Kaspersky Security Center 14 Windows

Migration to Kaspersky Security Center Linux by using Administration Server data backup

You can use a data backup to move the Kaspersky Security Center Windows Administration Server data under management of Kaspersky Security Center Linux. Before the migration, make sure that necessary features of Kaspersky Security Center Windows are supported in Kaspersky Security Center Linux.

Limitations:

• Migration by using Administration Server data backup is supported only for migration to Kaspersky Security Center Linux 15.2 or later from any supported version of Kaspersky Security Center Windows.
• The DBMS type used for Kaspersky Security Center Linux must match the DBMS type in the backup from Kaspersky Security Center Windows.

  The exception is when you use Microsoft SQL Server as a DBMS for Kaspersky Security Center Windows. Since Kaspersky Security Center Linux does not support Microsoft SQL Server, you can migrate Administration Server data stored in the Microsoft SQL Server database to MySQL or MariaDB.

• If you use MySQL or MariaDB as a DBMS for Kaspersky Security Center Windows and for Kaspersky Security Center Linux, the lower_case_table_names parameter must match for the current and new DBMSs.

  Before you create a data backup, check the lower_case_table_names parameter. Then when installing MySQL or MariaDB for Kaspersky Security Center Linux, you must set this parameter to the same value as specified for this parameter for Windows.

To migrate Administration Server data to Kaspersky Security Center Linux:

1. Create an up-to-date backup copy of Administration Server data.
   • For migration to the same DBMS type: use the klbackup utility or a data backup task on the device that has Administration Server installed.
   • For migration of Microsoft SQL Server to MySQL or MariaDB: use the klbackup utility with the Migrate to MySQL/MariaDB format option enabled.
2. On a previous device, disconnect Administration Server from the network.
3. Select a new device on which to install the Administration Server. This device must meet the hardware and software requirements. Also, check that the ports used on Administration Server are available.
4. Assign the same address to the new device.

   The new Administration Server can be assigned the NetBIOS name, FQDN, and static IP address. It depends on which Administration Server address was set in the Network Agent installation package when Network Agents were deployed. Alternatively, you can use the connection address that determines the Administration Server to which Network Agent connects (you can obtain this address on managed devices by using the klnagchk utility).

5. Select the DBMS type that provides optimum performance. Take into account the number of networked devices, network topology, and workload on the network. You can choose from one of the supported DBMSs.
6. Install the DBMS according to the DBMS type selected when creating a backup. For information about how to install the selected DBMS, refer to its documentation.

   A new database version must not be lower than the current one.

7. Configure the DBMS for working with Kaspersky Security Center Linux.
8. Install Kaspersky Security Center Linux on the new device.
9. After the installation is complete, recover Administration Server data on the new device by using the klbackup utility.
10. Install Kaspersky Security Center Web Console.

    If Kaspersky Security Center Web Console was installed earlier, reinstall it with the same response file.

11. Open Kaspersky Security Center Web Console and connect to the Administration Server.

    The data initialization process usually takes up to 15 minutes after restoring Administration Server data, but the time depends on the hardware performance and the size of Administration Server data. During this time, Kaspersky Security Center Web Console may fail to connect and display the errors.

12. Check the functionality of the main Administration Server features when the data initialization in the database is complete. Verify that Administration Server synchronizes with managed devices and Administration Server data is recovered.
13. Poll domain controllers to restore information about the domain structure, user accounts, security groups, and DNS names of the devices that are included in the domains.
14. If necessary, uninstall the Administration Server and the database server from the previous device.

    There must not be multiple Administration Servers on the same network with the same connection address and Administration Server certificate.

The administrator has access to Administration Server data and managed devices that there was access for in Kaspersky Security Center Windows, taking into account the functionality supported in Kaspersky Security Center Linux.