The migration can be performed between the following DBMSs:
Microsoft SQL Server → MySQL, MariaDB
Microsoft SQL Server → PostgreSQL, Postgres Pro
MySQL → MySQL, MariaDB
MariaDB → MySQL, MariaDB
Migration of Administration Server data stored in the Microsoft SQL Server, MySQL, or MariaDB database to MySQL or MariaDB is supported for migration from any supported version of Kaspersky Security Center Windows to Kaspersky Security Center Linux version 15.2 or later.
Migration of Administration Server data stored in the Microsoft SQL Server database to PostgreSQL or Postgres Pro is supported for migration from Kaspersky Security Center Windows version 14.2 or later to Kaspersky Security Center Linux version 15.3 or later.
To support migration to PostgreSQL or Postgres Pro, you must install the patch 15.1.0.20748-pf2 for Kaspersky Security Center Windows Administration Server. Contact Kaspersky Technical Support to get this patch.
If you use MySQL or MariaDB as a DBMS for Kaspersky Security Center Windows and for Kaspersky Security Center Linux, the lower_case_table_names parameter must match for the current and new DBMSs.
Migration by using the Administration Server data backup proceeds in stages:
Checking that you have the administrator's internal user account under which you can log in to Administration Server
The administrator's account will be used to log in to Kaspersky Security Center Linux Administration Server. If you do not have this account and you are logged in only under a local Windows account or under a domain account, you will not be able to log in to Kaspersky Security Center Linux Administration Server after restoring the backup. Kaspersky Security Center Linux Administration Server does not support logging in by using the local Windows account. Logging in under the domain account is possible, but it may require additional configuration of Administration Server.
If you do not have the administrator's account, you will have to create this account after restoring the backup copy by using the kladduser utility.
Creating an up-to-date backup copy of the Kaspersky Security Center Windows Administration Server data
Depending on the DBMS type used for Kaspersky Security Center Windows and Kaspersky Security Center Linux, do one of the following:
For migration of MySQL or MariaDB to MySQL or MariaDB: create a backup copy by using the klbackup utility or a data backup task on the device that has Administration Server installed.
For migration of Microsoft SQL Server to MySQL or MariaDB: create a backup copy by using the klbackup utility, with the Migrate to MySQL/MariaDB format option enabled.
For migration of Microsoft SQL Server to PostgreSQL or Postgres Pro:
Install the patch 15.1.0.20748-pf2 for Administration Server to support migration to PostgreSQL and Postgres Pro. Contact Kaspersky Technical Support to get this patch.
Create a backup copy by using the klbackup utility.
If you run klbackup from the command line, use the -migrate postgres flag.
The new Administration Server can be assigned the NetBIOS name, FQDN, and static IP address. It depends on which Administration Server address was set in the Network Agent installation package when Network Agents were deployed. Alternatively, you can use the connection address that determines the Administration Server to which Network Agent connects (you can obtain this address on managed devices by using the klnagchk utility).
Installing and configuring the DBMS
At this stage of the scenario, do the following:
Select the DBMS type that provides optimum performance. Take into account the number of networked devices, network topology, and workload on the network. You can choose from one of the supported DBMSs.
Install the DBMS according to the DBMS type selected when creating a backup. For information about how to install the selected DBMS, refer to its documentation.
A new database version must not be lower than the current one.
The administrator's internal user account created during the installation, as well as other objects (groups, policies, tasks, users) created before you restore Administration Server data from the backup, will be lost after restoring. These objects will be replaced by objects that are contained in the backup.
Restoring Administration Server data from the backup copy
At this stage of the scenario, do the following:
Restore Administration Server data on the new device by using the klbackup utility.
If you did not have the administrator's internal user account under which you were logged in to Kaspersky Security Center Windows Administration Server and you used a local Windows account or a domain account, create an administrator's account by using the kladduser utility as follows:
The data initialization process usually takes up to 15 minutes after restoring Administration Server data, but the time depends on the hardware performance and the size of Administration Server data. During this time, Kaspersky Security Center Web Console may fail to connect and display errors.
Check the functionality of the main Administration Server features when the data initialization in the database is complete. Verify that Administration Server synchronizes with managed devices and Administration Server data is recovered.
Poll domain controllers to restore information about the domain structure, user accounts, security groups, and DNS names of the devices that are included in the domains.
If necessary, uninstall the Administration Server and the database server from the previous device.
There must not be multiple Administration Servers on the same network with the same connection address and Administration Server certificate.
The administrator has access to Administration Server data and managed devices which were in Kaspersky Security Center Windows, taking into account the functionality supported in Kaspersky Security Center Linux.