Step 1. Exporting managed devices, objects, and settings from Kaspersky Security Center Web Console

Migration of managed devices from Kaspersky Security Center Web Console to Kaspersky Security Center Cloud Console requires that you first create an export file containing information about the hierarchy of administration groups that are on your current Administration Server running on-premises. The export file must also contain information about the objects and their settings. The export file will be used for subsequent import to Kaspersky Security Center Cloud Console.

The maximum export file size is 4 GB.

To export objects and their settings from Kaspersky Security Center Web Console:

In the main menu of Kaspersky Security Center Web Console, go to Operations → Migration.
On the welcome page of the Migration wizard, click Next. The Managed devices to export page opens, displaying the entire hierarchy of administration groups of the corresponding Administration Server.
On the Managed devices to export page, click the chevron icon () next to the Managed devices group name to expand the hierarchy of administration groups. Select the administration group that you want to export.
After migration from Kaspersky Security Center running on-premises to Kaspersky Security Center Cloud Console performed for two administration groups, the Remote installation tasks for these groups appear with the same name.
Select the managed applications whose policies and tasks must be transferred to Kaspersky Security Center Cloud Console together with group objects. To select the managed applications whose objects are to be exported, select the check boxes next to their names in the list.
Although Kaspersky Security Center Administration Server is present on the list, selecting the corresponding check box does not result in the export of its policies.

To make sure that your managed applications are supported by Kaspersky Security Center Cloud Console, click the corresponding link. It will redirect you to the Online Help topic containing the list of applications managed by Kaspersky Security Center Cloud Console.

If you select applications that are not supported by Kaspersky Security Center Cloud Console, the policies and tasks of these applications will be exported anyway and then imported, but you will not be able to manage them in Kaspersky Security Center Cloud Console due to unavailability of the dedicated plug-ins.
View the list of group objects exported by default and specify non-group objects to be exported together with the selected administration group, if necessary. Configure the export scope by including or excluding various objects, such as global tasks, custom device selections, reports, custom roles, internal users and security groups, and custom application categories. This page includes the following sections:
- Global tasks
  The list of global tasks of managed applications, as well as global tasks of Network Agent.
  
  If a global task that you selected applies to a specific object selection, this selection will also be exported.
  
  Although the global tasks of Administration Server are present on the list, you cannot export them; selecting those tasks does not affect the export scope. Remote installation tasks also remain outside the export scope, because their respective installation packages cannot be exported.
- Device selections
  The list of custom device selections.
- Reports
  The editable list of report instances to be exported.
  
  If a report that you selected applies to a specific object selection, this selection will also be exported.
  
  Kaspersky Security Center Cloud Console contains the same set of report templates as Kaspersky Security Center Web Console, so you can select for export only the reports that you created manually or reconfigured.
- Group objects
  The list of group objects to be exported by default. The following objects related to the selected administration group will be exported in their entirety by default:
  - Administration group structure, that is, all subgroups of the selected administration group.
  - Devices that have been included in the administration groups to be exported.
  - Tags that have been assigned to the devices to be exported.
    If a tag was created in Kaspersky Security Center Web Console but never assigned to any device, it will not be exported. The auto-tagging rules will not be exported, either.
  - Group policies of the managed applications that have been selected.
    Administration Server policies and Network Agent policies are not exported.
  - Group tasks of the managed applications that have been selected and Network Agent group tasks.
    Administration Server tasks are not exported.
  You can also prevent certain types of non-group objects from being exported:
  - To cancel export for custom roles (that is, those created by the user only), select the Exclude custom roles from export check box.
  - To cancel export for internal users and security groups, select the Exclude internal users and security groups from export check box.
  - To cancel export for custom application categories with content added manually, select the Exclude custom application categories from export check box.
If you transfer devices of various operating systems to Kaspersky Security Center Cloud Console, non-group objects only need to be migrated once.

The Migration wizard checks the total number of managed devices included in the selected administration group. If this number exceeds 10,000, an error message appears. The Next button remains unavailable (dimmed) until the number of managed devices in the selected administration group falls within the limit.
After you defined the migration scope, click Next to start the export process. The Creating the export file page opens, where you can view the export progress for each type of object that you included in the migration scope. Wait until the refresh icons () next to all items in the list of objects are replaced with green check marks (). The export process finishes and the export file is automatically downloaded to the default download location defined in your browser settings. The name of the export file appears in the lower part of the browser window.
When the Export has completed successfully page is displayed, proceed to the next stage performed in Kaspersky Security Center Cloud Console.
If you use Kaspersky Security Center Web Console and Kaspersky Security Center Cloud Console on different devices, you will have to copy the export file to a removable drive or choose other ways of transferring the file.