Password protecting the application

To perform actions with Kaspersky Endpoint Agent that can reduce the level of protection of the user computer and of data processed on the computer, or reduce the Self-Defense level of the application, the application must be password-protected.

You must enter the password to run the following commands in the Kaspersky Endpoint Agent command line interface:

• --sandbox=disable
• --sandbox=show
• --sandbox=enable --tls=no
• --sandbox=enable --pinned-certificate=<full path to the file of the TLS certificate for the connection between Kaspersky Endpoint Agent and Kaspersky Sandbox>
• --quarantine=delete --ouid
• --quarantine=show
• --quarantine=restore
• --quarantine=add
• --product=stop
• --password=reset

To enter the password, use the --pwd=<current user password> option.

You must also enter the password to perform the following actions on the application:

• removing the application and remotely removing the application using the KSC;
• modifying the set of application components (modify);
• repairing the application (repair);
• working with the application installation wizard;
• working with the command line interface.

After enabling password protection and applying the Kaspersky Security Center policy, a common password is used on all workstations of the Kaspersky Endpoint Agent managed group.

Password protection options (disabling password protection or changing the password) are not available on local workstations.

After disabling password protection in the policy, password protection options are maintained for the local workstation and can be edited.

The password is stored in application settings in encrypted form (as a hash).

To enter the password, use the --pwd=<current user password> option.

To configure password protection of the Kaspersky Endpoint Agent application using the command line interface:

1. On the workstation, run the command line interpreter (for example, Command Prompt cmd.exe) under the local administrator user account.
2. Use the cd command to change to the directory where the agent.exe file is located.

   For example, you can type cd "C:\Program Files (x86)\Kaspersky Lab\Endpoint Agent\" and press ENTER.

3. Enter one of the following commands and press ENTER:
   • agent.exe --password=stat if you want to view the current password protection status of the application.
   • agent.exe --password=set --pwd=<current user password> --new=<new user password> if you want to set a new user password.
   • agent.exe --password=reset --pwd=<current user password> if you want to reset the user password.

See also Configuring tracing Configuring dump creation Viewing information about Quarantine options and quarantined objects Actions with quarantined objects Managing Kaspersky Sandbox integration options Running Kaspersky Endpoint Agent database update Running, stopping, and viewing the current state of the application Securing services of the application using the PPL technology

Page top