Following this scenario, you can transfer the administration group structure, included managed devices and other group objects (policies, tasks, global tasks, tags, and device selections), from Kaspersky Security Center Windows under management of Kaspersky Security Center Linux.
Limitations:
Before you begin, learn more about the features and limitations of Kaspersky Security Center Linux:
Stages
The migration scenario proceeds in stages:
You migrate to Kaspersky Security Center Linux through the Migration wizard. The Migration wizard steps depend on whether or not Administration Servers of Kaspersky Security Center Windows and Kaspersky Security Center Linux are arranged into a hierarchy:
Choose this option if Administration Server of Kaspersky Security Center Windows acts as secondary to Administration Server of Kaspersky Security Center Linux. You manage the migration process and switch between Servers within a single instance of Kaspersky Security Center Web Console. If you prefer this option, you can arrange Administration Servers into a hierarchy to simplify the migration procedure. To do this, create the hierarchy before starting the migration.
Choose this option if Administration Servers of Kaspersky Security Center Windows and Kaspersky Security Center Linux are not arranged into a hierarchy. You manage the migration process with two instances of Kaspersky Security Center Web Console—an instance for Kaspersky Security Center Windows and another one for Kaspersky Security Center Linux. In this case, you will use the export file that you created and downloaded during the export from Kaspersky Security Center Windows and import this file to Kaspersky Security Center Linux.
You might want to put the managed devices under the management of the Administration Server of Kaspersky Security Center Linux by restoring the certificate and private key of Administration Server from a backup copy. In this case, back up the certificate and private key of Kaspersky Security Center Windows Administration Server by running the klbackup utility with -cert_only
parameter. Then at stage 6, you have to restore the certificate and private key.
Open Kaspersky Security Center Windows, and then run the Migration wizard.
Continue the Migration wizard to import the exported data to Kaspersky Security Center Linux. If the Servers are arranged into a hierarchy, the import starts automatically after a successful export within the same wizard. If the Servers are not arranged into a hierarchy, you continue the Migration wizard after switching to Kaspersky Security Center Linux.
You might also want to transfer the objects and settings that cannot be transferred through the Migration wizard. For example, you could additionally do the following:
To complete the migration, move the imported managed devices under management of Kaspersky Security Center Linux. You can do it by one of the following methods:
Use the klmover utility and specify the connection settings for the new Administration Server.
Create a Change Administration Server task, specify the imported managed devices, new Administration Server, and other task settings. Then run the task to put the managed devices under the management of the Administration Server of Kaspersky Security Center Linux.
Create a new Network Agent installation package and specify the connection settings for the new Administration Server in the installation package properties. Remove Network Agent on the imported managed devices, and then use the installation package to install Network Agent on the imported managed devices through a remote installation task. You can also create and use a stand-alone installation package to install Network Agent locally. For more information, see Switching managed devices under management of Kaspersky Security Center Linux.
Assign the same IP address to the device with Administration Server of Kaspersky Security Center Linux as on Administration Server of Kaspersky Security Center Windows. Run the klbackup utility with the -cert_only
parameter, to restore the Administration Server certificate and private key from the backup copy which you saved at stage 2. In the command line, execute the following command: /opt/kaspersky/ksc64/sbin/klbackup -path <
path to the backup copy of Administration Server certificate>
-restore -cert_only
.
We recommend that you upgrade the Network Agent for Linux to the same version as Kaspersky Security Center.
On Kaspersky Security Center Linux Administration Server, open the managed devices list (Assets (Devices) → Managed devices), and check the values in the Visible, Network Agent is installed, and Last connected to Administration Server columns.
Other methods of data migration
Besides the Migration wizard, you can also transfer specific tasks and policies: