Known issues

Kaspersky Security Center Linux has the following limitations, which are not critical to operation of the application:

• When attempting to modify a protected user account, clicking the Cancel button in the Account protection credential entry window results in an error.
• Opening the port for mobile devices in the Administration Server policy properties does not enable the Mobile Device Management feature and does not trigger the generation of a mobile certificate. To enable the Mobile Device Management feature, the port for mobile devices must be opened in the Administration Server properties.
• For a user who has the User cannot change password option enabled in account properties in Active Directory, the Reset password response action in Active Directory will not be executed. The domain controller administrator has to either disable the User cannot change password option for this user or manually reset the password. This issue occurs if you have the Kaspersky Next XDR Optimum license, integration with Active Directory is enabled, and the user is included in an Active Directory security group.
• If the user has the Password never expires option enabled in account properties in Active Directory, then after executing the Reset password response action, the Password never expires option is disabled, and the user will be required to change their domain password at the next login. This issue occurs if you have the Kaspersky Next XDR Optimum license, integration with Active Directory is enabled, and the user is included in an Active Directory security group.
• Proxy server connection for Kaspersky Security Center Web Console and management web plug-ins is established only if the proxy server supports basic-authentication.

• An error occurs when you click the Cancel button in the Account protection window.
• When you run the Uninstall application remotely task to uninstall Network Agent from a device that is running an operating system with the Arm architecture and that also has an unsynchronized time with the Administration Server, the task status does not change from Running to Completed, even after Network Agent has been successfully uninstalled from the device. To resolve this issue, synchronize the time on the device with the installed Network Agent and the time on the device with the Administration Server before running the Uninstall application remotely.
• A managed device cannot connect to KSN through the KSN Proxy service if Kaspersky Security Center Linux is installed on a device that has cyrillic symbols in its name.
• Network Agent does not restart after killing its process on a managed device running CentOS 6.6.
• If you create a task with the Every N days and By days of week scheduling settings in Kaspersky Security Center Linux 15.2 Web Console, and then open the task in earlier versions of Kaspersky Security Center Web Console or Kaspersky Security Center Linux Administration Console (for example, when the task is also applied on the secondary Administration Servers which can be both Linux-based and Windows-based), the scheduling settings may be displayed incorrectly, or an error may occur.
• If you create the Change account password (Linux only) task for a user and enable the Set as a one-time password (the user must change the password after the first login) option, the user cannot sign in to Kaspersky Security Center Web Console.
• When you import the Download updates to the repositories of distribution points or Update verification task the Select devices to which the task will be assigned option is enabled. These tasks cannot be assigned to a device selection or specific devices. If you assign the Download updates to the repositories of distribution points or Update verification task to specific devices, the task will be imported incorrectly.
• Kaspersky Endpoint Security for Windows does not support the KSN Proxy service if the Use HTTPS option is enabled in the KSN Proxy settings of the Administration Server properties, and the Administration Server address contains non-Latin characters.
• If an application from the Applications registry section was detected on a Linux device, the application properties do not contain information about related executable files.
• In reports with a letter format, a page break may cut a text line horizontally.
• A managed device that has more than one network adapter sends Administration Server information about the MAC address of the network adapter that is not the one that is used to connect to Administration Server.
• When the Execute scripts remotely task starts, you cannot change the account it is assigned to. To change the account the task is assigned to, stop the task in the task settings and create it again with the correct account details.
• The Change account password task may not work correctly if SELinux is enabled on the user device. For more information on disabling SELinux, refer to the relevant user guide for your operating system.

  A system for controlling access of processes to operating system resources, which is based on security policies.

• Failover cluster deployment fails when you have either both arping and iputils-arping packages or only the arping package installed. Before deploying a failover cluster, ensure that you only have the iputils-arping package installed on both nodes.
• If Kaspersky Security Center Linux Administration Server does not start after installation and the operating system log contains error 213/SECUREBITS related to kladminserver_srv.service, execute the following commands as a superuser:

  mkdir -p /etc/systemd/system/kladminserver_srv.service.d

  echo "[Service]" > /etc/systemd/system/kladminserver_srv.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/kladminserver_srv.service.d/override.conf

  mkdir -p /etc/systemd/system/klwebsrv_srv.service.d

  echo "[Service]" > /etc/systemd/system/klwebsrv_srv.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/klwebsrv_srv.service.d/override.conf

  If Kaspersky Security Center Web Console does not start after installation and the operating system log contains error 213/SECUREBITS related to KSCWebConsole.service, execute the following commands as a superuser:

  mkdir -p /etc/systemd/system/KSCSvcWebConsole.service.d

  echo "[Service]" > /etc/systemd/system/KSCSvcWebConsole.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/KSCSvcWebConsole.service.d/override.conf

  mkdir -p /etc/systemd/system/KSCWebConsoleManagement.service.d

  echo "[Service]" > /etc/systemd/system/KSCWebConsoleManagement.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/KSCWebConsoleManagement.service.d/override.conf

  mkdir -p /etc/systemd/system/KSCWebConsoleMessageQueue.service.d

  echo "[Service]" > /etc/systemd/system/KSCWebConsoleMessageQueue.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/KSCWebConsoleMessageQueue.service.d/override.conf

  mkdir -p /etc/systemd/system/KSCWebConsoleNATS.service.d

  echo "[Service]" > /etc/systemd/system/KSCWebConsoleNATS.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/KSCWebConsoleNATS.service.d/override.conf

  mkdir -p /etc/systemd/system/KSCWebConsolePlugin.service.d

  echo "[Service]" > /etc/systemd/system/KSCWebConsolePlugin.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/KSCWebConsolePlugin.service.d/override.conf

  mkdir -p /etc/systemd/system/KSCWebConsole.service.d

  echo "[Service]" > /etc/systemd/system/KSCWebConsole.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/KSCWebConsole.service.d/override.conf

  If the kliam_srv service does not start after installation and the operating system log contains the 213/SECUREBITS error related to the service, execute the following commands as a superuser:

  mkdir -p /etc/systemd/system/kliam_srv.service.d

  echo "[Service]" > /etc/systemd/system/kliam_srv.service.d/override.conf

  echo "AmbientCapabilities=CAP_IPC_LOCK" >> /etc/systemd/system/kliam_srv.service.d/override.conf

Page top