Installing Kaspersky Security Center Web Console on Astra Linux in the closed software environment mode

This section describes how to install Kaspersky Security Center Web Console Server (also referred to as Kaspersky Security Center Web Console) on the Astra Linux Special Edition operating system. Before installation, you must install a DBMS and the Kaspersky Security Center Linux Administration Server.

To install Kaspersky Security Center Web Console:

1. Make sure that the device on which you want to install Kaspersky Security Center Web Console is running one of the supported Linux distributions.
2. Read the End User License Agreement (EULA). If the Kaspersky Security Center Linux distribution kit does not include a TXT file with the text of EULA, you can download the file from the Kaspersky website. If you do not accept the terms of the License Agreement, do not install the application.
3. Create a response file that contains parameters for connecting Kaspersky Security Center Web Console to the Administration Server. Name this file ksc-web-console-setup.json and place it in the following directory: /etc/ksc-web-console-setup.json.

   Example of a response file containing the minimal set of parameters

   The set of parameters of the response file depends on the version of the Administration Server to which the Kaspersky Security Center Web Console connects.

   • Administration Server version 16 or later

     Example of a response file with the minimum set of parameters for signing in to Administration Server version 16 or later:

     {

     "address": "ksc-web-console.example.com",

     "port": 8080,

     "trusted": {

     "Administration Server with SSO": {

     "iamHost": "ksc-iam.example.com",

     "iamOAuthPort": 4444,

     "iamProxyPort": 9050,

     "iamCertPath": "/var/opt/kaspersky/klnagent_srv/iam/main_certificate.pem",

     "iamPATPath": "/var/opt/kaspersky/klnagent_srv/iam/initial_token.txt",

     "kscPort": 13299,

     "kscCertPath": "/var/opt/kaspersky/klnagent_srv/1093/cert/klserver.cer"

     }

     },

     "acceptEula": true

     }

   • Administration Server version 15.4 or earlier

     Example of a response file with the minimum set of parameters for signing in to Administration Server version 15.4 or earlier:

     {

     "address": "ksc-web-console.example.com",

     "port": 8080,

     "trusted": {

     "Administration Server without SSO": {

     "kscHost": "ksc.example.com",

     "kscPort": 13299,

     "kscCertPath": "/var/opt/kaspersky/klnagent_srv/1093/cert/klserver.cer"

     }

     },

     "acceptEula": true

     }

   You can install the Kaspersky Security Center Web Console either on the same device as the Administration Server or on a separate device. When installing Kaspersky Security Center Web Console to an external device, the Kaspersky Security Center Web Console (specified by address) and Administration Server address (specified by iamHost or kscHost) are different. Otherwise, these parameters have the same values.

   You can add multiple Administration Servers of different versions to the list of trusted servers. In this case, the Servers may use different authentication methods.

4. Open the /etc/digsig/digsig_initramfs.conf file, and then specify the following setting:

   DIGSIG_ELF_MODE=1

5. In the command line, run the following command to install the compatibility package:

   apt install astra-digsig-oldkeys

6. Create a directory for the application key:

   mkdir -p /etc/digsig/keys/legacy/kaspersky/

7. Place the application key /opt/kaspersky/ksc64/share/kaspersky_astra_pub_key.gpg in the directory created in the previous step:

   cp kaspersky_astra_pub_key.gpg /etc/digsig/keys/legacy/kaspersky/

   If the Kaspersky Security Center Linux distribution kit does not include the kaspersky_astra_pub_key.gpg application key, you can download it by clicking the link: https://media.kaspersky.com/utilities/CorporateUtilities/kaspersky_astra_pub_key.gpg.

8. Update the RAM disks:

   update-initramfs -u -k all

   Reboot the system.

9. Under an account with root privileges, use the command line to run the setup file. You receive the setup file by downloading it from the Kaspersky website.
   • To install or upgrade Kaspersky Security Center Web Console, run the following command:

     sudo dpkg -i ksc-web-console-<build_number>.x86_64.deb

   • To upgrade from a previous version of Kaspersky Security Center Web Console, run the following command:

     sudo dpkg -i ksc-web-console-<build_number>.x86_64.deb

   This starts unpacking of the setup file. Please wait until the installation is complete. Kaspersky Security Center Web Console is installed to the following directory: /var/opt/kaspersky/ksc-web-console.

10. Restart all of the Kaspersky Security Center Web Console services by running the following command:

    sudo systemctl restart KSC*

When the installation is complete, you can use your browser to open and log in to Kaspersky Security Center Web Console.

Page top