Protection components

In this section, you can select the application components that will be available. You can change the set of application components at a later time by using the Change application components task. The BadUSB Attack Prevention component, Detection and Response component, and data encryption components are not installed by default. These components can be added in the installation package settings.

If you need to install Detection and Response components, Kaspersky Endpoint Security supports the following configurations:

• Endpoint Detection and Response Optimum only
• Endpoint Detection and Response Expert only
• Endpoint Detection and Response (KATA) only
• Kaspersky Sandbox only
• Endpoint Detection and Response Optimum and Kaspersky Sandbox
• Endpoint Detection and Response Expert and Kaspersky Sandbox
• Endpoint Detection and Response (KATA) and Kaspersky Sandbox

Kaspersky Endpoint Security verifies the selection of components before installing the application. If the selected configuration of Detection and Response components is not supported, Kaspersky Endpoint Security cannot be installed.

License key

In this section, you can activate the application. To activate the application, you must select a license key. Before you do that, you must add the key to the Administration Server. For more details about adding keys to the Kaspersky Security Center Administration Server, please refer to Kaspersky Security Center Help.

Incompatible Applications

Carefully read the list of incompatible applications and allow removal of these applications. If incompatible applications are installed on the computer, installation of Kaspersky Endpoint Security ends with an error.

Installation settings

Add the path to the file avp.com to the system variable %PATH%. You can add the installation path to the %PATH% variable for convenient use of the command line interface.

Do not protect the installation process. Installation protection includes protection against replacement of the distribution package with malicious applications, blocking access to the installation folder of Kaspersky Endpoint Security, and blocking access to the system registry section containing application keys. However, if the application cannot be installed (for example, when performing remote installation with the help of Windows Remote Desktop), you are advised to disable protection of the installation process.

Ensure compatibility with Citrix PVS (this is only necessary when working with Citrix PVS). You can enable support of Citrix Provisioning Services to install Kaspersky Endpoint Security to a virtual machine.

Use Azure WVD compatibility mode. This feature allows correctly displaying the state of the Azure virtual machine in the Kaspersky Anti Targeted Attack Platform console. To monitor the performance of the computer, Kaspersky Endpoint Security sends telemetry to KATA servers. Telemetry includes an ID of the computer (Sensor ID). Azure WVD compatibility mode allows assigning a permanent unique Sensor ID to these virtual machines. If the compatibility mode is turned off, the Sensor ID can change after the computer is restarted because of how Azure virtual machines work. This can cause duplicates of virtual machines to appear on the console.

Path to application installation folder. You can change the installation path of Kaspersky Endpoint Security on a client computer. By default, the application is installed in the %ProgramFiles%\Kaspersky Lab\KES folder.

Configuration file. You can upload a file that defines the settings of Kaspersky Endpoint Security. You can create a configuration file in the local interface of the application.