Installing Kaspersky Security Center Web Console on Astra Linux in the closed software environment mode

This section describes how to install Kaspersky Security Center Web Console Server (also referred to as Kaspersky Security Center Web Console) on the Astra Linux Special Edition operating system. Before installation, you must install a DBMS and the Kaspersky Security Center Linux Administration Server.

To install Kaspersky Security Center Web Console:

1. Make sure that the device on which you want to install Kaspersky Security Center Web Console is running one of the supported Linux distributions.
2. Read the End User License Agreement (EULA). If the Kaspersky Security Center Linux distribution kit does not include a TXT file with the text of EULA, you can download the file from the Kaspersky website. If you do not accept the terms of the License Agreement, do not install the application.
3. Create a response file that contains parameters for connecting Kaspersky Security Center Web Console to the Administration Server. Name this file ksc-web-console-setup.json and place it in the following directory: /etc/ksc-web-console-setup.json.

   Example of a response file containing the minimal set of parameters

   You can sign in to Kaspersky Security Center Web Console by using the following methods:

   • By using domain authentication (single sign-on)

     Example of a response file with minimal set of parameters for signing in to Administration Server by using domain authentication (single sign-on):

     {

     "address": "ksc-web-console.example.com",

     "port": 8080,

     "trusted": {

     "Administration Server with SSO": {

     "iamHost": "ksc-iam.example.com",

     "iamOAuthPort": 4444,

     "iamProxyPort": 9050,

     "iamCertPath": "/var/opt/kaspersky/klnagent_srv/iam/main_certificate.pem",

     "iamPATPath": "/var/opt/kaspersky/klnagent_srv/iam/initial_token.txt",

     "kscPort": 13299,

     "kscCertPath": "/var/opt/kaspersky/klnagent_srv/1093/cert/klserver.cer"

     }

     },

     "acceptEula": true

     }

   • By specifying the user name and password of the domain user
   • By specifying the name and password of the internal user

     Example of a response file with minimal set of parameters for signing in to Administration Server by specifying the user name and password of the domain user or the internal user:

     {

     "address": "ksc-web-console.example.com",

     "port": 8080,

     "trusted": {

     "Administration Server without SSO": {

     "kscHost": "ksc.example.com",

     "kscPort": 13299,

     "kscCertPath": "/var/opt/kaspersky/klnagent_srv/1093/cert/klserver.cer"

     }

     },

     "acceptEula": true

     }

   You can install the Kaspersky Security Center Web Console either on the same device as the Administration Server or on a separate device. When installing Kaspersky Security Center Web Console to an external device, the Kaspersky Security Center Web Console (specified by address) and Administration Server address (specified by iamHost or kscHost) are different, otherwise these parameters have the same values.

   To support all connection methods, the response file must include the installation parameters for accessing the Administration Server with SSO domain authentication and the Administration Server without SSO domain authentication.

4. Open the /etc/digsig/digsig_initramfs.conf file, and then specify the following setting:

   DIGSIG_ELF_MODE=1

5. In the command line, run the following command to install the compatibility package:

   apt install astra-digsig-oldkeys

6. Create a directory for the application key:

   mkdir -p /etc/digsig/keys/legacy/kaspersky/

7. Place the application key /opt/kaspersky/ksc64/share/kaspersky_astra_pub_key.gpg in the directory created in the previous step:

   cp kaspersky_astra_pub_key.gpg /etc/digsig/keys/legacy/kaspersky/

   If the Kaspersky Security Center Linux distribution kit does not include the kaspersky_astra_pub_key.gpg application key, you can download it by clicking the link: https://media.kaspersky.com/utilities/CorporateUtilities/kaspersky_astra_pub_key.gpg.

8. Update the RAM disks:

   update-initramfs -u -k all

   Reboot the system.

9. Under an account with root privileges, use the command line to run the setup file. You receive the setup file by downloading it from the Kaspersky website.
   • To install or upgrade Kaspersky Security Center Web Console, run the following command:

     $ sudo dpkg -i ksc-web-console-<build_number>.x86_64.deb

   • To upgrade from a previous version of Kaspersky Security Center Web Console, run the following command:

     $ sudo dpkg -i ksc-web-console-<build_number>.x86_64.deb

   This starts unpacking of the setup file. Please wait until the installation is complete. Kaspersky Security Center Web Console is installed to the following directory: /var/opt/kaspersky/ksc-web-console.

10. Restart all of the Kaspersky Security Center Web Console services by running the following command:

    $ sudo systemctl restart KSC*

When the installation is complete, you can use your browser to open and log in to Kaspersky Security Center Web Console.

Page top