Kaspersky Security Center 15.1 Linux
- Kaspersky Security Center Linux Help
- What's new
- About Kaspersky Security Center Linux
- Distribution kit
- Hardware and software requirements
- Compatible Kaspersky applications and solutions
- About compatibility of Administration Server and Kaspersky Security Center Web Console
- Comparison of Kaspersky Security Center: Windows-based vs. Linux-based
- About Kaspersky Security Center Cloud Console
- Architecture and basic concepts
- Architecture
- Deployment diagram of Kaspersky Security Center Linux Administration Server and Kaspersky Security Center Web Console
- Ports used by Kaspersky Security Center Linux
- Ports used by Kaspersky Security Center Web Console
- Basic concepts
- Administration Server
- Hierarchy of Administration Servers
- Virtual Administration Server
- Web Server
- Network Agent
- Administration groups
- Managed device
- Unassigned device
- Administrator's workstation
- Management web plug-in
- Policies
- Policy profiles
- Tasks
- Task scope
- How local application settings relate to policies
- Distribution point
- Connection gateway
- Schemas for data traffic and port usage
- Administration Server and managed devices on LAN
- Primary Administration Server on LAN and two secondary Administration Servers
- Administration Server on LAN, managed devices on internet, reverse proxy in use
- Administration Server on LAN, managed devices on internet, connection gateway in use
- Administration Server in DMZ, managed devices on internet
- Interaction of Kaspersky Security Center Linux components and security applications: more information
- Conventions used in interaction schemas
- Administration Server and DBMS
- Administration Server and client device: Managing the security application
- Upgrading software on a client device through a distribution point
- Hierarchy of Administration Servers: primary Administration Server and secondary Administration Server
- Hierarchy of Administration Servers with a secondary Administration Server in DMZ
- Administration Server, a connection gateway in a network segment, and a client device
- Administration Server and two devices in DMZ: a connection gateway and a client device
- Administration Server and Kaspersky Security Center Web Console
- Getting started
- Installation
- Configuring the MariaDB x64 server for working with Kaspersky Security Center Linux
- Configuring the PostgreSQL or Postgres Pro server for working with Kaspersky Security Center Linux
- Configuring the MySQL x64 server for working with Kaspersky Security Center Linux
- Installing Kaspersky Security Center Linux
- Installing Kaspersky Security Center Web Console
- Deployment of the Kaspersky Security Center Linux failover cluster
- Scenario: Deployment of Kaspersky Security Center Linux failover cluster
- About Kaspersky Security Center Linux failover cluster
- Preparing a file server for a Kaspersky Security Center Linux failover cluster
- Preparing nodes for a Kaspersky Security Center Linux failover cluster
- Installing Kaspersky Security Center Linux on the Kaspersky Security Center Linux failover cluster nodes
- Installing Kaspersky Security Center Web Console connected to Administration Server installed on Kaspersky Security Center Linux failover cluster nodes
- Starting and stopping cluster nodes manually
- Accounts for working with the DBMS
- Certificates for work with Kaspersky Security Center Linux
- About Kaspersky Security Center certificates
- Requirements for custom certificates used in Kaspersky Security Center Linux
- Reissuing the certificate for Kaspersky Security Center Web Console
- Replacing certificate for Kaspersky Security Center Web Console
- Converting a PFX certificate to the PEM format
- Scenario: Specifying the custom Administration Server certificate
- Replacing the Administration Server certificate by using the klsetsrvcert utility
- Connecting Network Agents to Administration Server by using the klmover utility
- Reissuing the Web Server certificate
- Defining a shared folder
- Signing in to Kaspersky Security Center Web Console and signing out
- Kaspersky Security Center Web Console interface
- Quick start wizard
- Step 1. Specifying the internet connection settings
- Step 2. Downloading required updates
- Step 3. Selecting the assets to secure
- Step 4. Selecting encryption in solutions
- Step 5. Configuring installation of plug-ins for managed applications
- Step 6. Downloading distribution packages and creating installation packages
- Step 7. Configuring Kaspersky Security Network
- Step 8. Selecting the application activation method
- Step 9. Specifying the third-party update management settings
- Step 10. Creating a basic network protection configuration
- Step 11. Configuring email notifications
- Step 12. Closing the quick start wizard
- Protection deployment wizard
- Starting Protection deployment wizard
- Selecting the installation package
- Selecting a method for distribution of key file or activation code
- Selecting Network Agent version
- Selecting devices
- Specifying the remote installation task settings
- Step 6. Restart management
- Removing incompatible applications before installation
- Moving devices to Managed devices
- Selecting accounts to access devices
- Starting installation
- Installation
- Upgrading Kaspersky Security Center Linux
- Upgrading Kaspersky Security Center Linux by using the installation file
- Upgrading Kaspersky Security Center Linux through backup
- Upgrading Kaspersky Security Center Linux on the Kaspersky Security Center Linux failover cluster nodes
- Upgrading Kaspersky Security Center Web Console
- Upgrading Kaspersky Security Center Web Console on Astra Linux in the closed software environment mode
- Migration to Kaspersky Security Center Linux
- Configuring Administration Server
- Configuring the connection of Kaspersky Security Center Web Console to Administration Server
- Configuring an allowlist of IP addresses to connect to Kaspersky Security Center Linux
- Configuring internet access settings for Administration Server
- Hierarchy of Administration Servers
- Creating a hierarchy of Administration Servers: adding a secondary Administration Server
- Viewing the list of secondary Administration Servers
- Managing virtual Administration Servers
- Configuring Administration Server connection events logging
- Setting the maximum number of events in the event repository
- Moving Administration Server to another device
- Changing DBMS credentials
- Backup copying and restoration of Administration Server data
- Administration Server maintenance
- Deleting a hierarchy of Administration Servers
- Access to public DNS servers
- Configuring the interface
- Encrypt communication with TLS
- Discovering networked devices
- Deployment best practices
- Hardening Guide
- Administration Server deployment
- Connection safety
- Accounts and authentication
- Managing protection of Administration Server
- Managing protection of client devices
- Configuring protection for managed applications
- Administration Server maintenance
- Event transfer to third-party systems
- Security recommendations for third-party information systems
- Recommendations for using Kaspersky security applications
- Scenario: Authenticating MySQL Server
- Scenario: Authenticating PostgreSQL Server
- Preparation for deployment
- Planning Kaspersky Security Center Linux deployment
- Typical schemes of protection system deployment
- About planning Kaspersky Security Center Linux deployment in an organization's network
- Selecting a structure for protection of an enterprise
- Standard configurations of Kaspersky Security Center Linux
- Selecting a DBMS
- Providing internet access to Administration Server
- About distribution points
- Increasing the limit of file descriptors for the klnagent service
- Calculating the number and configuration of distribution points
- Virtual Administration Servers
- Network settings for interaction with external services
- Planning Kaspersky Security Center Linux deployment
- Deploying Network Agent and the security application
- Initial deployment
- Configuring installers
- Installation packages
- About remote installation tasks in Kaspersky Security Center Linux
- Deployment by capturing and copying the image of a device
- Network Agent disk cloning mode
- Forced deployment through the remote installation task of Kaspersky Security Center Linux
- Running stand-alone packages created by Kaspersky Security Center Linux
- Remote installation of applications on devices with Network Agent installed
- Managing device restarts in the remote installation task
- Suitability of databases updating in an installation package of a security application
- Monitoring the deployment
- Configuring installers
- Virtual infrastructure
- Support of file system rollback for devices with Network Agent
- Local installation of applications
- Installing Network Agent for Linux in interactive mode
- Installing Network Agent for Windows in interactive mode
- Installing Network Agent for Windows in silent mode
- Installing applications in silent mode
- Installing applications by using stand-alone packages
- Network Agent installation package settings
- Initial deployment
- Kaspersky Security Center Linux Web Server
- Manual setup of the group task for scanning a device with Kaspersky Endpoint Security
- Hardening Guide
- Managing client devices
- Settings of a managed device
- Device moving rules
- Adding devices to an administration group manually
- Moving devices or clusters to an administration group manually
- About clusters and server arrays
- Properties of a cluster or server array
- Adjustment of distribution points and connection gateways
- Standard configuration of distribution points: Single office
- Standard configuration of distribution points: Multiple small remote offices
- Calculating the number and configuration of distribution points
- Assigning distribution points automatically
- Assigning distribution points manually
- Modifying the list of distribution points for an administration group
- Enabling a push server
- About device statuses
- Configuring the switching of device statuses
- Device selections
- Device tags
- Creating a device tag
- Renaming a device tag
- Deleting a device tag
- Viewing devices to which a tag is assigned
- Viewing tags assigned to a device
- Tagging a device manually
- Removing an assigned tag from a device
- Viewing rules for tagging devices automatically
- Editing a rule for tagging devices automatically
- Creating a rule for tagging devices automatically
- Running rules for auto-tagging devices
- Deleting a rule for tagging devices automatically
- Managing device tags by using the klscflag utility
- Data encryption and protection
- Changing the Administration Server for client devices
- Moving devices connected to Administration Server through connection gateways to another Administration Server
- Viewing and configuring the actions when devices show inactivity
- Sending messages to device users
- Turning on, turning off, and restarting client devices remotely
- Managing mobile devices
- Managing administration groups
- Deploying Kaspersky applications
- Scenario: Kaspersky applications deployment
- Adding management plug-ins for Kaspersky applications
- Downloading and creating installation packages for Kaspersky applications
- Creating installation packages from a file
- Creating stand-alone installation packages
- Changing the limit on the size of custom installation package data
- Installing Network Agent for Linux in silent mode (with an answer file)
- Preparing a device running Astra Linux in the closed software environment mode for installation of Network Agent
- Viewing the list of stand-alone installation packages
- Distributing installation packages to secondary Administration Servers
- Preparing a Linux device and installing Network Agent on a Linux device remotely
- Installing applications using a remote installation task
- Specifying settings for remote installation on Unix devices
- Starting and stopping Kaspersky applications
- Replacing third-party security applications
- Removing applications or software updates remotely
- Preparing a device running SUSE Linux Enterprise Server 15 for installation of Network Agent
- Preparing a Windows device for remote installation
- Creating Execute scripts remotely task
- Licensing
- Licensing of Kaspersky Security Center Linux
- Licensing of managed Kaspersky applications
- Licensing of managed applications
- Adding a license key to the Administration Server repository
- Deploying a license key to client devices
- Automatic distribution of a license key
- Viewing information about license keys in use
- Events of the licensing limit exceeded
- Deleting a license key from the repository
- Revoking consent with an End User License Agreement
- Renewing licenses for Kaspersky applications
- Using Kaspersky Marketplace to choose Kaspersky business solutions
- Configuring Kaspersky applications
- Scenario: Configuring network protection
- About device-centric and user-centric security management approaches
- Policy setup and propagation: Device-centric approach
- Policy setup and propagation: User-centric approach
- Policies and policy profiles
- About policies and policy profiles
- About lock and locked settings
- Inheritance of policies and policy profiles
- Managing policies
- Viewing the list of policies
- Creating a policy
- General policy settings
- Modifying a policy
- Enabling and disabling a policy inheritance option
- Copying a policy
- Moving a policy
- Exporting a policy
- Importing a policy
- Forced synchronization
- Viewing the policy distribution status chart
- Activating a policy automatically at the Virus outbreak event
- Deleting a policy
- Managing policy profiles
- Network Agent policy settings
- Usage of Network Agent for Windows, Linux, and macOS: Comparison
- Comparison of Network Agent settings by operating systems
- Enabling and disabling the low resource consumption mode for Network Agent
- Manual setup of the Kaspersky Endpoint Security policy
- Configuring Kaspersky Security Network
- Checking the list of the networks protected by Firewall
- Disabling the scan of network drives
- Excluding software details from the Administration Server memory
- Configuring access to the Kaspersky Endpoint Security for Windows interface on workstations
- Saving important policy events in the Administration Server database
- Manual setup of the group update task for Kaspersky Endpoint Security
- Kaspersky Security Network (KSN)
- Managing tasks
- Application tags
- Granting offline access to the external device blocked by Device Control
- Using the klscflag utility to open port 13291
- Registering Kaspersky Industrial CyberSecurity for Networks application in Kaspersky Security Center Web Console
- Managing users and user roles
- About user accounts
- About user roles
- Configuring access rights to application features. Role-based access control
- Adding an account of an internal user
- Creating a security group
- Editing an account of an internal user
- Editing a security group
- Assigning a role to a user or a security group
- Adding user accounts to an internal security group
- Assigning a user as a device owner
- Enabling account protection from unauthorized modification
- Two-step verification
- Scenario: Configuring two-step verification for all users
- About two-step verification for an account
- Enabling two-step verification for your own account
- Enabling required two-step verification for all users
- Disabling two-step verification for a user account
- Disabling required two-step verification for all users
- Excluding accounts from two-step verification
- Configuring two-step verification for your own account
- Prohibit new users from setting up two-step verification for themselves
- Generating a new secret key
- Editing the name of a security code issuer
- Changing the number of allowed password entry attempts
- Deleting a user or a security group
- Creating a user role
- Editing a user role
- Editing the scope of a user role
- Deleting a user role
- Associating policy profiles with roles
- Changing account password
- Revoking local administrator rights
- Updating Kaspersky databases and applications
- Scenario: Regular updating Kaspersky databases and applications
- About updating Kaspersky databases, software modules, and applications
- Creating the Download updates to the Administration Server repository task
- Verifying downloaded updates
- Creating the task for downloading updates to the repositories of distribution points
- Adding sources of updates for the Download updates to the Administration Server repository task
- Approving and declining software updates
- Automatic installation of updates for Kaspersky Endpoint Security for Windows
- About using diff files for updating Kaspersky databases and software modules
- Enabling the Downloading diff files feature
- Downloading updates by distribution points
- Updating Kaspersky databases and software modules on offline devices
- Backing up and restoring web plug-ins
- Monitoring, reporting, and audit
- Scenario: Monitoring and reporting
- About types of monitoring and reporting
- Triggering of rules in Smart Training mode
- Dashboard and widgets
- Reports
- Events and event selections
- About events in Kaspersky Security Center Linux
- Events of Kaspersky Security Center Linux components
- Using event selections
- Creating an event selection
- Editing an event selection
- Viewing a list of an event selection
- Exporting an event selection
- Importing an event selection
- Viewing details of an event
- Exporting events to a file
- Viewing an object history from an event
- Deleting events
- Deleting event selections
- Setting the storage term for an event
- Blocking frequent events
- Event processing and storage on the Administration Server
- Notifications and device statuses
- Kaspersky announcements
- Viewing information about the detects of threats
- Cloud Discovery
- Exporting events to SIEM systems
- Configuring event export to SIEM systems
- Before you begin
- About event export
- About configuring event export in a SIEM system
- Marking of events for export to SIEM systems in Syslog format
- About exporting events using Syslog format
- Configuring Kaspersky Security Center Linux for export of events to a SIEM system
- Exporting events directly from the database
- Viewing export results
- Managing object revisions
- Deletion of objects
- Downloading and deleting files from Quarantine and Backup
- Integration between Kaspersky Security Center Web Console and other Kaspersky solutions
- Remote diagnostics of client devices
- Opening the remote diagnostics window
- Enabling and disabling tracing for applications
- Downloading trace files of an application
- Deleting trace files
- Downloading application settings
- Downloading system information from a client device
- Downloading event logs
- Starting, stopping, restarting the application
- Running the remote diagnostics of Kaspersky Security Center Linux Network Agent and downloading the results
- Running an application on a client device
- Running remote diagnostics on a Linux-based client device
- Managing third-party applications and executable files on client devices
- Using Application Control to manage executable files
- Obtaining and viewing a list of executable files stored on client devices
- Creating an application category with content added manually
- Creating an application category that includes executable files from selected devices
- Creating an application category that includes executable files from selected folder
- Viewing the list of application categories
- Adding event-related executable files to the application category
- Configuring Application Control in the Kaspersky Endpoint Security for Windows policy
- Obtaining and viewing a list of applications installed on client devices
- Installing third-party software updates
- Scenario: Updating third-party software
- Third-party software updates installation options
- Find vulnerabilities and required updates task settings
- Creating the Find vulnerabilities and required updates task
- Viewing information about available third-party software updates
- Exporting the list of available software updates to a file
- Approving and declining third-party software updates
- Creating the Install required updates and fix vulnerabilities task
- Adding rules for update installation
- Settings of the Install required updates and fix vulnerabilities task specified after task creation
- Updating third-party applications automatically
- Fixing third-party software vulnerabilities
- About finding and fixing software vulnerabilities
- Scenario: Finding and fixing third-party software vulnerabilities
- Fixing third-party software vulnerabilities
- Creating the Fix vulnerabilities task
- Selecting user fixes for vulnerabilities in third-party software
- Viewing information about software vulnerabilities detected on all managed devices
- Viewing information about software vulnerabilities detected on the selected managed device
- Viewing statistics of vulnerabilities on managed devices
- Exporting the list of software vulnerabilities to a file
- Ignoring software vulnerabilities
- Creating an installation package of a third-party application from the Kaspersky database
- Viewing and modifying the settings of an installation package of a third-party application from the Kaspersky database
- Settings of an installation package of a third-party application from the Kaspersky database
- Fixing vulnerabilities in an isolated network
- Scenario: Fixing third-party software vulnerabilities in an isolated network
- About fixing third-party software vulnerabilities in an isolated network
- Configuring the Administration Server with internet access to fix vulnerabilities in an isolated network
- Configuring isolated Administration Servers to fix vulnerabilities in an isolated network
- Transmitting patches and installing updates in an isolated network
- Disabling transmission of patches and installation of updates in an isolated network
- Using Application Control to manage executable files
- API Reference Guide
- Best Practices for Service Providers
- Planning Kaspersky Security Center Linux deployment
- Deployment and initial setup
- Recommendations on Administration Server installation
- Deploying Network Agent and security applications
- Configuring protection on a client organization's network
- Manual setup of the Kaspersky Endpoint Security policy
- Manual setup of the group update task for Kaspersky Endpoint Security
- Manual setup of the group task for scanning a device with Kaspersky Endpoint Security
- Scheduling the Find vulnerabilities and required updates task
- Manual setup of the group task for updates installation and vulnerabilities fix
- Building a structure of administration groups and assigning distribution points
- Hierarchy of policies, using policy profiles
- Tasks
- Device moving rules
- Software categorization
- Backup and restoration of Administration Server settings
- About connection profiles for out-of-office users
- Remote access to managed devices
- Sizing Guide
- About this Guide
- Calculations for Administration Servers
- Calculations for distribution points and connection gateways
- Logging of information about events for tasks and policies
- Best practices for an Administration Server that manages a large number of devices
- Specific considerations and optimal settings of certain tasks
- Details of network load spread among Administration Server and protected devices
- Known issues
- Contact Technical Support
- Sources of information about the application
- Glossary
- Active key
- Additional (or reserve) license key
- Administration Console
- Administration group
- Administration Server
- Administration Server certificate
- Administration Server client (Client device)
- Administration Server data backup
- Administrator rights
- Administrator's workstation
- Anti-virus databases
- Anti-virus protection service provider
- Application Shop
- Authentication Agent
- Available update
- Backup folder
- Broadcast domain
- Centralized application management
- Client administrator
- Cloud Discovery
- Configuration profile
- Connection gateway
- Demilitarized zone (DMZ)
- Device owner
- Direct application management
- Distribution point
- Event repository
- Event severity
- Group task
- Home Administration Server
- HTTPS
- Incompatible application
- Installation package
- Internal users
- iOS MDM device
- iOS MDM Server
- JavaScript
- Kaspersky Private Security Network (KPSN)
- Kaspersky Security Center Linux Administrator
- Kaspersky Security Center Linux Web Server
- Kaspersky Security Center Operator
- Kaspersky Security Center System Health Validator (SHV)
- Kaspersky update servers
- Key file
- License term
- Local installation
- Local task
- Managed devices
- Manual installation
- Network Agent
- Network anti-virus protection
- Network protection status
- Patch importance level
- Policy
- Profile
- Program settings
- Protection status
- Provisioning profile
- Remote installation
- Restoration
- Restoration of Administration Server data
- Role group
- Service provider's administrator
- Shared certificate
- SSL
- Task
- Task for specific devices
- Task settings
- Update
- Virtual Administration Server
- Virus outbreak
- Vulnerability
- Information about third-party code
- Trademark notices
Installing an application remotely
This section contains information on how to remotely install an application on devices in an administration group, devices with specific addresses, or a selection of devices.
To install an application on specific devices:
- In the main menu, go to Assets (Devices) → Tasks.
- Click Add.
The New task wizard starts.
- In the Task type field, select Install application remotely.
- Select one of the following options:
- Assign task to an administration group
The task is assigned to devices included in an administration group. You can specify one of the existing groups or create a new one.
For example, you may want to use this option to run a task of sending a message to users if the message is specific for devices included in a specific administration group.
If a task is assigned to an administration group, the Security tab is not displayed in the task properties window because group tasks are subject to the security settings of the groups to which they apply.
- Specify device addresses manually or import addresses from a list
You can specify DNS names, IP addresses, and IP subnets of devices to which you want to assign the task.
You may want to use this option to execute a task for a specific subnet. For example, you may want to install a certain application on devices of accountants or to scan devices in a subnet that is probably infected.
- Assign task to a device selection
The task is assigned to devices included in a device selection. You can specify one of the existing selections.
For example, you may want to use this option to run a task on devices with a specific operating system version.
The Install application remotely task is created for the specified devices. If you selected the Assign task to an administration group option, the task is a group one.
- Assign task to an administration group
- At the Task scope step, specify an administration group, devices with specific addresses, or a device selection.
The available settings depend on the option selected at the previous step.
- At the Installation packages step, specify the following settings:
- In the Select installation package field, select the installation package of an application that you want to install.
- In the Force installation package download settings group, specify how files that are required for the application installation are distributed to client devices:
- Using Network Agent
If this option is enabled, installation packages are delivered to client devices by Network Agent installed on those client devices.
If this option is disabled, installation packages are delivered using the operating system tools of client devices.
We recommend that you enable this option if the task has been assigned to devices with Network Agents installed.
By default, this option is enabled.
- Using operating system resources through distribution points
If this option is enabled, installation packages are transmitted to client devices using operating system tools through distribution points. You can select this option if there is at least one distribution point on the network.
If the Using Network Agent option is enabled, the files are delivered using operating system tools only if Network Agent tools are unavailable.
By default, this option is enabled for remote installation tasks that have been created on a virtual Administration Server.
The only way to install an application for Windows (including Network Agent for Windows) on a device that does not have Network Agent installed is by using a Windows-based distribution point. Therefore, when you install a Windows application:
- Select this option.
- Ensure that a distribution point is assigned for the target client devices.
- Ensure the distribution point is Windows-based.
- Using operating system resources through Administration Server
If this option is enabled, files are transmitted to client devices by using operating system tools of client devices through the Administration Server. You can enable this option if no Network Agent is installed on the client device, but the client device is in the same network as the Administration Server.
By default, this option is enabled.
- Using Network Agent
- In the Maximum number of concurrent downloads field, specify the maximum allowed number of client devices to which Administration Server can simultaneously transmit the files.
- In the Maximum number of installation attempts field, specify the maximum allowed number of installer runs.
If the number of attempts specified in the parameter is exceeded, Kaspersky Security Center Linux does not start the installer on the device anymore. To restart the Install application remotely task, increase the value of the Maximum number of installation attempts parameter and start the task. Alternatively, you can create a new Install application remotely task.
- If you migrate from one Kaspersky application to another and your current application is password-protected, enter the password in the Password to uninstall the current Kaspersky application field. Note that during the migration, your current Kaspersky application will be uninstalled.
The Password to uninstall the current Kaspersky application field is only available if you have selected the Using Network Agent option in the Force installation package download settings group.
You can use the uninstall password only for the Kaspersky Security for Windows Server to Kaspersky Endpoint Security for Windows migration scenario when installing Kaspersky Endpoint Security for Windows by using the Install application remotely task. Using the uninstall password when installing other components may cause installation errors.
To complete the migration scenario successfully, make sure that the following prerequisites are met:
- You are using Kaspersky Security Center Network Agent 14.2 for Windows or later.
- You are installing the application on devices running Windows.
- Define the additional setting:
- Do not re-install application if it is already installed
If this option is enabled, the selected application will not be re-installed if it has already been installed on this client device.
If this option is disabled, the application will be installed anyway.
By default, this option is enabled.
- Verify operating system type before downloading
Before transmitting the files to client devices, Kaspersky Security Center Linux checks if the Installation utility settings are applicable to the operating system of the client device. If the settings are not applicable, Kaspersky Security Center Linux does not transmit the files and does not attempt to install the application. For example, to install some application to devices of an administration group that includes devices running various operating systems, you can assign the installation task to the administration group, and then enable this option to skip devices that run an operating system other than the required one.
- Assign package installation in Active Directory group policies
If this option is enabled, an installation package is installed by using the Active Directory group policies.
This option is available if the Network Agent installation package is selected.
By default, this option is disabled.
- Prompt users to close running applications
Running applications may prevent a restart of the client device. For example, if a document is being edited in a word processing application and is not saved, the application does not allow the device to restart.
If this option is enabled, such applications on a locked device are forced to close before the device restart. As a result, users may lose their unsaved changes.
If this option is disabled, a locked device is not restarted. The task status on this device states that a device restart is required. Users have to manually close all applications running on locked devices and restart these devices.
By default, this option is disabled.
- Do not re-install application if it is already installed
- Select on which devices you want to install the application:
- Install on all devices
The application will be installed even on devices managed by other Administration Servers.
This option is selected by default. You do not have to change this setting if you have only one Administration Server in your network.
- Install only on devices managed through this Administration Server
The application will be installed only on devices managed by this Administration Server. Select this option if you have more than one Administration Server in your network and want to avoid conflicts between them.
- Install on all devices
- Specify whether devices must be moved to an administration group after installation:
- Do not move devices
The devices remain in the groups in which they are currently located. The devices that have not been placed in any group remain unassigned.
- Move unassigned devices to the selected group (only a single group can be selected)
The devices are moved to the administration group that you select.
Note that the Do not move devices option is selected by default. For security reasons, you might want to move the devices manually.
- Do not move devices
- At the this step of the wizard, specify whether the devices must be restarted during installation of applications:
- Do not restart the device
If this option is selected, the device will not be restarted after the security application installation.
- Restart the device
If this option is selected, the device will be restarted after the security application installation.
- Do not restart the device
- If necessary, at the Select accounts to access devices step, add the accounts that will be used to start the Install application remotely task:
- No account required (Network Agent installed)
If this option is selected, you do not have to specify the account under which the application installer will be run. The task will run under the account under which the Administration Server service is running.
If Network Agent has not been installed on client devices, this option is not available.
- Account required (Network Agent is not used)
Select this option if Network Agent is not installed on the devices for which you assign the remote installation task. In this case, you can specify a user account or an SSH certificate to install the application.
- Local Account. If this option is selected, specify the user account under which the application installer will be run. Click the Add button, select Local Account, and then specify the user account credentials.
You can specify multiple user accounts if, for example, none of them have all the required rights on all devices for which you assign the task. In this case, all added accounts are used for running the task, in consecutive order, top-down.
- SSH certificate. If you want to install an application on a Linux-based client device, you can specify an SSH certificate instead of a user account. Click the Add button, select SSH certificate, and then specify the private and public keys of the certificate.
To generate a private key, you can use the ssh-keygen utility. Note that Kaspersky Security Center Linux supports the PEM format of private keys, but the ssh-keygen utility generates SSH keys in the OPENSSH format by default. The OPENSSH format is not supported by Kaspersky Security Center Linux. To create a private key in the supported PEM format, add the -m PEM option in the ssh-keygen command. For example:
ssh-keygen -m PEM -t rsa -b 4096 -C "<
user email
>"
- Local Account. If this option is selected, specify the user account under which the application installer will be run. Click the Add button, select Local Account, and then specify the user account credentials.
- No account required (Network Agent installed)
- At the Finish task creation step, click the Finish button to create the task and close the wizard.
If you enabled the Open task details when creation is complete option, the task settings window opens. In this window, you can check the task parameters, modify them, or configure a task start schedule, if necessary.
- In the task list, select the task you created, and then click Start.
Alternatively, wait for the task to launch according to the schedule that you specified in the task settings.
When the remote installation task is completed, the selected application is installed on the specified devices.
See also: |