Kaspersky Corporate App Catalog

Installing the solution

Installation of Corporate App Catalog and Corporate App Catalog Management Console can be performed by using the distribution package. The distribution package includes the following components:

• Corporate App Catalog
• Corporate App Catalog Management Console
• Apache server

  If the solution installation via the setup wizard completes with any errors, or if you already have your own Apache server of version 2.4 or later, you can manually configure the Apache server.

Requirements and prerequisites

• The host computer on which the solution should be deployed must meet the following hardware and software requirements.
• Installation requires local administrator rights on the host computer.
• Before installing the solution, you must install and configure Kaspersky Security Center Administration Server on the same network as the host computer. On Administration Server, you must configure users or import them from Active Directory and grant rights to the added users. For more details on Administration Server installation and configuration, please refer to Kaspersky Security Center Windows Help and Kaspersky Security Center Linux Help.
• Before installing the solution, you must install the MMC-based Administration Console of Kaspersky Security Center on the same host computer.

Step 1. Run setup wizard

Copy the Install_<version>.exe file to the required folder on the host computer and run the file with local administrator rights.

Corporate App Catalog Management Console Setup Wizard starts.

On the welcome wizard screen, click Next.

Step 2. Accept License Agreement

On this wizard page, read and accept the terms and conditions of the License Agreement and click Next.

Step 3. Select components for installation

On this wizard page, select components to be installed and their destination folders.

Corporate App Catalog Management Console is always installed. You can exclude Corporate App Catalog and Apache HTTP Server from installation by selecting the following option: The app will not be installed.

If you already have your own Apache server of version 2.4 or later, you can manually configure the Apache server.

By default, the components are installed to the following folders:

• Apache server: <Disk>:\Program Files (x86)\Kaspersky Lab\Apache Server\
• Corporate App Catalog and Corporate App Catalog Management Console: <Disk>:\Program Files (x86)\Kaspersky Lab\Kaspersky Corporate App Catalog\

If these folders do not exist, they will be created automatically. You can change the destination folders by using the Browse button.

Step 4. Specify Apache server settings

If you select Apache server for installation on step 3, specify the following Apache server settings:

• DNS domain name

  The name of the DNS domain used for the operation of Corporate App Catalog and Corporate App Catalog Management Console. In this field, you must specify the external domain name assigned to your company (for example, example.com). The default value is localdomain.

• Server name

  The name of the host computer on which Corporate App Catalog and Corporate App Catalog Management Console are to be installed. In this field, you must specify the external name of the server on which the app catalog is installed (for example, appcatalogue.example.com). The default value is host.localdomain.

• Administrator's email

  The email address that will be used in the Apache server configuration file. In this field, you must specify the email address of the administrator (for example, admin@example.com). The default value is admin@localdomain.

• Port number (for Corporate App Catalog Management Console)

  The number of the port to connect the host computer to Corporate App Catalog Management Console. You can specify the value within the interval from 1024 to 65535. The default port number is 8070.

• Port number (for Corporate App Catalog)

  The number of the port to connect the host computer to Corporate App Catalog. You can specify the value within the interval from 1024 to 65535. The default port number is 8071.

  This field is displayed only if Corporate App Catalog is selected for installation.

• Use HTTPS (recommended)

  Select this check box to transmit Corporate App Catalog data over HTTPS in encrypted form. If this check box is cleared, Corporate App Catalog data is transmitted over HTTP in non-encrypted form. By default, this check box is selected.

  This check box is displayed only if Corporate App Catalog is selected for installation.

Step 5. Specify certificate for Apache server

If you select Apache server for installation on Step 3, specify the certificate that will be used to encrypt the connection between Apache server and the user's browser.

We recommend that you specify a certificate signed by a trusted certificate authority. If you select a certificate that is not signed by a trusted certificate authority or generate a new certificate signed by Kaspersky Security Center, a browser may fail to download packages or even open Corporate App Catalog. For iOS devices, you can later enable trust for the specified certificate to connect to Corporate App Catalog.

Select one of the following options:

• Select certificate file

  You can select an existing certificate file to work via HTTPS. To do this, click the Browse button and choose the file.

• Select private key file

  You can select an existing certificate using the file of its closed key to work via HTTPS. To do this, click the Browse button and choose the file.

• Create a new certificate (not recommended)

  Generates a new self-signed certificate to connect to Corporate App Catalog using HTTPS. The certificate is signed by Kaspersky Security Center.

  Corporate App Catalog uses the Apache server installation folder to store the generated certificate. By default, the certificate is located at C:\Program Files (x86)\Kaspersky Lab\Apache Server\conf\server.crt.

Step 6. Configure Kaspersky Security Center connection settings

Specify settings for connecting Corporate App Catalog Management Console to Kaspersky Security Center Administration Server:

• SSL port number

  The number of the SSL port for encrypted connection of the host computer to Administration Server. You can specify the value within the interval from 1024 to 65535. The default SSL port number is 13291.

• Administration Server address

  The address of the computer on which Administration Server is installed (for example, server.example.com). The default address is localhost.

• Configure settings for Corporate App Catalog in DMZ if needed

  If the host computer on which Corporate App Catalog and Corporate App Catalog Management Console are to be installed is in DMZ, perform the following steps:

  • If you use Kaspersky Security Center Windows:
    1. Configure a connection gateway to connect to Kaspersky Security Center Administration Server.
    2. On the computer on which Administration Server is installed, add the KLLIM folder to the system registry at the following path:
       • For 32-bit systems: HKEY_LOCAL_MACHINE\SOFTWARE\KasperskyLab\Components\34\.core\.independent\KLLIM
       • For 64-bit systems: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\KasperskyLab\Components\34\.core\.independent\KLLIM
    3. In this folder, add the LP_ConsoleMustUsePort13291 key of the DWORD (32-bit) Value type and set its value to 0.
    4. Restart Administration Server.
    5. Go back to the wizard on the host computer (step 6) and specify 13000 in the SSL port number field.
    6. Select the Connection gateway check box.
    7. Specify the Administration Server address field as follows:
       • If the Corporate App Catalog Management Console is installed on the same computer as the connection gateway, specify the address (for example, server.example.com). The default address is localhost.
       • Otherwise, specify the connection gateway address.
  • If you use Kaspersky Security Center Linux:
    1. Configure a connection gateway to connect to Kaspersky Security Center Administration Server.
    2. On the computer on which Administration Server is installed, run the following command:

       /opt/kaspersky/ksc64/sbin/klscflag -fset -pv .core/.independent -s KLLIM -n LP_ConsoleMustUsePort13291 -t d -v 0

    3. Restart Administration Server.
    4. Go back to the wizard on the host computer (step 6) and specify 13000 in the SSL port number field.
    5. Select the Connection gateway check box.
    6. Specify the Administration Server address field as follows:
       • If the Corporate App Catalog Management Console is installed on the same computer as the connection gateway, specify the address (for example, server.example.com). The default address is localhost.
       • Otherwise, specify the connection gateway address.

Step 7. Configure port for connections from Apache server

Specify the port number to receive inbound connections from Apache server. You can specify the value within the interval from 1024 to 65535. The default port number is 9000.

Port 9000 must be accessible only locally. You have to open the port if Apache server is not on the same device as Corporate App Catalog Management Console and if that device is running a Linux operating system.

Step 8. Test connection with Kaspersky Security Center

Enter credentials of the user's domain account to test the connection with Kaspersky Security Center. The username must be specified in <Domain name>\<Account name> format. The user must have read permission and the permission to connect new devices to Corporate App Catalog.

Click the Test button to test the Administration Server connection.

Step 9. Run installation

Click the Install button to run installation.

The installation process is displayed on the wizard page.

Step 10. Complete installation

Click the Exit button to complete the wizard.

By default, Corporate App Catalog Management Console is located at https://localhost:8070. By default, Corporate App Catalog is located at https://localhost:8071.