How to move the Kaspersky Security Center Administration Server or the DBMS server
Latest update: August 23, 2024
ID: 13920
Show applications and versions that this article concerns
- Kaspersky Security Center 14.2 (version 14.2.0.26967)
- Kaspersky Security Center 14 (version 14.0.0.10902)
- Kaspersky Security Center 13.2 (version 13.2.0.1511)
- Kaspersky Security Center 13.1 (version 13.1.0.8324)
- Kaspersky Security Center 13 (version 13.0.0.11247)
You need to upgrade or move the Administration Server or the Database Management System (DBMS or database) server if you want to:
- Upgrade the application or the operating system (OS) version of the Administration Server or database server.
- Change the edition or type of the DBMS.
- Change the server hardware.
To move the Administration Server or the DBMS server correctly, follow these steps:
- Learn the rules and features of moving and upgrading a server.
- Perform preliminary works.
- Follow the instructions for your scenario:
- How to upgrade the Administration Server to a newer version.
- How to change the edition or version of MS SQL.
- How to change the DBMS or Administration Server device.
Use these instructions if you need to change:- The DBMS type
- The DBMS server device
- The Administration Server device, preserving the previous network name in the OS and the node IP address
- Other scenarios.
Rules and features
- A new version of the Administration Server must not be lower than the current one.
Otherwise, the following error message will appear: “Downgrade is not supported. The version of the backup is higher than the currently installed version of Administration Server”.
- When restoring from a backup, the new database version must not be lower than the current one.
- The database and backup types must match.
- The collation settings in a previous database and a new one must match.
If these requirements are not met, the following error message will appear: “Incompatible database servers”.
- A backup of the Administration Server can be restored in a newer version of Kaspersky Security Center (KSC) or a database.
- A backup of MS SQL Express can be restored in other editions of the same DBMS type.
- Virtual machine snapshots, SQL backups, and other third-party solutions cannot be used for restoring the Administration Server and DBMS.
- It is impossible to switch an existing Administration Server installation to a new DBMS address with a database copy.
- The data initialization process takes up to 15 minutes after upgrading or restoring KSC.
During this time, the Administration Console may fail to connect and display the errors: “Failed to connect to the Administration Server” in the MMC console and “The Administration Server is temporarily unavailable” in the Web Console. If the problem persists, check the events in Kaspersky Event Log.
Preliminary works
- Review:
- Make sure that you have a distribution package for the installed version of the Administration Server and DBMS so that you can quickly revert to the previous configuration.
- Perform data backup using the standard Administration Server tools.
Be sure to remember the password set on the backup copy, as it cannot be reset.
- Save the list of stand-alone and published installation packages.
- Copy the data backup storage and the data from the Administration Server device to an external drive.
- In case of problems with the main backup copy, or if you move the objects manually, additionally export the following items:
- Administration Server certificate via creating a backup copy with a certificate only
- Policy and EPP application task for endpoint protection
- Application categories that you use
- List of all devices from the search form
- List of installed application management plug-ins
- Disc encryption keys and password
Be sure to remember the password for the encryption key file, as it cannot be reset.
How to upgrade the Administration Server to a newer version
- Upgrade KSC using this guide.
Contact Kaspersky Technical Support if the following database error occurs in the Update Installation Wizard: “Database error occurred: #1950 (˂id˃) Generic db error: ˂error_text˃”. - Check the functionality of the main Administration Server features when the data initialization in the database is complete.
- Upgrade the Network Agent version, taking into account the requirements.
How to change the edition or version of MS SQL
- Check that the selected DBMS meet the recommendations.
- Check if the hardware of the DBMS server and OS meets the requirements for the MS SQL version to be installed.
- Upgrade the MS SQL edition or version using the instructions on the Microsoft website.
- If required, increase the maximum number of stored events, taking into account the database size when upgrading from MS SQL Express to the extended edition.
How to change the DBMS or the Administration Server device
- If you need to change the DBMS type, use these instructions to make sure that moving data from the current type to a new one is supported.
Data conversion in PostgreSQL and Postgres Pro, as well as conversion from MariaDB, PostgreSQL, and Postgres Pro is not supported in KSC for Windows version 14.2.
- Create a backup copy in a selected format.
- Check that the correct type of the new DBMS is selected.
- Install and configure the new DBMS using the database configuration recommendations: MySQL, MariaDB, PostgreSQL or Postgres Pro.
For MS SQL, we strongly suggest to check that Cumulative Update 12 or the latest available update is installed.
- Remove the current version of the Administration Server from the server device and reinstall it. Another option is to disconnect the server from the network and install the Administration Server on a new device with the same network name and node IP address.
- Perform a clean installation of the Administration Server and specify the connection settings to the new DBMS with an empty database. See the detailed guide in Online Help.
- Use these instructions to restore the Administration Server data from the backup and wait for the background data import process to complete.
- Re-create and publish the stand-alone application installation packages according to the list you compiled at the preliminary stage.
- Install the plug-ins of the managed applications according to the list you compiled at the preliminary stage.
- Update the Administration Server certificate in the Web Console connection settings using these instructions.
- If required, install the Integration Server (VIIS) from the Security for Virtualization solution and perform the initial configuration to re-establish the connection to hypervisors.
Recommendations for other scenarios
- If you need to upgrade Windows on the server to a newer version, e.g. MS Windows Server 2016 to 2019, follow the instructions on the Microsoft website.
- If you need to migrate data to new Administration Server installations with a PostgreSQL or Postgres Pro database, use manual import of policies and tasks.
To re-establish connection of managed devices to the Administration Server, restore only the Administration Server certificate from the backup and save the previous network settings, name and IP address of the server node. - To switch between different KSC installations, use the task: Changing the Administration Server for client devices.
- Use the klmover utility to restore connection to uncontrolled devices, for example, after an Administration Server failure, if it is not possible to restore from a backup.
- If you need to change the Administration Server name, use these instructions.
- You can change the IP address on the active Administration Server only if you connect to the Administration Server using the name.
- Use these instructions if you connect to the Administration Server using the IP address, but switch to using the name in the server connection address.
- If the infrastructure does not have DNS, add an additional network card to the server with the new IP address and switch the managed devices to the new address using the task: Changing the Administration Server for client devices. Then you can delete the old network on the server.
What to do if you experience issues
If all the requirements have been met, preliminary works have been made, and moving the server has been performed as instructed, but one of the following errors has occurred:
- Error when recovering the database. Repeat the recovery in silent mode with the settings of log entries and import tracing.
- "-logfile c:\klbackup-log.txt” enables logging of the import to a file.
- "-tl 4 -tf c:\klbackup-trace.txt” enables tracing of level 4 to a file.
Example of the command:
"%ProgramFiles(x86)%\Kaspersky Lab\Kaspersky Security Center\klbackup.exe" -path C:\klbackup2024-01-02#11-30-15 -logfile c:\klbackup-log.txt -tl 4 -tf c:\klbackup-trace.txt -restore
- If you encounter other errors or issues, submit a request to Kaspersky Technical Support through Kaspersky CompanyAccount. In your request, describe your issue and include information about the database location (local or remote), type, and edition. Attach:
- Screenshot of the issue and the text of the error that occurs
- Configuration database file
- GetSystemInfo report with the Include Windows Event Logs option enabled