.
If you want to activate the application later, click the Next > button.
If a key file was previously saved in the \exec folder of the distribution kit, the name of this file will be displayed in the Key field.
To add a key using a key file stored in another folder, specify the key file.
The installation wizard does not allow activating the application with an activation code. If you want to activate the application with an activation code, you can specify one after installing the application.
Once the key file is added, license information will be shown in the window. Kaspersky Embedded Systems Security displays the license's calculated expiration date. The license term runs from the time when you add a key and expires no later than the expiration date of the key file.
Click Next > to add the key file to the application.
In the Remote access settings section, if necessary, change the TCP port numbers that the Application Console uses for the remote connection to the computer with the application installed.
The default port number for connection with Windows credentials is 13032, and the default port number for connection with credentials of manually created users is 13031. Range of possible port numbers: 1–65535.
To prevent connection with credentials of manually created user accounts, clear the Using credentials from manually created users check box.
In the Ready to install window, you can disable the Protect the application installation process option if necessary. Installation protection includes protection against replacement of the distribution package with malicious applications, blocking access to the installation folder of Kaspersky Embedded Systems Security, and blocking access to the system registry section containing application keys. However, if the application cannot be installed (for example, when performing remote installation with the help of Windows Remote Desktop), you are advised to disable protection of the installation process.
If necessary, add the kavshell.exe file path to the %PATH% system variable for convenient use of the command line interface.
Click Install.
The Installation complete window opens when installation is complete.
Click the Finish button.
The Setup Wizard closes. Once the installation is complete, Kaspersky Embedded Systems Security is ready to use if you have added an activation key.