Release Notes for Kaspersky Endpoint Security 12.10 for Windows

Kaspersky Endpoint Security for Windows (hereinafter also referred to as “the application” or as “Kaspersky Endpoint Security”) gives corporate users all-in-one protection against known digital threats.

WHAT'S NEW IN KASPERSKY ENDPOINT SECURITY

Kaspersky Endpoint Security 12.10 for Windows offers the following features and improvements:

1. For the BadUSB Attack Prevention component, the option has been added to authorize barcode scanners by reading a barcode from the screen. Now you do not need to enter a code using the on-screen keyboard to authorize barcode scanners.
2. The following features and improvements are available to users of Endpoint Detection and Response (EDR) solutions by Kaspersky. New features are available in Kaspersky Security Center 15.4 or higher:
   • Now you can manage the Network Isolation of the computer in the alert details. Additionally, in the alert details you can specify the computer Network Isolation time period and add exclusions.
   • Filling in alert details with new data. Now the alert details contain more information about the threat, including how the application behaves when responding to EDR threats.
   • The IOC files processing has been improved. Now you can view and edit the contents of IOC files in the interface of Kaspersky Security Center Web Console. After loading an IOC file, the application displays a report on the IOC terms application.
   • Improved response to detected IOCs. Now you can quarantine files detected by the IOC Scan task directly in IOC detection results in task properties. You can also isolate computers from the network in the task properties.
   • Now you can create IOC files directly in the properties of the IOC Scan task based on lists of file hashes, IP addresses, or DNS names generated in a TXT file.
   • Expanded scan scope for the IOC Scan task. Now you can define a scope for the IOC Scan of the registry (Windows Registry – RegistryItem). In earlier versions of the application, you could only use a predefined IOC Scan scope in the registry.
3. New Password protection permission added, Export settings. By default, only the KLAdmin user can create a configuration file with Kaspersky Endpoint Security settings in the application interface. To grant access to other users, you need to give them the corresponding permission.
4. When developing this version of Kaspersky Endpoint Security for Windows, we incorporated the changes included in the following private patches: PF12120, PF12121, PF12122, PF13115, PF13118, PF13119, PF13120, PF13123, PF14061, PF14062, PF14064, PF14065, PF15054, PF15056, PF15058, PF15062, PF16052, PF16053, PF16055, PF16056, PF16057, PF17027, PF17029, PF17039, PF17041, PF17043, PF17048, PF17050, PF18010, PF18011, PF18014, PF18015, PF18020, PF18021, PF18022, PF18023, PF18024, PF18028, PF18031, PF18032, PF18043, PF19003, PF19016, PF19018, PF19017, PF19032, PF19034, PF19036, PF19037, PF19041, PF19043, PF19049, PF20011, PF20016, PF20017, PF20020, PF20021, PF20033, PF20036, PF20038, PF20039, PF20049, PF21007.

MINIMUM HARDWARE AND SOFTWARE REQUIREMENTS

To ensure proper operation of Kaspersky Endpoint Security, your computer must meet the following requirements:

Minimum general requirements:

• 2 GB of free disk space on the hard drive;
• CPU:
  • Workstation: 1 GHz;
  • Server: 1.4 GHz;
  • SSE2 Instructions support.

  Arm architecture is not supported.

• RAM:
  • Workstation (x86): 1 GB;
  • Workstation (x64): 2 GB;
  • Server: 2 GB;
  • Server to install the application with a built-in agent for integration with Kaspersky Anti Targeted Attack Platform: 8 GB.

Workstations

Supported operating systems for workstations:

• Windows 7 Home / Professional / Ultimate / Enterprise Service Pack 1 or later;
• Windows 8 Professional / Enterprise;
• Windows 8.1 Professional / Enterprise;
• Windows 10 Home / Pro / Pro for Workstations / Education / Enterprise / Enterprise multi-session;
• Windows 11 Home / Pro / Pro for Workstations / Education / Enterprise.

Windows operating systems starting with version 11 24H2 support the UDP Receive Segment Coalescing Offload (URO) technology. The technology is enabled by default if a compatible network card and drivers are installed on the computer. Disabling URO on a user's computer can significantly reduce the performance of the application.

Kaspersky Endpoint Security cannot be installed on Microsoft Windows 7 without installed operating system updates: KB4490628 (March 12, 2019) and KB4474419 (September 23, 2019). For detailed information, refer to the Technical Support Knowledge Base.

For details about support for the Microsoft Windows 10 operating system, please refer to the Technical Support Knowledge Base.

For details about support for the Microsoft Windows 11 operating system, please refer to the Technical Support Knowledge Base.

Servers

Kaspersky Endpoint Security supports core components of the application on computers running the Windows operating system for servers. You can use Kaspersky Endpoint Security for Windows instead of Kaspersky Security for Windows Server on servers and clusters of your organization (Cluster Mode). The application also supports Server Core mode (see known issues).

Supported operating systems for servers:

• Windows Small Business Server 2011 Essentials / Standard (64-bit);

  Microsoft Small Business Server 2011 Standard (64-bit) is supported only if Service Pack 1 for Microsoft Windows Server 2008 R2 is installed.

• Windows MultiPoint Server 2011 (64-bit);
• Windows Server 2008 R2 Foundation / Standard / Enterprise / Datacenter Service Pack 1 or later;
• Windows Web Server 2008 R2 Service Pack 1 or later;
• Windows Server 2012 Foundation / Essentials / Standard / Datacenter (including Server Core mode);
• Windows Server 2012 R2 Foundation / Essentials / Standard / Datacenter (including Server Core mode);
• Windows Server 2016 Essentials / Standard / Datacenter (including Server Core mode);
• Windows Server 2019 Essentials / Standard / Datacenter (including Server Core mode);
• Windows Server 2022 Standard / Datacenter / Datacenter: Azure Edition (including Server Core mode);
• Windows Server 2025 Standard / Datacenter.

Kaspersky Endpoint Security cannot be installed on Microsoft Windows Server 2008 R2 without installed operating system updates: KB4490628 (March 12, 2019) and KB4474419 (September 23, 2019).

For details about support for the Microsoft Windows Server 2016 and Microsoft Windows Server 2019 operating systems, please refer to the Technical Support Knowledge Base.

For details about support for the Microsoft Windows Server 2022 operating system, please refer to the Technical Support Knowledge Base.

Unsupported operating systems for servers:

• Windows Server 2003 Standard / Enterprise / Datacenter SP2 or later;
• Windows Server 2003 R2 Foundation / Standard / Enterprise / Datacenter SP2 or later;
• Windows Server 2008 Standard / Enterprise / Datacenter SP2 or later;
• Windows Server 2008 Core Standard / Enterprise / Datacenter SP2 or later;
• Microsoft Small Business Server 2008 Standard / Premium SP2 or later.

Virtual platforms

Requirements for the virtual machine for application operation in standard mode:

• VMware Workstation Pro 17.6.3;
• VMware ESXi 8.0 3c;
• Microsoft Hyper-V Server 2022;
• Citrix Virtual Apps and Desktops 7 2411;
• Citrix Provisioning 2411;
• XenServer 8.4.

See the Kaspersky Security for Virtualization Light Agent Help for virtual machine requirements to run the application in the Light Agent mode.

Terminal servers

Supported terminal server types:

• Microsoft Remote Desktop Services based on Windows Server 2008 R2 SP1;
• Microsoft Remote Desktop Services based on Windows Server 2012;
• Microsoft Remote Desktop Services based on Windows Server 2012 R2;
• Microsoft Remote Desktop Services based on Windows Server 2016;
• Microsoft Remote Desktop Services based on Windows Server 2019;
• Microsoft Remote Desktop Services based on Windows Server 2022;
• Microsoft Remote Desktop Services based on Windows Server 2025.

The limitations on support for server and virtual platforms are presented in the user documentation.

APPLICATION COMPATIBILITY WITH THE KASPERSKY SECURITY CENTER REMOTE ADMINISTRATION SYSTEM

Kaspersky Security Center support

Kaspersky Endpoint Security supports operation with the following versions of Kaspersky Security Center:

• Kaspersky Security Center 14
• Kaspersky Security Center 14.1
• Kaspersky Security Center 14.2
• Kaspersky Security Center Linux 14.2
• Kaspersky Security Center Linux 15
• Kaspersky Security Center Windows 15.1
• Kaspersky Security Center Linux 15.1
• Kaspersky Security Center Linux 15.2
• Kaspersky Security Center Linux 15.3
• Kaspersky Security Center Linux 15.4

The administration web plug-in for Kaspersky Endpoint Security for Windows version 12.10 is compatible with Kaspersky Security Center Web Console version 14.2 or later.

To manage the application remotely via Kaspersky Security Center:

1. Install Network Agent on the computer.

   For more details about installing the Network Agent, please refer to the Kaspersky Security Center Help.

2. Install the Management Plug-in for Kaspersky Endpoint Security for Windows in the Kaspersky Security Center Administration Console.

   The installation package for the Kaspersky Endpoint Security Management Plug-in is included in the distribution package.

   The web plug-in installation package is available for download on the website and in the plug-in management window of Kaspersky Security Center Web Console. To install the web plug-in version 12.10, you should first remove the previous version of the web plug-in.

INSTALLATION

To install the application locally, run the setup_kes.exe file from the full distribution package and follow the Setup Wizard instructions. You can read more about how to install the application in the user documentation.

During installation, Kaspersky Endpoint Security for Windows detects applications on the computer that, when used together, could potentially reduce computer performance or lead to other compatibility issues (even resulting in complete inoperability). The full list of incompatible software is available in the user documentation.

You can upgrade the following applications to Kaspersky Endpoint Security for Windows version 12.10 when installing from the full distribution package:

• Kaspersky Endpoint Security 11.10.0 for Windows (build 11.10.0.399).
• Kaspersky Endpoint Security 11.11.0 for Windows (build 11.11.0.452).
• Kaspersky Endpoint Security 12.0 for Windows (build 12.0.0.465).
• Kaspersky Endpoint Security 12.1 for Windows (build 12.1.0.506).
• Kaspersky Endpoint Security 12.2 for Windows (build 12.2.0.462).
• Kaspersky Endpoint Security 12.3 for Windows (build 12.3.0.493).
• Kaspersky Endpoint Security 12.4 for Windows (build 12.4.0.467).
• Kaspersky Endpoint Security 12.5 for Windows (build 12.5.0.539).
• Kaspersky Endpoint Security 12.6 for Windows (build 12.6.0.438).
• Kaspersky Endpoint Security 12.7 for Windows (build 12.7.0.533).
• Kaspersky Endpoint Security 12.8 for Windows (build 12.8.0.505).
• Kaspersky Endpoint Security 12.9 for Windows (build 12.9.0.384).

When you update Kaspersky Endpoint Security for Windows, consider the following:

• If the Full Disk Encryption (FDE) or File Level Encryption (FLE) components are installed on the computer, you must use the distribution package with the same key length to upgrade the application to version 12.10:
  • keswin_12.10.<XXXX>_<localization>_aes256 if you are upgrading an application that was installed from the AES256 distribution package;
  • keswin_12.10.<XXXX>_<localization>_aes56 if you are upgrading an application that was installed from the AES56 distribution package.

  Upgrading the application using a distribution package with a different key length is not supported.

• If data encryption components (FDE or FLE) are not installed on the computer, you can use a distribution package with any key length to upgrade the application to version 12.10.

UPDATING VIA THE KASPERSKY UPDATE SERVICE

Kaspersky Endpoint Security 12.10 for Windows can be installed via the Kaspersky update service.

Through the Kaspersky update service, you can update the following applications:

• Kaspersky Endpoint Security 11.10.0 for Windows (build 11.10.0.399).
• Kaspersky Endpoint Security 11.11.0 for Windows (build 11.11.0.452).
• Kaspersky Endpoint Security 12.0 for Windows (build 12.0.0.465).
• Kaspersky Endpoint Security 12.1 for Windows (build 12.1.0.506).
• Kaspersky Endpoint Security 12.2 for Windows (build 12.2.0.462).
• Kaspersky Endpoint Security 12.3 for Windows (build 12.3.0.493).
• Kaspersky Endpoint Security 12.4 for Windows (build 12.4.0.467).
• Kaspersky Endpoint Security 12.5 for Windows (build 12.5.0.539).
• Kaspersky Endpoint Security 12.6 for Windows (build 12.6.0.438).
• Kaspersky Endpoint Security 12.7 for Windows (build 12.7.0.533).
• Kaspersky Endpoint Security 12.8 for Windows (build 12.8.0.505).
• Kaspersky Endpoint Security 12.9 for Windows (build 12.9.0.384).

Upgrading Kaspersky Endpoint Security for Windows from beta versions to version 12.10 is not supported.

The following special considerations should be taken into account when updating through the Kaspersky update service:

• After installing the update, you cannot roll back to the previous version of the application.
• This update is available only for application with valid license.
• Management of Kaspersky Disk Encryption technology (FDE) is unavailable until installation of the application update is complete.
• To complete the update installation, you must restart your computer.
• To complete the update on a computer with hard drives that were encrypted using Kaspersky Disk Encryption (FDE), you will need to restart the computer twice.
• During installation, Kaspersky Endpoint Security for Windows detects applications on the computer that, when used together, could potentially reduce computer performance or lead to other compatibility issues. There is no option to skip scanning for such applications. If you want to turn off the scan for applications that may cause compatibility issues, select another method of updating Kaspersky Endpoint Security, for example, using the Install application remotely task. A complete list of third-party applications detected by Kaspersky Endpoint Security is available in the user documentation.
• Installing and updating Kaspersky Endpoint Agent (also Endpoint Agent) through the Kaspersky update service is not supported.
• If you are using Kaspersky Update Utility to update application modules and databases, enable support for Kaspersky Endpoint Security 12.10 in the utility settings.

COMPATIBILITY WITH KASPERSKY ENDPOINT AGENT

Kaspersky is switching all Detection and Response to working with the Kaspersky Endpoint Security built-in agent instead of Kaspersky Endpoint Agent. Starting with version 12.1, the application supports all Detection and Response solutions. In addition, starting with version 12.1, the application is no longer compatible with Kaspersky Endpoint Agent, and installing both applications side by side on the same computer is no longer possible.

MAIN KNOWN ISSUES

The list of limitations and known issues is available in the user documentation.

© 2025 AO Kaspersky Lab

Page top