How to manage private patches in Kaspersky Endpoint Security version 10.2.2.10535 (and later)
This article concerns the following versions of Kaspersky Endpoint Security 10 for Windows:
- Service Pack 2 Maintenance Release 4 (version 10.3.3.304)
- Service Pack 2 Maintenance Release 3 (version 10.3.3.275)
- Service Pack 2 Maintenance Release 2 (version 10.3.0.6294)
- Service Pack 2 Maintenance Release 1 (version 10.3.0.6294)
- Service Pack 2 (version 10.3.0.6294)
- Service Pack 1 Maintenance Release 4 (version 10.2.6.3733)
- Service Pack 1 Maintenance Release 3 (version 10.2.5.3201)
How to create an installation package
- Open the Administration Console and proceed to Advanced → Remote installation → Installation packages.
- In the right frame, click the Create installation package button.
- Select Create installation package for specified executable file.
- Name the package and click Next.
- Click Browse and indicate the path to the patch installer.
- In the Executable file command line field, type EULA=1 /qn.
- Click Next.
- In the New Package Wizard click Next, and then Finish.
How to install the patch
To install the patch on a computer:
Locally
Using Installation Wizard:
- To run patch installation, double-click the left mouse button.
- Install application with the help of Installation Wizard
Using command prompt (installation in silent mode):
- Open cmd on a client host.
- Type msiexec /update <patch file location *.msp> EULA=1 /qn and press Enter.
Using Kaspersky Security Center 10
- Open the Administration Console and proceed to the Repositories -> Installation packages node. Right-click the created package and select Install application.
- Choose Select computers for deployment in the Computers step and press Next.
- Select target computers / groups. Click Next.
- Enable the Do not install application if it is already installed option in the Settings step. Click Next.
- In the Account step, add the user account with administrator permissions on the target computers you've just selected. Click Next.
- Complete the rest of the Wizard.
- Start installing the patch by clicking the Install application button in the installation task workbench.
The installation will stay active until the patch gets installed on all the target computers.
After installing the patch, Windows reboot (the shut down phase) takes a little longer than usual.
How to get log files of patch installation or removal
To troubleshoot issues that may occur while installing or removing the patch, get the log files.
- Open the following folder on a client host:
- Remote installation: system folder for storing temporary files (for example, C:\Windows\Temp).
- Local installation: folder for storing temporary files (for example, C:\Users\user_name\App Data\Local\Temp).
- Save MSI****.log files.
How to monitor patches on client computers
Locally
Check the version of the installed update:
- In the system tray, hover the pointer over the Kaspersky Endpoint Security icon to see the information about the current version.
- In the About widow. To open it, click the Kaspersky Lab logo in the main window of Kaspersky Endpoint Security.
- In the list of installed updates:
- Proceed to Programs and features (Start -> Control Panel -> Programs -> Programs and Features).
- Select View installed updates in the left frame.
The list contains an entry indicating the patch and related software.
Through Kaspersky Security Center 10
- Open the Administration Console and proceed to the Reports and notifications folder.
- In report properties, you should add Updates installed field into the Detail fields section.
- Generate a Report on Kaspersky Lab software versions.
To get the list of patches installed on a specific client computer:
- In the Administration Console, go to the Managed computers section.
- Open the properties of the selected computer.
- Open Applications registry.
- Select the Show updates check box. The information about installed patches will be displayed in the list.
To get the list of computers according to an installed update:
- In the Administration Console, go to Computer selections.
- In the right frame, click Advanced and select Create a selection.
- Set the name for the selection and click OK.
- Click Selection properties.
- Go to Conditions.
- In the right frame, select the created selection and click Properties.
- Open Applications registry. Set the following parameters:
- Application name: <full name or a part of the patch name (*)>
- Select the check box Find by update.
- Click Apply and OK. The search results will be displayed in the list of selected computers.
How to remove the patch
Using Uninstall Wizard
- Proceed to Programs and features (Start -> Control Panel -> Programs -> Programs and Features).
- Select View installed updates in the left frame.
- Right-click the patch, select Delete.
Using command prompt
- Open the command prompt on a client computer.
- Enter one of the following commands into the command prompt:
- The patch removal command: msiexec /i <GUID KES> MSIPATCHREMOVE={GUID PrivateFix} EULA=1 /qn;
- The command for removing the patch and installing the latest update: msiexec /i <GUID KES> MSIPATCHREMOVE={GUID PrivateFix} EULA=1 /qn;{GUID PrivateFix}
PATCH=<patch file location *.msp> EULA=1 /qn
- Press Enter.
Using Kaspersky Security Center 10
To remove the patch from all computers in the network:
- In the Administration Console, go to Advanced → Application management → Software updates.
- Open the properties of the patch you want to remove.
- Select Declined in the Update approval section.
- At the next run of an update task, the patch will be removed from all computers in the network.
To remove the patch from selected computers:
- In the Administration Console, go to Remote installation.
- Create the installation package with the *.msp file of the patch. The package must be located in the same folder as the *.msp and *.msi files of the major product version.
- В Enter the following commands for the installation file:
- Patch removal command: /i <GUID KES> MSIPATCHREMOVE={GUID of PrivateFix} EULA=1 /qn;
- The command for removing the patch and installing the latest update: /i <GUID KES> MSIPATCHREMOVE={GUID of PrivateFix} EULA=1 /qn;{GUID PrivateFix} PATCH=<patch file name *msp> EULA=1 /qn
- In the installation package properties window, click OK.
- Create the remote installation task with this installation package for the selected computers and run it to remove the patch.
How to find the patch GUID
Patch GUID
From the patch file
- Open the properties of the patch installation file.
- Open the Details tab.
- Find GUID in the Revision number line. Copy it to clipboard.
On the client computer
- Open Programs and Features (Start → Control Panel).
- In the right frame, click View installed updates.
- Press Alt.
- Open View → Choose details.
- Select the check box for Update ID and click OK.
The information about GUID will be displayed in the list of updates.
Kaspersky Endpoint Security 10 for Windows GUID
- GUID = {7A4192A1-84C4-4E90-A31B-B4847CA8E23A} for version SP1MR4 and earlier.
- GUID = {7911E943-32CC-45D0-A29C-56E6EF762275} for version SP2 and later.