Migration to Kaspersky Security Center Linux by using Administration Server data backup

You can use a data backup to move the Kaspersky Security Center Windows Administration Server data under management of Kaspersky Security Center Linux. Before the migration, make sure that necessary features of Kaspersky Security Center Windows are supported in Kaspersky Security Center Linux.

Limitations:

To migrate Administration Server data to Kaspersky Security Center Linux:

  1. Check that you have the administrator's internal user account under which you can log in to Administration Server.

    The administrator's account will be used to log in to Kaspersky Security Center Linux Administration Server. If you do not have this account and you are logged in only under a local Windows account or under a domain account, you will not be able to log in to Kaspersky Security Center Linux Administration Server after restoring the backup. Kaspersky Security Center Linux Administration Server does not support logging in by using the local Windows account. Logging in under the domain account is possible, but it may require additional configuration of Administration Server.

    If you do not have the administrator's account, you will have to create this account after restoring the backup copy by using the kladduser utility.

  2. Create an up-to-date backup copy of Administration Server data.
    • For migration of MySQL or MariaDB to MySQL or MariaDB: use the klbackup utility or a data backup task on the device that has Administration Server installed.
    • For migration of Microsoft SQL Server to MySQL or MariaDB: use the klbackup utility with the Migrate to MySQL/MariaDB format option enabled.
  3. On a previous device, disconnect Administration Server from the network.
  4. Select a new device on which to install the Administration Server. This device must meet the hardware and software requirements. Also, check that the ports used on Administration Server are available.
  5. Assign the same address to the new device.

    The new Administration Server can be assigned the NetBIOS name, FQDN, and static IP address. It depends on which Administration Server address was set in the Network Agent installation package when Network Agents were deployed. Alternatively, you can use the connection address that determines the Administration Server to which Network Agent connects (you can obtain this address on managed devices by using the klnagchk utility).

  6. Select the DBMS type that provides optimum performance. Take into account the number of networked devices, network topology, and workload on the network. You can choose from one of the supported DBMSs.
  7. Install the DBMS according to the DBMS type selected when creating a backup. For information about how to install the selected DBMS, refer to its documentation.

    A new database version must not be lower than the current one.

  8. Configure the DBMS for working with Kaspersky Security Center Linux.
  9. Install Kaspersky Security Center Linux on the new device.

    The administrator's internal user account created during the installation, as well as other objects (groups, policies, tasks, users) created before you restore Administration Server data from the backup, will be lost after restoring. These objects will be replaced by objects that are contained in the backup.

  10. After the installation is complete, recover Administration Server data on the new device by using the klbackup utility.
  11. If you did not have the administrator's internal user account under which you were logged in to Kaspersky Security Center Windows Administration Server and you used a local Windows account or a domain account, create an administrator's account by using the kladduser utility as follows:

    /opt/kaspersky/ksc64/sbin/kladduser -n ksc -p <password>

    where the <password> parameter meets the following requirements:

    • The user password cannot have less than 8 or more than 256 characters.
    • The password must contain characters from at least three of the groups listed below:
      • Uppercase letters (A-Z)
      • Lowercase letters (a-z)
      • Numbers (0-9)
      • Special characters (@ # $ % ^ & * - _ ! + = [ ] { } | : ' , . ? / \ ` ~ " ( ) ;)
  12. Install Kaspersky Security Center Web Console.

    If Kaspersky Security Center Web Console was installed earlier, reinstall it with the same response file.

  13. Log in to Kaspersky Security Center Web Console under the administrator's internal user account.

    The data initialization process usually takes up to 15 minutes after restoring the Administration Server data, but the time depends on the hardware performance and the size of the Administration Server data. During this time, Kaspersky Security Center Web Console may fail to connect and display errors.

  14. Check the functionality of the main Administration Server features when the data initialization in the database is complete. Verify that Administration Server synchronizes with managed devices and Administration Server data is recovered.
  15. Poll domain controllers to restore information about the domain structure, user accounts, security groups, and DNS names of the devices that are included in the domains.
  16. If necessary, uninstall the Administration Server and the database server from the previous device.

    There must not be multiple Administration Servers on the same network with the same connection address and Administration Server certificate.

The administrator has access to Administration Server data and managed devices that there was access for in Kaspersky Security Center Windows, taking into account the functionality supported in Kaspersky Security Center Linux.

Page top