Connecting Network Agents to Administration Server by using the klmover utility

You can use the klmover utility to restore connection from uncontrolled devices to Administration Server, for example, after an Administration Server failure, if it is not possible to restore it from a backup.

To restore the connection, run the klmover utility from the command line:

For Linux:
- For 32-bit systems: /opt/kaspersky/klnagent/bin/klmover [-address <server address>] [-pn <port number>] [-ps <SSL port number>] [-nossl] [-cert <path to certificate file>]
- For 64-bit systems: /opt/kaspersky/klnagent64/bin/klmover [-address <server address>] [-pn <port number>] [-ps <SSL port number>] [-nossl] [-cert <path to certificate file>]
For Windows:
- For 32-bit systems: <path>\klmover.exe [-address <server address>] [-pn <port number>] [-ps <SSL port number>] [-nossl] [-cert <path to certificate file>]
- For 64-bit systems: <path>\klmover.exe [-address <server address>] [-pn <port number>] [-ps <SSL port number>] [-nossl] [-cert <path to certificate file>]

where <path> is the default installation path for Network Agent or the installation path specified by you in the settings of the Network Agent installation package.

To prevent intruders from moving devices out of your Administration Server's control, we strongly recommend enabling password protection for running the klmover utility. To enable password protection, select the Use uninstallation password option in the Network Agent policy settings.

If you lose or forget the password from the password-protected Network Agent installed on the device that is no longer under the management of Kaspersky Security Center Linux, you cannot remove Network Agent by using the klmover utility or the command line. In this case, you have to reinstall the operating system on the device with the installed password-protected Network Agent.

The klmover utility requires local administrator rights.

Enabling the Use uninstallation password option on Windows devices also enables password protection for the Cleaner tool (cleaner.exe).

You cannot use the klmover utility for client devices connected to Administration Server through connection gateways. For such devices you have to either reconfigure Network Agent or reinstall Network Agent and specify connection gateway.

The description of the klmover utility parameters is presented in the table below.

Values of the klmover utility parameters

Parameter	Value
`-address <server address>`	Address of the Administration Server for connection. You can specify an IP address or the DNS name.
`-pn <port number>`	Number of the port through which non-encrypted connection to the Administration Server is established. The default port number is 14000.
`-ps <SSL port number>`	Number of the SSL port through which encrypted connection to the Administration Server is established by using SSL. The default port number is 13000.
`-nossl`	Use non-encrypted connection to the Administration Server. If the key is not in use, Network Agent is connected to the Administration Server by using encrypted SSL protocol.
`-cert <path to certificate file>`	Use the specified certificate file for authentication of access to Administration Server.
`-nauninstpwd <password>`	Use this parameter to specify the Network Agent uninstallation password. The parameter is not mandatory.