Installing the application from the command line

Kaspersky Endpoint Security can be installed from the command line in one of the following modes:

To install the application or upgrade the application version:

  1. Run the command line interpreter (cmd.exe) as an administrator.
  2. Go to the folder where the Kaspersky Endpoint Security distribution package is located.
  3. Run the following command:

    setup_kes.exe /pEULA=1 /pPRIVACYPOLICY=1 [/pKSN=1|0] [/pALLOWREBOOT=1|0] [/pADDLOCAL=<component>] [/pSKIPPRODUCTCHECK=1|0] [/pSKIPPRODUCTUNINSTALL=1|0] [/pKLLOGIN=<user name> /pKLPASSWD=<password> /pKLPASSWDAREA=<password scope>] [/pENABLETRACES=1|0 /pTRACESLEVEL=<tracing level>] /s

    or

    msiexec /i <distribution kit name> EULA=1 PRIVACYPOLICY=1 [KSN=1|0] [ALLOWREBOOT=1|0] [ADDLOCAL=<component>] [SKIPPRODUCTCHECK=1|0] [SKIPPRODUCTUNINSTALL=1|0] [KLLOGIN=<user name> KLPASSWD=<password> KLPASSWDAREA=<password scope>] [ENABLETRACES=1|0 TRACESLEVEL=<tracing level>] /qn

    EULA

    Acceptance or rejection of the terms of the End User License Agreement. Available values:

    • 1 – acceptance of the terms of the End User License Agreement.
    • 0 – rejection of the terms of the End User License Agreement.

      The text of the License Agreement is included in the distribution kit of Kaspersky Endpoint Security. Accepting the terms of the End User License Agreement is necessary for installing the application or upgrading the application version.

    PRIVACYPOLICY

    Acceptance or rejection of the Privacy Policy. Available values:

    • 1 – acceptance of the Privacy Policy.
    • 0 – rejection of the Privacy Policy.

      The text of the Privacy Policy is included in the Kaspersky Endpoint Security distribution kit. To install the application or upgrade the application version, you must accept the Privacy Policy.

    KSN

    Agreement or refusal to participate in Kaspersky Security Network (KSN). If no value is set for this parameter, Kaspersky Endpoint Security will prompt to confirm your consent or refusal to participate in KSN when Kaspersky Endpoint Security is first started. Available values:

    • 1 – agreement to participate in KSN.
    • 0 – refusal to participate in KSN (default value).

      The Kaspersky Endpoint Security distribution package is optimized for use with Kaspersky Security Network. If you opted not to participate in Kaspersky Security Network, you should update Kaspersky Endpoint Security immediately after the installation is complete.

    ALLOWREBOOT=1

    Automatic restart of the computer, if required after installation or upgrade of the application. If no value is set for this parameter, automatic computer restart is blocked.

    Restart is not required when installing Kaspersky Endpoint Security. Restart is required only if you have to remove incompatible applications prior to installation. Restart may also be required when updating the application version.

    ADDLOCAL

    Selection of additional application components to be installed. By default, all application components are selected for installation except the following components: BadUSB Attack Prevention, File Level Encryption, Full Disk Encryption, BitLocker Management, and Endpoint Sensor. Available values:

    • MSBitLockerFeature. Installation of the BitLocker Management component.
    • AntiAPTFeature. The Endpoint Sensor component is installed.

    SKIPPRODUCTCHECK=1

    Disabling checking for incompatible software. The list of incompatible software is available in the incompatible.txt file that is included in the distribution kit. If no value is set for this parameter and incompatible software is detected, the installation of Kaspersky Endpoint Security will be terminated.

    SKIPPRODUCTUNINSTALL=1

    Disable automatic removal of detected incompatible software. If no value is set for this parameter, Kaspersky Endpoint Security attempts to remove incompatible software.

    KLLOGIN

    Set the user name for accessing the features and settings of Kaspersky Endpoint Security (the Password protection component). The user name is set together with the KLPASSWD and KLPASSWDAREA parameters. The user name KLAdmin is used by default.

    KLPASSWD

    Specify a password for accessing Kaspersky Endpoint Security features and settings (the password is specified together with the KLLOGIN and KLPASSWDAREA parameters).

    If you specified a password but did not specify a user name with the KLLOGIN parameter, the KLAdmin user name is used by default.

    KLPASSWDAREA

    Specify the scope of the password for accessing Kaspersky Endpoint Security. When a user attempts to perform an action that is included in this scope, Kaspersky Endpoint Security prompts for the user’s account credentials (KLLOGIN and KLPASSWD parameters). Use the ";" character to specify multiple values. Available values:

    • SET – modifying application settings.
    • EXIT – exiting the application.
    • DISPROTECT – disabling protection components and stopping scan tasks.
    • DISPOLICY – disabling Kaspersky Security Center policy.
    • UNINST – removing the application from the computer.
    • DISCTRL – disabling control components.
    • REMOVELIC – removing the key.
    • REPORTS – viewing reports.

    ENABLETRACES

    Enabling or disabling application traces. After Kaspersky Endpoint Security starts, it saves trace files in the folder %ProgramData%/Kaspersky Lab. Available values:

    • 1 – traces are enabled.
    • 0 – traces are disabled (default value).

    TRACESLEVEL

    Level of detail of traces. Available values:

    • 100 (critical). Only messages about fatal errors.
    • 200 (high). Messages about all errors, including fatal errors.
    • 300 (diagnostic). Messages about all errors, and a selection of messages containing warnings.
    • 400 (important). All warnings and messages about ordinary and critical errors, and a selection of messages that contain additional information.
    • 500 (normal). All warnings and messages about normal and fatal errors, and also messages containing detailed information about normal operation (default value).
    • 600 (low). All possible messages.

    Example:

    setup.exe /pEULA=1 /pPRIVACYPOLICY=1 /pKSN=1 /pALLOWREBOOT=1 /s

    msiexec /i kes_win.msi EULA=1 PRIVACYPOLICY=1 KSN=1 KLLOGIN=Admin KLPASSWD=Password KLPASSWDAREA=EXIT;DISPOLICY;UNINST /qn

    setup.exe /pEULA=1 /pPRIVACYPOLICY=1 /pKSN=1 /pENABLETRACES=1 /pTRACESLEVEL=600 /s

After the application is installed, Kaspersky Endpoint Security activates the trial license unless you indicated an activation code in the setup.ini file. A trial license usually has a short term. When the trial license expires, all Kaspersky Endpoint Security features become disabled. To continue using the application, you must activate a commercial license.

When installing the application or upgrading the application version in silent mode, use of the following files is supported:

To apply settings from the setup.ini, install.cfg, and setup.reg files, place these files into the folder containing the Kaspersky Endpoint Security distribution package.

Page top