Installing Kaspersky Security Center Web Console on Astra Linux in the closed software environment mode

Expand all | Collapse all

This section describes how to install Kaspersky Security Center Web Console Server (also referred to as Kaspersky Security Center Web Console) on the Astra Linux Special Edition operating system. Before installation, you must install a DBMS and the Kaspersky Security Center Linux Administration Server.

To install Kaspersky Security Center Web Console:

  1. Make sure that the device on which you want to install Kaspersky Security Center Web Console is running one of the supported Linux distributions.
  2. Read the End User License Agreement (EULA). If the Kaspersky Security Center Linux distribution kit does not include a TXT file with the text of EULA, you can download the file from the Kaspersky website. If you do not accept the terms of the License Agreement, do not install the application.
  3. Create a response file that contains parameters for connecting Kaspersky Security Center Web Console to the Administration Server. Name this file ksc-web-console-setup.json and place it in the following directory: /etc/ksc-web-console-setup.json.

    Example of a response file containing the minimal set of parameters and the default address and port:

    {

    "address": "127.0.0.1",

    "port": 8080,

    "trusted": "127.0.0.1|13299|/var/opt/kaspersky/klnagent_srv/1093/cert/klserver.cer|KSC Server",

    "acceptEula": true

    }

  4. Open the /etc/digsig/digsig_initramfs.conf file, and then specify the following setting:

    DIGSIG_ELF_MODE=1

  5. In the command line, run the following command to install the compatibility package:

    apt install astra-digsig-oldkeys

  6. Create a directory for the application key:

    mkdir -p /etc/digsig/keys/legacy/kaspersky/

  7. Place the application key /opt/kaspersky/ksc64/share/kaspersky_astra_pub_key.gpg in the directory created in the previous step:

    cp kaspersky_astra_pub_key.gpg /etc/digsig/keys/legacy/kaspersky/

    If the Kaspersky Security Center Linux distribution kit does not include the kaspersky_astra_pub_key.gpg application key, you can download it by clicking the link: https://media.kaspersky.com/utilities/CorporateUtilities/kaspersky_astra_pub_key.gpg.

  8. Update the RAM disks:

    update-initramfs -u -k all

    Reboot the system.

  9. Under an account with root privileges, use the command line to run the setup file. You receive the setup file by downloading it from the Kaspersky website.
    • To install or upgrade Kaspersky Security Center Web Console, run the following command:

      $ sudo dpkg -i ksc-web-console-[build_number].x86_64.deb

    • To upgrade from a previous version of Kaspersky Security Center Web Console, run the following command:

      $ sudo dpkg -i ksc-web-console-[build_number].x86_64.deb

    This starts unpacking of the setup file. Please wait until the installation is complete. Kaspersky Security Center Web Console is installed to the following directory: /var/opt/kaspersky/ksc-web-console.

  10. Restart all of the Kaspersky Security Center Web Console services by running the following command:

    $ sudo systemctl restart KSC*

When the installation is complete, you can use your browser to open and log in to Kaspersky Security Center Web Console.

If your device runs on Astra Linux 1.8, you have to override user rights after Kaspersky Security Center Web Console is installed.

We recommend that you perform the steps of the instruction for each service separately.

To override user rights:

  1. Open the following files:
    • /etc/systemd/system/ KSCSvcWebConsole.service
    • /etc/systemd/system/ KSCWebConsole.service
    • /etc/systemd/system/ KSCWebConsoleManagement.service
    • /etc/systemd/system/ KSCWebConsoleMessageQueue.service
    • /etc/systemd/system/ KSCWebConsolePlugin.service
  2. Copy the User=value string from the files.

    The values are different for each service and are generated when you install Kaspersky Security Center Web Console.

  3. Create the following directories:
    • /etc/systemd/system/ KSCSvcWebConsole.service.d
    • /etc/systemd/system/ KSCWebConsole.service.d
    • /etc/systemd/system/ KSCWebConsoleManagement.service.d
    • /etc/systemd/system/ KSCWebConsoleMessageQueue.service.d
    • /etc/systemd/system/ KSCWebConsolePlugin.service.d
  4. In each directory, create a file named override.conf, and then insert the string that you copied at step 2 into the file. The override.conf file must have the following content:
    • for /etc/systemd/system/ KSCSvcWebConsole.service.d
    • for /etc/systemd/system/ KSCWebConsole.service.d
    • for /etc/systemd/system/ KSCWebConsoleManagement.service.d
    • for /etc/systemd/system/ KSCWebConsoleMessageQueue.service.d
    • for /etc/systemd/system/ KSCWebConsolePlugin.service.d

    where User=value is the string that you copied at step 2. For example, User=user_svc_nodejs_rjvyyf-xkg.

  5. Restart the service.
Page top