Upgrading Kaspersky Security Center Linux from version 15.4 or earlier by using the installation file

To upgrade Administration Server from version 13—15.4 to version 16 or later, you can install a new version over an earlier one by using the Kaspersky Security Center Linux installation file.

To upgrade Kaspersky Security Center Linux from version 15.4 or earlier to the latest version by using the installation file:

Download the Kaspersky Security Center Linux installation file with a full package for version 16.1 from the Kaspersky website:
- For devices running an RPM-based operating system—ksc64-<version number>.x86_64.rpm
- For devices running a Debian-based operating system—ksc64_<version number>_amd64.deb
On the DBMS server, create a database for IAM. The IAM database name must be different from the database used by the Administration Server.
- For PostgreSQL, run the following command:
  sudo -i -u postgres psql -U postgres -c "CREATE DATABASE <iam_db_name>;"
- For MariaDB, run the following command:
  sudo mysql -u root -p -e "CREATE DATABASE <iam_db_name>;"
Create an unprivileged account 'ksciam', add it to the 'kladmins' security group, and then set the 'kladmins' group as the primary group for the 'ksciam' account. To do this, sequentially run the following commands:
sudo adduser ksciam

sudo gpasswd -a ksciam kladmins

sudo usermod -g kladmins ksciam
Start upgrading Kaspersky Security Center Linux. Run one of the following commands in the command-line terminal:
- For devices running an RPM-based operating system:
  sudo yum install ./ksc64-<version number>.x86_64.rpm
- For devices running a Debian-based operating system:
  sudo apt-get install ./ksc64_<version number>_amd64.deb
After the command has been successfully executed, the /opt/kaspersky/ksc64/lib/bin/setup/postinstall.pl script is created. The message about that is displayed in the terminal.
Run the /opt/kaspersky/ksc64/lib/bin/setup/postinstall.pl script to configure the upgraded Administration Server:
sudo /opt/kaspersky/ksc64/lib/bin/setup/postinstall.pl
Read the License Agreement and Privacy Policy, which appear in the command-line terminal. If you agree with all of the terms of the License Agreement and Privacy Policy:
1. Enter Y to confirm that you have fully read, understood, and accept the terms and conditions of the EULA.
2. Enter Y again to confirm that you have fully read, understood, and accept the Privacy Policy that describes the handling of data.
Installation of the application on your device will continue after you have entered Y twice.
Enter 1 to select the standard Administration Server installation mode.
The picture below shows the last two steps.

Accepting the terms of the EULA and the Privacy Policy, and selecting the standard Administration Server installation mode in the command-line terminal
Next, the script configures and finishes upgrading the Administration Server. During the upgrade, you cannot change the Administration Server settings adjusted before the upgrade. When prompted, enter the following settings:
1. Enter the IAM Server FQDN.
2. Enter the account name to start the IAM service. The account must be a member of the entered security group. By default, the ksciam account is used.
3. Select the DBMS that you installed to work with the IAM service:
  - If you installed MySQL or MariaDB, enter 1.
  - If you installed PostgreSQL or Postgres Pro, enter 2.
4. Enter the IAM DBMS address to be used by the IAM service.
5. Enter the IAM DBMS port number. This port is used to communicate with the IAM service. By default, the following ports are used:
  - Port 3306 for MySQL or MariaDB
  - Port 5432 for PostgreSQL or Postgres Pro
6. Enter the IAM database name to be used by the IAM service. The name of the database used by IAM service should be different from database used by the Administration Server.
7. Enter the DBMS login and password to be used by the IAM service.
Upgrade Kaspersky Security Center Web Console to a new version.
For devices on which the earlier version of Network Agent was installed, create and run the task for remote installation of the new version of Network Agent.
We recommend that you upgrade the Network Agent for Linux to the same version as Kaspersky Security Center Linux.

After completion of the remote installation task, the Network Agent version is upgraded.

Run the following commands on Linux-based assets to remove dependencies that are no longer needed:
- For Debian-based assets, run either of the following commands:
  sudo apt-get -y autoremove
  
  sudo apt -y autoremove
- For RPM-based assets, run either of the following commands:
  sudo dnf autoremove
  
  sudo yum autoremove