Known issues

Kaspersky Security Center Linux has the following limitations, which are not critical to operation of the application:

• During authorization on the virtual Administration Server, if the credentials of a user who does not have access rights in the General features: Virtual Administration Servers functional area are used, an error occurs. Re-entry of credentials is not available. To resolve this issue, log out from Kaspersky Security Center Web Console.
• If you disable the Inherit settings from parent policy option in a child policy, save this change, and then go to the settings locked in the parent policy, these settings remain locked in the child policy. To resolve this issue and unlock the child policy settings, close the policy settings window, and then open it again.
• Errors occur when trying to install Kaspersky Security Center Linux on a device running operating system with the systemd initialization system version 232.

  If Kaspersky Security Center Linux Administration Server does not start after installation and the operating system log contains error 213/SECUREBITS related to kladminserver_srv.service, execute the following commands as a superuser:

  mkdir -p /etc/systemd/system/kladminserver_srv.service.d

  echo "[Service]" > /etc/systemd/system/kladminserver_srv.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/kladminserver_srv.service.d/override.conf

  mkdir -p /etc/systemd/system/klwebsrv_srv.service.d

  echo "[Service]" > /etc/systemd/system/klwebsrv_srv.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/klwebsrv_srv.service.d/override.conf

  If Kaspersky Security Center Web Console does not start after installation and the operating system log contains error 213/SECUREBITS related to KSCWebConsole.service, execute the following commands as a superuser:

  mkdir -p /etc/systemd/system/KSCSvcWebConsole.service.d

  echo "[Service]" > /etc/systemd/system/KSCSvcWebConsole.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/KSCSvcWebConsole.service.d/override.conf

  mkdir -p /etc/systemd/system/KSCWebConsoleManagement.service.d

  echo "[Service]" > /etc/systemd/system/KSCWebConsoleManagement.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/KSCWebConsoleManagement.service.d/override.conf

  mkdir -p /etc/systemd/system/KSCWebConsoleMessageQueue.service.d

  echo "[Service]" > /etc/systemd/system/KSCWebConsoleMessageQueue.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/KSCWebConsoleMessageQueue.service.d/override.conf

  mkdir -p /etc/systemd/system/KSCWebConsoleNATS.service.d

  echo "[Service]" > /etc/systemd/system/KSCWebConsoleNATS.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/KSCWebConsoleNATS.service.d/override.conf

  mkdir -p /etc/systemd/system/KSCWebConsolePlugin.service.d

  echo "[Service]" > /etc/systemd/system/KSCWebConsolePlugin.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/KSCWebConsolePlugin.service.d/override.conf

  mkdir -p /etc/systemd/system/KSCWebConsole.service.d

  echo "[Service]" > /etc/systemd/system/KSCWebConsole.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/KSCWebConsole.service.d/override.conf

• You cannot add a domain user to a group.
• An error occurs when you click the Cancel button in the Account protection window.
• When you run the Uninstall application remotely task to uninstall Network Agent from a device that is running an operating system with the Arm architecture and that also has an unsynchronized time with the Administration Server, the task status does not change from Running to Completed, even after Network Agent has been successfully uninstalled from the device. To resolve this issue, synchronize the time on the device with the installed Network Agent and the time on the device with the Administration Server before running the Uninstall application remotely.
• A managed device cannot connect to KSN through the KSN Proxy service if Kaspersky Security Center Linux is installed on a device that has cyrillic symbols in its name.
• Kaspersky Security Center Web Console does not start after its installation on a device running Astra Linux Special Edition RUSB.10015-01 (operational update 1.7) if the operating system is working in the closed software environment mode.
• Kaspersky Security Center Linux cannot be installed on a device running Astra Linux Special Edition RUSB.10015-01 (operational update 1.7) if the operating system is working in the closed software environment mode.
• Network Agent does not restart after killing its process on a managed device running CentOS 6.6.
• If you create a task with the Every N days and By days of week scheduling settings in Kaspersky Security Center Linux 15.2 Web Console, and then open the task in earlier versions of Kaspersky Security Center Web Console or Kaspersky Security Center Linux Administration Console (for example, when the task is also applied on the secondary Administration Servers which can be both Linux-based and Windows-based), the scheduling settings may be displayed incorrectly, or an error may occur.
• If you create the Change account password (Linux only) task for a user and enable the Set as a one-time password (the user must change the password after the first login) option, the user cannot sign in to Kaspersky Security Center Web Console.
• When you import the Download updates to the repositories of distribution points or Update verification task the Select devices to which the task will be assigned option is enabled. These tasks cannot be assigned to a device selection or specific devices. If you assign the Download updates to the repositories of distribution points or Update verification task to specific devices, the task will be imported incorrectly.
• Kaspersky Endpoint Security for Windows does not support the KSN Proxy service if the Use HTTPS option is enabled in the KSN Proxy settings of the Administration Server properties, and the Administration Server address contains non-Latin characters.
• If an application from the Applications registry section was detected on a Linux device, the application properties do not contain information about related executable files.
• In reports with a letter format, a page break may cut a text line horizontally.
• A managed device that has more than one network adapter sends Administration Server information about the MAC address of the network adapter that is not the one that is used to connect to Administration Server.
• When the Execute scripts remotely task starts, you cannot change the account it is assigned to. To change the account the task is assigned to, stop the task in the task settings and create it again with the correct account details.
• The Change account password task may not work correctly if SELinux is enabled on the user device. For more information on disabling SELinux, refer to the relevant user guide for your operating system.

  A system for controlling access of processes to operating system resources, which is based on security policies.

• Failover cluster deployment fails when you have either both arping and iputils-arping packages or only the arping package installed. Before deploying a failover cluster, ensure that you only have the iputils-arping package installed on both nodes.
• To use Kaspersky Security Center OpenAPI, download the updated KlAkOAPI.tar.gz archive instead of using the KlAkOAPI archive in the Kaspersky Security Center Linux installation folder.

Page top