Installation and initial configuration of Kaspersky Endpoint Security

You need to prepare for installation before installing Kaspersky Endpoint Security.

The scenarios below describe how to install and perform initial configuration of Kaspersky Endpoint Security, how to install the Kaspersky Security Center Network Agent and Kaspersky Endpoint Security management plug-ins. The installation scenario depends on the mode in which you plan to use Kaspersky Endpoint Security.

Standard mode

If you plan to use Kaspersky Endpoint Security in Standard mode, the installation procedure involves the following steps:

  1. Installation and initial configuration of the Network Agent

    If you plan to manage Kaspersky Endpoint Security using Kaspersky Security Center, install and configure Kaspersky Security Center Network Agent on the protected device.

  2. Installing the Kaspersky Endpoint Security administration plug-in

    If you plan to manage Kaspersky Endpoint Security using Kaspersky Security Center, install the Kaspersky Endpoint Security administration plug-in. Depending on the console used to manage Kaspersky Security Center, the following administration plug-ins are used:

    • The Kaspersky Endpoint Security management web plug-in lets you manage the application using Kaspersky Security Center Cloud Console and Kaspersky Security Center Web Console. The web plug-in is installed on the device that has the Kaspersky Security Center Web Console installed.
    • The Kaspersky Endpoint Security administration MMC plug-in lets you manage the application using Kaspersky Security Center Administration Console. The MMC plug-in is installed on the device where Kaspersky Security Center Administration Console is installed.
  3. Installing application packages and graphical user interface

    Kaspersky Endpoint Security is distributed in the DEB and RPM packages. The application and the graphical user interface of the application are supplied as different packages. Install Kaspersky Endpoint Security and, if necessary, the graphical interface from packages in the appropriate format.

    You can perform installation in one of the following ways:

  4. Initial configuration of Kaspersky Endpoint Security

    The application needs initial configuration to prepare it for operation and enable the protection of the client device.

    If you installed Kaspersky Endpoint Security using Kaspersky Security Center, the initial configuration was performed automatically during installation in accordance with the parameters specified in the installation package. After completing the installation, go through the Getting started procedure.

    If you installed Kaspersky Endpoint Security using the command line, run the Initial Configuration Wizard and perform the initial configuration interactively or automatically.

    If initial configuration of the application has not been completed on a device, you cannot use or update the application on that device.

Light Agent mode

Using Kaspersky Endpoint Security in Light Agent mode to protect virtual environments is not supported on operating systems based on the Arm architecture.

If you plan to use Kaspersky Endpoint Security in Light Agent mode to protect virtual environments, the installation procedure involves the following steps:

  1. Installation and initial configuration of the Network Agent

    Install and configure Kaspersky Security Center Agent on virtual machines and virtual machine templates.

    If you are installing Network Agent on a template that will be used to create temporary virtual machines, it is recommended to configure settings that allow you to optimize performance on temporary virtual machines. For more details about installing on a virtual machine template, refer to the Help for Kaspersky Security for Virtualization Light Agent.

  2. Installing the Kaspersky Endpoint Security administration plug-in

    Install a Kaspersky Endpoint Security administration plug-in. Depending on the console used to manage Kaspersky Security Center, the following administration plug-ins are used:

    • The Kaspersky Endpoint Security management web plug-in lets you manage the application using Kaspersky Security Center Cloud Console and Kaspersky Security Center Web Console. The web plug-in is installed on the device that has Kaspersky Security Center Web Console installed.
    • The Kaspersky Endpoint Security administration MMC plug-in lets you manage the application using Kaspersky Security Center Administration Console. The MMC plug-in is installed on the device where Kaspersky Security Center Administration Console is installed.
  3. Installation of application packages and initial configuration of Kaspersky Endpoint Security

    Kaspersky Endpoint Security is distributed in the DEB and RPM packages. Install Kaspersky Endpoint Security from a package of the required format. The application and the graphical user interface of the application are supplied as different packages.

    The graphical interface of the application is not supported if Kaspersky Endpoint Security is used in Light Agent mode to protect virtual environments.

    You can install the application in one of the following ways:

    • Using Kaspersky Security Center.

      Before starting the installation, you need to specify the initial configuration settings in the installation package parameters or in the configuration file that is included in the installation package.

      You must select the Light Agent mode (KSVLA_MODE=Yes in the configuration file). If you are installing Kaspersky Endpoint Security on a template from which temporary virtual machines will be created, we recommend to also enable VDI protection mode to optimize the performance of the application on temporary virtual machines (VDI_MODE=Yes in the configuration file).

      The setting values are case-sensitive.

    • Using the command line. If installation is performed using the command line, the application usage mode is selected during initial configuration.
  4. Initial configuration of Kaspersky Endpoint Security

    The application needs initial configuration to prepare it for operation and enable the protection of the client device.

    If you installed Kaspersky Endpoint Security using Kaspersky Security Center, the initial configuration was performed automatically during installation in accordance with the parameters specified in the installation package. After completing the installation, go through the Getting started procedure.

    If you installed Kaspersky Endpoint Security using the command line, run the Initial Configuration Wizard and perform the initial configuration interactively or automatically. During initial configuration, select Light Agent mode in one of the following ways:

    • Enter yes at the application mode selection step of the Initial Configuration Wizard.
    • Specify the KSVLA_MODE=Yes setting in the initial configuration file.

      The setting value is case-sensitive.

    If you install Kaspersky Endpoint Security on a template that will be used to create temporary virtual machines, it is recommended to also configure the setting for optimizing the operation on temporary virtual machines. For more details about installing on a virtual machine template, refer to the Help for Kaspersky Security for Virtualization Light Agent.

    If initial configuration of the application has not been completed on a device, you cannot use or update the application on that device.

In this Help section

The installation and initial configuration of Kaspersky Security Center Network Agent

Installing Kaspersky Endpoint Security administration plug-ins

Installing and initially configuring the application using Kaspersky Security Center

Installing and initially configuring the application using the command line

Configuring allowing rules in the SELinux system

Running the application on Astra Linux OS in closed software environment mode

Configuring the OSnova operating system for the application to work

Page top