Before starting the installation of Kaspersky Industrial CyberSecurity for Networks, make sure that the computers meet the hardware and software requirements. Then make sure that the following conditions have been fulfilled:
The computers have network access, and access over SSH is configured and open.
You can use the system on the computer from which installation is performed as a user without root permissions.
For installation of application components, it is recommended to use separate computers on which only software from the operating system is installed. If third-party applications are installed on computers, the performance of components of Kaspersky Industrial CyberSecurity for Networks may be reduced.
To prepare computers for installation of the application:
Prepare the user accounts:
On all computers on which application components will be installed, set the same password for the user account with root privileges (application components will be installed under this user account). By default, the root user account is used to perform the installation. Memorize the user names and password. This information will be needed when installing the application.
After the application is installed, you are advised to change the passwords for these users.
On the computer that will perform Server functions, create local user accounts (or select existing user accounts) that will be allowed to start the Application Console. These user accounts will not require root privileges to execute commands. Local user accounts will be used to sign in to the system and to subsequently start the Application Console (however, after starting the Console, you will also need to provide the application user credentials, which might not match the credentials of the local user account). Remember the names of the created or selected local user accounts. This information will be needed when installing the application.
The local user accounts that need to be allowed to start the Application Console are indicated when configuring the application installation settings. These user accounts are automatically included into the special group named kics4net, which is created in the operating system during installation of the application. After the application is installed, you can use the standard tools of the operating system to manually add the necessary user accounts to the kics4net group.
Find out and save the following information about the computers:
Name and IP address of the computer that will perform Server functions.
IP addresses of the computers that will perform sensor functions.
Name or IP address and SSL port of the computer with Kaspersky Security Center.
To display the computer name, you can enter the hostname command in the command line. To display information about IP addresses and network interfaces, you can enter the sudo ifconfig command in the command line (in a Windows operating system, use the ipconfig command).
On the computer from which the installation will be performed, use the SSH protocol to connect to each computer to which the application components will be installed. A connection needs to be made to verify access over SSH.
To connect:
Enter the following command in the command line:
ssh <user name>@<computer IP address>
After entering this command, perform the necessary actions at the operating system prompts.
To terminate the connection session, use the following command:
exit
On the computer from which the installation will be performed, create a folder for storing the installation files.
Copy the following files from the Kaspersky Industrial CyberSecurity for Networks distribution kit to the folder you created:
Application installation script kics4net-deploy-<application version number>.bundle.sh
Package for installing the Server and sensors: kics4net-<application version number>.x86_64.rpm
Package for installing the Console: kics4net-utm-<application version number>.x86_64.rpm
Package for installing the DBMS: kics4net-postgresql-<DBMS version number>.x86_64.rpm
Package for installing the Intrusion Detection system: kics4net-suricata-<system version number>.x86_64.rpm
Package for installing a web server: kics4net-webserver-<application version number>.x86_64.rpm
Package for installing Network Agent from the Kaspersky Security Center distribution kit: klnagent64-<Network Agent version number>.x86_64.rpm
The package for installing Network Agent is required if you want to monitor the state of the application, receive a license key, and download application updates via Kaspersky Security Center. Network Agent is a Kaspersky Security Center component that enables interaction between the Kaspersky Security Center Administration Server and Kaspersky applications that are installed on a specific node (workstation or server). For detailed information on Network Agent, please refer to the Kaspersky Security Center Help system.
The folder with the listed files will be required during installation, modification of installation settings, and uninstallation of the application.