About migration to Kaspersky Security Center Linux

Following this scenario, you can transfer the administration group structure, included managed devices and other group objects (policies, tasks, global tasks, tags, and device selections), from Kaspersky Security Center Windows under management of Kaspersky Security Center Linux.

Limitations:

Before you begin, learn more about the features and limitations of Kaspersky Security Center Linux:

Stages

The migration scenario proceeds in stages:

  1. Choose a migration method

    You migrate to Kaspersky Security Center Linux through the Migration wizard. The Migration wizard steps depend on whether or not Administration Servers of Kaspersky Security Center Windows and Kaspersky Security Center Linux are arranged into a hierarchy:

    • Migration by using a hierarchy of Administration Servers

      Choose this option if Administration Server of Kaspersky Security Center Windows acts as secondary to Administration Server of Kaspersky Security Center Linux. You manage the migration process and switch between Servers within a single instance of Kaspersky Security Center Web Console. If you prefer this option, you can arrange Administration Servers into a hierarchy to simplify the migration procedure. To do this, create the hierarchy before starting the migration.

    • Migration by using an export file (ZIP archive)

      Choose this option if Administration Servers of Kaspersky Security Center Windows and Kaspersky Security Center Linux are not arranged into a hierarchy. You manage the migration process with two instances of Kaspersky Security Center Web Console—an instance for Kaspersky Security Center Windows and another one for Kaspersky Security Center Linux. In this case, you will use the export file that you created and downloaded during the export from Kaspersky Security Center Windows and import this file to Kaspersky Security Center Linux.

  2. Back up the certificate and private key of Kaspersky Security Center Windows Administration Server (optional step)

    You might want to put the managed devices under the management of the Administration Server of Kaspersky Security Center Linux by restoring the certificate and private key of Administration Server from a backup copy. In this case, back up the certificate and private key of Kaspersky Security Center Windows Administration Server. Then at stage 6, restore the certificate and private key.

  3. Export data from Kaspersky Security Center Windows

    Open Kaspersky Security Center Windows, and then run the Migration wizard.

  4. Import data to Kaspersky Security Center Linux

    Continue the Migration wizard to import the exported data to Kaspersky Security Center Linux. If the Servers are arranged into a hierarchy, the import starts automatically after a successful export within the same wizard. If the Servers are not arranged into a hierarchy, you continue the Migration wizard after switching to Kaspersky Security Center Linux.

  5. Perform additional actions to transfer objects and settings from Kaspersky Security Center Windows to Kaspersky Security Center Linux manually (optional step)

    You might also want to transfer the objects and settings that cannot be transferred through the Migration wizard. For example, you could additionally do the following:

  6. Move the imported managed devices under management of Kaspersky Security Center Linux

    To complete the migration, move the imported managed devices under management of Kaspersky Security Center Linux. You can do it by one of the following methods:

    • Through the klmover utility

      Use the klmover utility and specify the connection settings for the new Administration Server.

    • Through the Change Administration Server task

      Create a Change Administration Server task, specify the imported managed devices, new Administration Server, and other task settings. Then run the task to put the managed devices under the management of the Administration Server of Kaspersky Security Center Linux.

    • Through removal (if already installed) and further installation of Network Agent on the managed devices

      Create a new Network Agent installation package and specify the connection settings for the new Administration Server in the installation package properties. Remove Network Agent on the imported managed devices, and then use the installation package to install Network Agent on the imported managed devices through a remote installation task. You can also create and use a stand-alone installation package to install Network Agent locally. For more information, see Switching managed devices under management of Kaspersky Security Center Linux.

    • Through restoring the certificate and private key of Administration Server from a backup copy (only for migration to Kaspersky Security Center Linux 15.1 or later)

      Assign the same network address to the device with Administration Server of Kaspersky Security Center Linux as on Administration Server of Kaspersky Security Center Windows. Run the klbackup utility with the -cert_only parameter, to restore the Administration Server certificate and private key from the backup copy that you saved at stage 2. In the command line, execute the following command: /opt/kaspersky/ksc64/sbin/klbackup -path <path to the backup copy of Administration Server certificate> -restore -cert_only. For more information, see Using the klbackup utility to switch managed devices under management of another Administration Server.

  7. Update Network Agent to the latest version

    We recommend that you upgrade the Network Agent for Linux to the same version as Kaspersky Security Center.

  8. Make sure the managed devices are visible on the new Administration Server

    On Kaspersky Security Center Linux Administration Server, open the managed devices list (Assets (Devices)Managed devices), and check the values in the Visible, Network Agent is installed, and Last connected to Administration Server columns.

Other methods of data migration

Besides the Migration wizard, you can also transfer specific tasks and policies:

See also:

Exporting group objects from Kaspersky Security Center Windows

Page top