Installing the application locally using the Wizard
The interface of the application Setup Wizard consists of a sequence of windows corresponding to the application installation steps.
To install the application or upgrade the application from a previous version using the Setup Wizard:
- Copy the distribution kit folder to the user's computer.
- Run setup_kes.exe.
The Setup Wizard starts.
Preparing for installation
Before installing Kaspersky Endpoint Security on a computer or upgrading it from a previous version, the following conditions are checked:
- Presence of installed incompatible software (the list of incompatible software is available in the incompatible.txt file that is included in the distribution kit).
- Whether or not the hardware and software requirements are met.
- Whether or not the user has the rights to install the software product.
If any one of the previous requirements is not met, a relevant notification is displayed on the screen. For example, a notification about incompatible software (see the figure below).
Removing incompatible software
If the computer meets the listed requirements, the Setup Wizard searches for Kaspersky applications that could lead to conflicts when running at the same time as the application being installed. If such applications are found, you are prompted to remove them manually.
If the detected applications include previous versions of Kaspersky Endpoint Security, all data that can be migrated (such as activation data and application settings) is retained and used during installation of Kaspersky Endpoint Security 12.4 for Windows, and the previous version of the application is automatically removed. This applies to the following application versions:
- Kaspersky Endpoint Security 11.7.0 for Windows (build 11.7.0.669).
- Kaspersky Endpoint Security 11.8.0 for Windows (build 11.8.0.384).
- Kaspersky Endpoint Security 11.9.0 for Windows (build 11.9.0.351).
- Kaspersky Endpoint Security 11.10.0 for Windows (build 11.10.0.399).
- Kaspersky Endpoint Security 11.11.0 for Windows (build 11.11.0.452).
- Kaspersky Endpoint Security 12.0 for Windows (build 12.0.0.465).
- Kaspersky Endpoint Security 12.1 for Windows (build 12.1.0.506).
- Kaspersky Endpoint Security 12.2 for Windows (build 12.2.0.462).
- Kaspersky Endpoint Security 12.3 for Windows (build 12.3.0.493).
Configuration of Kaspersky Endpoint Security
Choosing the configuration of the application
Full functionality. The default configuration. This configuration lets you use all components of the application, including components that provide support for Detection and Response solutions. This configuration is used for comprehensive protection of the computer from a variety of threats, network attacks, and fraud. You can select the components that you want to install at the next step of the Setup Wizard.
Endpoint Detection and Response Agent. In this configuration, you can only install the components that provide support for Detection and Response solutions: Endpoint Detection and Response (KATA) or Managed Detection and Response. This configuration is needed if a third-party Endpoint Protection Platform (EPP) is deployed in your organization alongside a Kaspersky Detection and Response solution. This makes Kaspersky Endpoint Security in the Endpoint Detection and Response Agent configuration compatible with third-party EPP applications.
Kaspersky Endpoint Security components
During the installation process, you can select the components of Kaspersky Endpoint Security that you want to install (see the figure below). The File Threat Protection component is a mandatory component that must be installed. You cannot cancel its installation.
Selecting application components to install
By default, all application components are selected for installation except the following components:
You can change the available application components after the application is installed. To do so, you need to run the Setup Wizard again and choose to change the available components.
If you need to install Detection and Response components, Kaspersky Endpoint Security supports the following configurations:
- Endpoint Detection and Response Optimum only
- Endpoint Detection and Response Expert only
- Endpoint Detection and Response (KATA) only
- Kaspersky Sandbox only
- Endpoint Detection and Response Optimum and Kaspersky Sandbox
- Endpoint Detection and Response Expert and Kaspersky Sandbox
- Endpoint Detection and Response (KATA) and Kaspersky Sandbox
Kaspersky Endpoint Security verifies the selection of components before installing the application. If the selected configuration of Detection and Response components is not supported, Kaspersky Endpoint Security cannot be installed.
Advanced settings
Advanced application installation settings
Protect the application installation process. Installation protection includes protection against replacement of the distribution package with malicious applications, blocking access to the installation folder of Kaspersky Endpoint Security, and blocking access to the system registry section containing application keys. However, if the application cannot be installed (for example, when performing remote installation with the help of Windows Remote Desktop), you are advised to disable protection of the installation process.
Ensure compatibility with Citrix PVS. You can enable support of Citrix Provisioning Services to install Kaspersky Endpoint Security to a virtual machine.
Add the path to the file avp.com to the system variable %PATH%. You can add the installation path to the %PATH% variable for convenient use of the command line interface.