Installing Kaspersky Security Center Linux in silent mode
You can install Kaspersky Security Center Linux on Linux devices by using an answer file to run an installation in silent mode, that is, without user participation. The answer file contains a custom set of installation parameters: variables and their respective values.
Before installation:
- Install a database management system (DBMS).
- Make sure that the device on which you want to install Kaspersky Security Center Linux is running one of the supported Linux distributions.
If you use the operating system RED OS 7.3.4 or later, install the libxcrypt-compat package for the correct function of Administration Server.
To install Kaspersky Security Center Linux in silent mode:
- Read the End User License Agreement. Follow the steps below only if you understand and accept the terms of the End User License Agreement.
- Create a group 'kladmins' and an unprivileged account 'ksc', that must be a member of the 'kladmins' group. To do this, sequentially run the following commands under an account with root privileges:
# adduser ksc
# groupadd kladmins
# gpasswd -a ksc kladmins
# usermod -g kladmins ksc
- Create the answer file (in TXT format), and add a list of variables in the
VARIABLE_NAME=variable_value
format to the answer file, each one in a separate line. The answer file should include the variables listed in the table below. - Set the value of the
KLAUTOANSWERS
environment variable in the root environment containing the full name of the answer file including the path, for example, with the following command:export KLAUTOANSWERS=/tmp/ksc_install/answers.txt
- Run the Kaspersky Security Center Linux installation in silent mode—depending on your Linux distribution, run one of the following commands:
# apt install /<path>/ksc64_[
version_number
]_amd64.deb
# yum install /<path>/ksc64-[
version_number
].x86_64.rpm -y
- Create a user to work with Kaspersky Security Center Web Console. To do this, run the following command under an account with root privileges:
/opt/kaspersky/ksc64/sbin/kladduser -n ksc -p <
password
>
, where the password must contain at least 8 characters.Variables of the answer file used as parameters of Kaspersky Security Center Linux installation in silent mode
Variable name
Required
Description
Possible values
EULA_ACCEPTED
Yes
Confirms that you understand and accept the terms of the End User License Agreement.
1
PP_ACCEPTED
Yes
Confirms that you understand and accept the terms of the Privacy Policy.
1
KLSRV_UNATT_SERVERADDRESS
Yes
The Administration Server DNS-name or static IP address.
DNS name or IP address
KLSRV_UNATT_PORT_SRV
No
The Administration Server port number. Optional, default value is 14000.
Port number
KLSRV_UNATT_PORT_SRV_SSL
No
The Administration Server SSL port number. Optional, default value is 13000.
Port number
KLSRV_UNATT_PORT_KLOAPI
No
The Administration Server KLOAPI port number. Optional, default value is 13299.
Port number
KLSRV_UNATT_PORT_GUI
No
The Administration Server GUI port number. Optional, default value is 13291.
Port number
KLSRV_UNATT_NETRANGETYPE
No
The approximate number of devices that you intend to manage. Optional, default value is 1.
1
for 1 to 100 networked devices.2
for 101 to 1,000 networked devices.3
for more than 1,000 networked devices.KLSRV_UNATT_DBMS_TYPE
Yes
The database management system type: MySQL (MariaDB) or Postgres.
mysql
orpostgres
KLSRV_UNATT_DBMS_INSTANCE
Yes
The database server IP address.
IP address
KLSRV_UNATT_DBMS_PORT
Yes
The database server port. Default value for MySQL (MariaDB) is 3306; default value for Postgres is 5432.
3306
or5432
KLSRV_UNATT_DB_NAME
Yes
The database name.
kav
KLSRV_UNATT_DBMS_LOGIN
Yes
The username of a user that has access to the database.
KLSRV_UNATT_DBMS_PASSWORD
Yes
The password of a user that has access to the database.
KLSRV_UNATT_KLADMINSGROUP
Yes
The security group name for services.
kladmins
KLSRV_UNATT_KLSRVUSER
Yes
The account name to start the Administration Server service. The account must be a member of the security group specified in
KLSRV_UNATT_KLADMINSGROUP
variable.ksc
KLSRV_UNATT_KLSVCUSER
Yes
The account name to start other services. The account must be a member of the security group specified in
KLSRV_UNATT_KLADMINSGROUP
variable.ksc
If the Administration Server is to be deployed as a Kaspersky Security Center Linux failover cluster, the answer file must include the following additional variables:
KLFOC_UNATT_NODE
Yes
The node number (1 or 2).
1
or2
KLFOC_UNATT_STATE_SHARE_MOUNT_PATH
Yes
The state share mount point.
KLFOC_UNATT_DATA_SHARE_MOUNT_PATH
Yes
The data share mount point.
KLFOC_UNATT_CONN_MODE
Yes
The failover cluster connectivity mode.
VirtualAdapter
or
ExternalLoadBalancer
In case the
KLFOC_UNATT_CONN_MODE
variable hasVirtualAdapter
value, the answer file must include the following additional variables:KLFOC_UNATT_CONN_MODE_VA_NAME
Yes
The virtual network adapter name.
KLFOC_UNATT_CONN_MODE_VA_IPV4
One of these variables is required
The virtual network adapter IP address.
IP address
KLFOC_UNATT_CONN_MODE_VA_IPV6
The virtual network adapter IPv6 address.
IPv6 address