Kaspersky Security Center 15.1 Linux

Connecting Network Agents to Administration Server by using the klmover utility

You can use the klmover utility to restore connection from uncontrolled devices to Administration Server, for example, after an Administration Server failure, if it is not possible to restore it from a backup.

To restore the connection, run the klmover utility from the command line:

  • For Linux:
    • for 32-bit systems: /opt/kaspersky/klnagent/bin/klmover [-address <server address>] [-pn <port number>] [-ps <SSL port number>] [-nossl] [-cert <path to certificate file>]
    • for 64-bit systems: /opt/kaspersky/klnagent64/bin/klmover [-address <server address>] [-pn <port number>] [-ps <SSL port number>] [-nossl] [-cert <path to certificate file>]
  • For Windows:
    • for 32-bit systems: <path>\klmover.exe [-address <server address>] [-pn <port number>] [-ps <SSL port number>] [-nossl] [-cert <path to certificate file>]
    • for 64-bit systems: <path>\klmover.exe [-address <server address>] [-pn <port number>] [-ps <SSL port number>] [-nossl] [-cert <path to certificate file>]

where <path> is the default installation path for Network Agent or the installation path specified by you in the settings of the Network Agent installation package.

To prevent intruders from moving devices out of your Administration Server's control, we strongly recommend enabling password protection for running the klmover utility. To enable password protection, select the Use uninstallation password option in the Network Agent policy settings.

If you lose or forget the password for the klmover utility, you will not be able to run it. In this case, you have to reinstall the operating system and the application on the device.

The klmover utility requires local administrator rights.

Enabling the Use uninstallation password on Windows devices also enables password protection for the Cleaner tool (cleaner.exe).

You cannot use the klmover utility for client devices connected to Administration Server through connection gateways. For such devices you have to either reconfigure Network Agent or reinstall Network Agent and specify connection gateway.

The description of the klmover utility parameters is presented in the table below.

Values of the klmover utility parameters

Parameter

Value

-address <server address>

Address of the Administration Server for connection.

You can specify an IP address or the DNS name.

-pn <port number>

Number of the port through which non-encrypted connection to the Administration Server is established.

The default port number is 14000.

-ps <SSL port number>

Number of the SSL port through which encrypted connection to the Administration Server is established by using SSL.

The default port number is 13000.

-nossl

Use non-encrypted connection to the Administration Server.

If the key is not in use, Network Agent is connected to the Administration Server by using encrypted SSL protocol.

-cert <path to certificate file>

Use the specified certificate file for authentication of access to Administration Server.

See also:

Scenario: Specifying the custom Administration Server certificate

Moving devices connected to Administration Server through connection gateways to another Administration Server