Migration to Kaspersky Security Center Linux by using the Administration Server data backup

You can use a data backup to migrate the Kaspersky Security Center Windows Administration Server data to Kaspersky Security Center Linux. Before the migration, make sure that necessary features of Kaspersky Security Center Windows are supported in Kaspersky Security Center Linux.

For clarity, a tutorial video on how to migrate Administration Server data to Kaspersky Security Center Linux by using a backup is available.

Limitations:

Stages

Migration by using the Administration Server data backup proceeds in stages:

  1. Checking that you have the administrator's internal user account under which you can log in to Administration Server

    The administrator's account will be used to log in to Kaspersky Security Center Linux Administration Server. If you do not have this account and you are logged in only under a local Windows account or under a domain account, you will not be able to log in to Kaspersky Security Center Linux Administration Server after restoring the backup. Kaspersky Security Center Linux Administration Server does not support logging in by using the local Windows account. Logging in under the domain account is possible, but it may require additional configuration of Administration Server.

    If you do not have the administrator's account, you will have to create this account after restoring the backup copy by using the kladduser utility.

  2. Creating an up-to-date backup copy of the Kaspersky Security Center Windows Administration Server data

    Depending on the DBMS type used for Kaspersky Security Center Windows and Kaspersky Security Center Linux, do one of the following:

    • For migration of MySQL or MariaDB to MySQL or MariaDB: create a backup copy by using the klbackup utility or a data backup task on the device with Administration Server installed.
    • For migration of Microsoft SQL Server to MySQL, or MariaDB: create a backup copy by using the klbackup utility, with the Migrate to MySQL/MariaDB format option enabled.
    • For migration of Microsoft SQL Server to PostgreSQL or Postgres Pro:
      1. Install the patch for Administration Server to support migration to PostgreSQL and Postgres Pro. Contact Kaspersky Technical Support to get this patch.
      2. Create a backup copy by using the klbackup utility.

        If you run klbackup from the command line, use the -migrate postgres flag.

        If you use the klbackup interface, enable the Migrate to Postgres format option.

    After creating a backup copy, disconnect Kaspersky Security Center Windows Administration Server from the network.

  3. Preparing a new device for installation of Kaspersky Security Center Linux

    At this stage of the scenario, do the following:

    1. Select a new device on which to install the Administration Server. This device must meet the hardware and software requirements. Also, check that the ports used on Administration Server are available.
    2. Assign the same address to the new device.

      The new Administration Server can be assigned the NetBIOS name, FQDN, and static IP address. It depends on which Administration Server address was set in the Network Agent installation package when Network Agents were deployed. Alternatively, you can use the connection address that determines the Administration Server to which Network Agent connects (you can obtain this address on managed devices by using the klnagchk utility).

  4. Installing and configuring the DBMS

    At this stage of the scenario, do the following:

    1. Select the DBMS type that provides optimum performance. Take into account the number of networked devices, network topology, and workload on the network. You can choose any supported DBMS.
    2. Install the DBMS according to the DBMS type selected when creating a backup. For information about how to install the selected DBMS, refer to its documentation.

      A new database version must not be lower than the current one.

    3. Configure the DBMS for working with Kaspersky Security Center Linux.
  5. Installing Kaspersky Security Center Linux

    Install Kaspersky Security Center Linux on the new device.

    The administrator's internal user account created during the installation, as well as other objects (groups, policies, tasks, users) created before you restore Administration Server data from the backup, will be lost after restoring. These objects will be replaced by objects that are contained in the backup.

  6. Restoring Administration Server data from the backup copy

    At this stage of the scenario, do the following:

    1. Restore Administration Server data on the new device by using the klbackup utility.

      Due to limitations of PostgreSQL, you need to temporarily grant PostgreSQL superuser privileges to the account that Administration Server uses to connect to the DBMS.

    2. If you did not have the administrator's internal user account under which you were logged in to Kaspersky Security Center Windows Administration Server and you used a local Windows account or a domain account, create an administrator's account by using the kladduser utility as follows:

      /opt/kaspersky/ksc64/sbin/kladduser -n ksc -p <password>

      where the <password> parameter meets the following requirements:

      • The user password cannot have less than 8 or more than 256 characters.
      • The password must contain characters from at least three of the groups listed below:
        • Uppercase letters (A-Z)
        • Lowercase letters (a-z)
        • Numbers (0-9)
        • Special characters (@ # $ % ^ & * - _ ! + = [ ] { } | : ' , . ? / \ ` ~ " ( ) ;)
  7. Installing Kaspersky Security Center Web Console and configuring Administration Server

    At this stage of the scenario, do the following:

    1. Install Kaspersky Security Center Web Console.

      If Kaspersky Security Center Web Console was installed earlier, reinstall it with the same response file.

    2. Log in to Kaspersky Security Center Web Console under the administrator's internal user account.

      The data initialization process usually takes up to 15 minutes after restoring Administration Server data, but the time depends on the hardware performance and the size of the Administration Server data. During this time, Kaspersky Security Center Web Console may fail to connect and display errors.

    3. Check the functionality of the main Administration Server features when the data initialization in the database is complete. Verify that Administration Server synchronizes with managed devices and the Administration Server data is recovered.
    4. Poll domain controllers to restore information about the domain structure, user accounts, security groups, and DNS names of the devices that are included in the domains.
    5. Review the migrated tasks. If any of their parameters include a Windows file path, replace it with the corresponding Linux file path.
    6. If necessary, uninstall the Administration Server and the database server from the previous device.

      There must not be multiple Administration Servers that share the same connection address and Administration Server certificate on the same network.

The administrator has access to the Administration Server data and managed devices that were in Kaspersky Security Center Windows, taking into account the functionality supported in Kaspersky Security Center Linux.

Page top