Upgrading Central Node installed on a server from version 6.1 to 7.0.3

Before installing the application upgrade package, it is recommended to first create a backup of the current state of each Central Node server to be updated and download it to the hard drive from the application administrator menu. If installing an application upgrade package fails, or if you need to reinstall Kaspersky Anti Targeted Attack Platform, you can use the backup copy of the application.
We also recommend learning about the limitations of the version to which you are upgrading.

The hardware requirements for 7.0 Central Node servers are different from the hardware requirements of the previous version of the component. We strongly recommend making sure that your server configuration satisfies the requirements listed in the Calculations for the Central Node component section.

If you are using the distributed solution and multitenancy mode, you must complete the steps to prepare for installing the upgrade before proceeding with the upgrade.

The upgrade is delivered as an upgrade package. The package is included in the application distribution kit.

All steps described below must be performed on servers in Technical Support Mode after elevating user privileges using the sudo -i command.

To upgrade Central Node installed on a server:

  1. Place the application upgrade package on the Central Node server in the /data directory.
  2. Sign in to the management console of the Central Node server where you want to perform the upgrade via SSH or through the terminal.
  3. Make sure that the /dev/sda2 file system has more than 100 GB of free space.
  4. If you do not use mirrored traffic processing from SPAN ports (including the application using the KEDR license key), execute the command:

    kata-enable-span

    If processing of mirrored traffic from SPAN ports is disabled, the upgrade fails.

  5. Unpack the update archive:

    tar xvf /data/kata-upgrade-7.0.3.520-x86_64_en-ru.tar.gz -C /data/

  6. Install the upgrade package by running the following commands:

    cd /data/upgrade/

    ./run_kata_upgrade.py

    The user name entry window is displayed.

  7. In the displayed window, in the Username field, enter the name of the user with administrator rights, select the OK button and press Enter.

    Default value: admin.

  8. In the displayed window, in the Password field, enter the password of the user with administrator rights, select the OK button and press Enter.

    This opens the window for entering the path to the update archive.

  9. This opens a window; in that window, in the Data directory field, enter the path to the update archive, select the OK button and press Enter.

    Default value: /data/upgrade

  10. In the displayed window, select the localization language for the NDR functionality.

    Parts of the application related to NDR functionality will be displayed in the selected language.

    After some time, the console will display a message prompting you to power off the server.

  11. After the message prompting you to power off the server is displayed, run the following command:

    poweroff

  12. Mount the Ubuntu-based iso image of Kaspersky Anti Targeted Attack Platform 7.0.3 (kata-cn-7.0.3.520-inst.x86_64_en-ru.iso). If you are using Kaspersky Anti Targeted Attack Platform based on the Astra Linux operating system, follow these instructions to create an iso image.
  13. Boot from the device that has the mounted iso image.
  14. In the GRUB menu, select Upgrade KATA 7.0.
  15. Follow the remaining steps of the wizard to complete the upgrade on the server.

The Central Node component is upgraded.

After upgrading, you must log in again to the Central Node server management console over SSH or through the terminal.

If you have upgraded your PCN to version 7.0.3 and do not intend to upgrade the application to version 7.1.1 for six months or more, we strongly recommend applying the fix_old_slots.sh script after the upgrade to avoid overfilling the PCN server disk. You can get the script file and instructions for its use by contacting the Technical Support Service.

Embedded Sensor may be missing after upgrading to version 7.0 a Central Node component that had been used in the distributed solution or multitenancy mode.

To remove the limitation:

  1. Sign in to the management console of the Central Node server on which you want to upgrade the Embedded Sensor over SSH or using a terminal.
  2. When the system prompts you, enter the administrator user name and the password that was specified during installation of the component.

    The application component administrator menu is displayed.

  3. In the application administrator menu, select Technical Support Mode.
  4. Press ENTER.
  5. This opens the Technical Support Mode confirmation window.
  6. Confirm that you want to manage the application in Technical Support Mode. To do so, select Yes and press ENTER.
  7. Run the following command:

    docker service update --cap-add=CAP_DAC_OVERRIDE --cap-add=CAP_IPC_LOCK --cap-add=CAP_SYS_PTRACE kata_product_main_1_preprocessor_span

The Embedded Sensor is restored.

Page top