Installation menu commands for Server management

You can use the following installation menu commands to manage installation of the Server:

• Add Server – adds a new node that will be assigned Server functions. This item is available if the Server has not yet been added. If you select this option, you need to specify the main settings for the Server when the following prompts appear:
  • Enter the IP address of the node for installation – defines the IP address that will be used for connecting to the computer over the SSH protocol and installing the Server.
  • Enter the IP address for connections to the Server – defines the IP address that will be used by other components (for example, sensors) to connect to the Server. By default, this is the IP address of the node used for installing the Server.
  • Enter Server name – defines the name of the Server within Kaspersky Industrial CyberSecurity. The Server name must be unique (not match the names of sensors on other nodes) and must contain no more than 100 characters. You can use letters of the Latin alphabet, numerals, a space, and the following special characters: _ and - (for example, Server_1). The Server name must begin and end with any permitted character except a space.
  • Add the capability for application interaction with Kaspersky Security Center – adds the functionality that allows use of the Kaspersky Security Center Administration Server to receive a license key and download updates, and to relay events and application state to Kaspersky Security Center. You do not have to add this functionality to relay events to other recipient systems. When adding the capability for application interaction with Kaspersky Security Center, you must specify the IP address / name of the computer with Kaspersky Security Center and the SSL port for the connection.

    If the capability for application interaction with Kaspersky Security Center has been added, the Network Agent component of Kaspersky Security Center is installed when the application is installed. Kaspersky Security Center Network Agent is not installed if this component is being used by another Kaspersky application (to avoid disrupting the interaction between this application and the Kaspersky Security Center Administration Server). In addition, the functionality for interaction between Kaspersky Industrial CyberSecurity for Networks and Kaspersky Security Center may be limited if the version of the installed Network Agent differs from the version of this component provided in the distribution kit of Kaspersky Industrial CyberSecurity for Networks.

  • Enable time synchronization between Server and sensors – enables automatic time synchronization between the Server and nodes on which sensors are installed.
  • Enter the IP address or name of the computer with the web server – defines the IP address or computer name of the Server for connecting through the web interface.
  • Enter the web server port number – defines the port number for connecting through the web interface. If the default port number (443) is specified, the user only needs to enter the IP address or computer name when connecting through a web browser. In this case, the HTTPS protocol and the port number are automatically determined.
  • Enter an application user name – defines the user name for connecting to the Server and working with the application. You can enter any unique name using uppercase and lowercase letters of the Latin alphabet, numerals, dots, and the following special characters: _ and - (for example, Admin_1). The name must contain from 3 to 20 characters, must begin with a letter, and end with any supported character except a dot. The specified user name will be used only when connecting to the Server through the web interface or in the Application Console. This user does not have to be registered as an operating system account on the Server computer or other computer. You are prompted to enter a new password for the user when installing the Server (unless another application user account with the same name is found).
  • Use self-signed certificates to connect to web server – lets you select the option to use certificates for protecting the connection through the web interface. You can use a self-signed certificate of the Web Server or a certificate that was published by a trusted certificate authority (hereinafter referred to as a "trusted certificate"). If you want to select the option to use a self-signed certificate, you must enter y at this prompt. A self-signed certificate will be created during installation of the Server. If you want to select the option to use a trusted certificate, you must enter n at this prompt and then y at the prompt to Use trusted certificates to connect to web server. To load a trusted certificate, you must specify the path to the trusted certificate file. This file will be copied to the folder containing web server certificates during installation of the Server. If neither option was selected (n has been entered at both prompts), during installation of the Server either a self-signed certificate will be created or the existing certificate in the folder containing web server certificates will be used (if a certificate remained from a previously installed Server).

    If you want to use a trusted certificate in the application, it must be issued for the same IP address or computer name that will be indicated by application users when connected through the web interface. To load a trusted certificate, you can use a PFX file containing the saved trusted certificate and private key. The file must be created without a defined password for accessing the contents.

  • Enter the operating system user name for starting the Console – defines the operating system user name that will be allowed to start the Kaspersky Industrial CyberSecurity for Networks Console. After entering a user name, the Specify the name of one more user prompt appears. If you need to allow another user to start the Console, you need to type y at this prompt and then specify the name of the other user (this way you can specify multiple users consecutively). After you have specified the names of all relevant users, you need to type n at the Specify the name of one more user prompt. Permission to start the Console is provided by adding a user to the kics4net group during installation of the Server.

    The specified user is provided the permission to only start the Console. To work with the Console, the application user credentials must be entered into the prompt that is displayed immediately after the Console is started.

• Change Server settings – modifies the settings of the added Server. You can use this menu item to change the main Server settings that can be edited (for example, Web Server settings) and configure advanced settings. After selecting this item, you will see a submenu in which you can change the following settings:
  • Change Server name – changes the name of the Server within Kaspersky Industrial CyberSecurity. This menu item is analogous to the Enter Server name item in the Add Server menu.
  • Specify an additional user to run the installation – defines an additional user account that will be used to run the installation on the Server node. An additional user account needs to be specified if the user name with root privileges on this node differs from the user name defined in the Change the user running the installation item. The passwords of all user accounts that will be used to run the installation must match.
  • Enable hardware Watchdog – enables use of the hardware Watchdog. The hardware Watchdog is a hardware-implemented system for controlling system hangs. If a node has a hardware Watchdog, you can enable its use in Kaspersky Industrial CyberSecurity for Networks. If the use of a hardware Watchdog is enabled, specify its path in the Specify path to hardware Watchdog item.
  • Disable autostart of kics4net – disables autostart of the kics4net service when the operating system starts.
  • Set occupied space limit in gigabytes – sets a 500 GB limit on the maximum space that can be occupied by application files on the hard drive of the node. This menu item is available if the current limit is defined as a percentage. When you select this item, you can change the default value within the range of 12–100000 GB. However, if the free space on the node during installation of application components is less than the defined limit (including the space occupied by existing application files remaining from the previous installation of application components), the installation ends with an error.
  • Set occupied space limit as a percentage of free disk space – enables a limit equal to 90% of free disk space as the maximum space that can be occupied by application files on the hard drive of the node. This menu item is available if the current limit is set in gigabytes. When you select this item, you can change the default value within the range of 1–100%. During installation of application components, the application will determine the free disk space on the hard drive of this node. The application will then convert the defined value into gigabytes and save the obtained result as the active limit. However, if the free space on this node during installation of application components is less than 12 GB (including the space occupied by existing application files remaining from the previous installation of application components), the installation ends with an error.
  • Change the set occupied space limit – changes the current maximum space that can be occupied by application files on the hard drive of the node. The range of possible values depends on the measurement units of the currently defined limit (as a percentage or in gigabytes). For details about determining the free disk space on a hard drive depending on the measurement units, please refer to the sections titled Set occupied space limit in gigabytes and Set occupied space limit as a percentage of free disk space.
  • Add the capability for application interaction with Kaspersky Security Center – adds the functionality enabling the application to interact with Kaspersky Security Center (if this functionality was not already added). This menu item is analogous to the Add the capability for application interaction with Kaspersky Security Center item in the Add Server menu.
  • Change the IP address or name of the computer with Kaspersky Security Center – modifies the IP address / name of the computer with Kaspersky Security Center (if the capability for application interaction with Kaspersky Security Center has been added).
  • Change SSL port number of computer with Kaspersky Security Center – modifies the SSL port used for connecting to the computer with Kaspersky Security Center (if the capability for application interaction with Kaspersky Security Center has been added).
  • Disable the capability for application interaction with Kaspersky Security Center – removes the capability for application interaction with Kaspersky Security Center.
  • Change the settings for connecting to the Server via API – changes the settings for inbound and outbound connections using the Kaspersky Industrial CyberSecurity for Networks API. When modifying settings, you can specify another computer name on which the gRPC server is running. This name must match the name of the computer that performs Server functions. You can also generate new certificates for connecting to Kaspersky Industrial CyberSecurity for Networks through the API (if the computer name was changed or if you need to update the current certificates for other reasons).
  • Change the IP address or name of the computer with the web server – modifies the IP address or computer name of the Server for connecting through the web interface.
  • Change the web server port number – modifies the port number for connecting through the web interface. If the default port number (443) is specified, the user only needs to enter the IP address or computer name when connecting through a web browser. In this case, the HTTPS protocol and the port number are automatically determined.
  • Change the application user name – changes the previously defined user name for connecting to the Server and working with the application. You can enter any unique name using uppercase and lowercase letters of the Latin alphabet, numerals, dots, and the following special characters: _ and - (for example, Admin_1). The name must contain from 3 to 20 characters, must begin with a letter, and end with any supported character except a dot. The specified user name will be used only when connecting to the Server through the web interface or in the Application Console. This user does not have to be registered as an operating system account on the Server computer or other computer. When changing the name of an existing application user, the old user account is not deleted, and a new user account is created. You are prompted to enter a new password for the user when reinstalling the application (unless another application user account with the same name is found).
  • Change web server certificate settings – modifies the settings for using certificates to protect the connection through the web interface. Certificate usage settings are changed similarly to the Use self-signed certificates to connect to web server option in the Add Server menu.
  • Add an operating system user for starting the Console – adds an operating system user that will be allowed to start the Kaspersky Industrial CyberSecurity for Networks Console. This menu item is analogous to the Enter the operating system user name for starting the Console item in the Add Server menu.
  • Change the operating system user name for starting the Console – changes the added operating system user name that is allowed to start the Kaspersky Industrial CyberSecurity for Networks Console (for example, if the name of the operating system user account changed).
  • Remove the operating system user for starting the Console – revokes the operating system user's permission to start the Console. Permission is revoked by removing the user from the kics4net group during reinstallation of the application.
  • Create database again – deletes the existing database and creates a new one during reinstallation of the application.

    If you select this menu item, information in the existing database will be lost after Server installation.

• Remove Server – removes the Server node.

Page top