Migration to Kaspersky Security Center Linux
Following this scenario, you can transfer the administration group structure, included managed devices and other group objects (policies, tasks, global tasks, tags, and device selections) from Kaspersky Security Center Windows under management of Kaspersky Security Center Linux.
Limitations:
- Migration is only possible from Kaspersky Security Center 14.2 Windows to Kaspersky Security Center Linux starting from version 15.
- You can perform this scenario only by using Kaspersky Security Center Web Console.
Before you begin, learn more about features and limitations of Kaspersky Security Center Linux:
- Functional differences between Kaspersky Security Center Windows and Kaspersky Security Center Linux
- List of Kaspersky applications supported by Kaspersky Security Center Linux
Stages
The migration scenario proceeds in stages:
- Choose a migration method
You migrate to Kaspersky Security Center Linux through the Migration wizard. The Migration wizard steps depend on whether or not Administration Servers of Kaspersky Security Center Windows and Kaspersky Security Center Linux are arranged into a hierarchy:
- Migration by using a hierarchy of Administration Servers
Choose this option if Administration Server of Kaspersky Security Center Windows acts as secondary to Administration Server of Kaspersky Security Center Linux. You manage the migration process and switch between Servers within a single instance of Kaspersky Security Center Web Console. If you prefer this option, you can arrange Administration Servers into a hierarchy to simplify the migration procedure. To do this, create the hierarchy before starting the migration.
- Migration by using an export file (ZIP archive)
Choose this option if Administration Servers of Kaspersky Security Center Windows and Kaspersky Security Center Linux are not arranged into a hierarchy. You manage the migration process with two instances of Kaspersky Security Center Web Console—an instance for Kaspersky Security Center Windows and another one for Kaspersky Security Center Linux. In this case, you will use the export file that you created and downloaded during the export from Kaspersky Security Center Windows and import this file to Kaspersky Security Center Linux.
If at stage 5 you do not want to re-install Network Agent as it may take a long time, you can back up the certificate and private key of Kaspersky Security Center Windows Administration Server by running the klbackup utility with -cert_only parameter. Then at stage 5 you have to restore the certificate and private key.
- Migration by using a hierarchy of Administration Servers
- Export data from Kaspersky Security Center Windows
Open Kaspersky Security Center Windows, and then run the Migration wizard.
- Import data to Kaspersky Security Center Linux
Continue the Migration wizard to import the exported data to Kaspersky Security Center Linux. If the Servers are arranged into a hierarchy, the import starts automatically after a successful export within the same wizard. If the Servers are not arranged into a hierarchy, you continue the Migration wizard after switching to Kaspersky Security Center Linux.
- Perform additional actions to transfer objects and settings from Kaspersky Security Center Windows to Kaspersky Security Center Linux manually (optional step)
You might also want to transfer the objects and settings that cannot be transferred through the Migration wizard. For example, you could additionally do the following:
- Transfer the license keys used by Administration Server and managed applications
- Configure global tasks of Administration Server
- Configure Network Agent policy settings
- Create installation packages of applications
- Create virtual Servers
- Assign and configure distribution points
- Configure device moving rules
- Configure rules for auto-tagging devices
- Create application categories
- Move the imported managed devices under management of Kaspersky Security Center Linux
To complete the migration, move the imported managed devices under management of Kaspersky Security Center Linux. In the current version of Kaspersky Security Center Linux, you can do it by one of the following methods:
- Through the klmover utility
Use the klmover utility and specify the connection settings for the new Administration Server.
- Through installation or re-installation of Network Agent on the managed devices
Create a new Network Agent installation package and specify the connection settings for the new Administration Server in the installation package properties. Use the installation package to install Network Agent on the imported managed devices through a remote installation task. For more information, see Switching managed devices under management of Kaspersky Security Center Linux.
You can also create and use a stand-alone installation package to install Network Agent locally.
- Through restoring the certificate and private key of Administration Server from a backup copy.
Assign the same IP address to the device with Administration Server of Kaspersky Security Center Linux as on Administration Server of Kaspersky Security Center Windows. Run the klbackup utility with
-cert_only
parameter to restore the Administration Server certificate and private key from the backup copy which you saved at stage 2. In the command line, execute the following command:/opt/kaspersky/ksc64/sbin/klbackup -path /
path to the backup copy of Administration Server Certificate
/ -restore -cert_only
.
- Through the klmover utility
- Update Network Agent to the latest version
We recommend that you upgrade the Network Agent for Linux to the same version as Kaspersky Security Center.
- Make sure the managed devices are visible on the new Administration Server
On Kaspersky Security Center Linux Administration Server, open the managed devices list (Assets (Devices) → Managed devices), and check the values in the Visible, Network Agent is installed, and Last connected to Administration Server columns.
Other methods of data migration
Besides the Migration wizard, there are other methods to transfer your current objects, but these methods allow you to transfer only policies and tasks:
- Export the tasks from Kaspersky Security Center Windows, and then import the tasks to Kaspersky Security Center Linux.
- Export specific policies from Kaspersky Security Center Windows, and then import the policies to Kaspersky Security Center Linux. The related policy profiles are exported and imported together with the selected policies.