Starting with version 4.2, Kaspersky Industrial CyberSecurity for Nodes includes the built-in Endpoint Agent agent (hereinafter also referred to as the "built-in agent") to support Detection and Response solutions. You no longer need a separate Kaspersky Endpoint Agent application to work with these solutions. When you deploy Kaspersky Industrial CyberSecurity for Nodes on computers that have Kaspersky Endpoint Agent installed, Detection and Response solutions will continue working with Kaspersky Industrial CyberSecurity for Nodes, and the Kaspersky Endpoint Agent application is removed from the computer.
Migrating the [KICS+KEA] configuration to [KICS+built-in agent] involves the following steps:
Upgrade all Kaspersky Security Center components to version 14.2 or higher, including Network Agent on user computers.
If you are installing the application, in the installation package settings or in the Setup Wizard, along with other required components, select Full functionality → Endpoint Agent.
If you update the application, Kaspersky Industrial CyberSecurity for Nodes supports automatic component selection on a computer with Kaspersky Endpoint Agent installed. The automatic selection of components depends on the permissions of the user account that is upgrading the application.
If you are upgrading Kaspersky Industrial CyberSecurity for Nodes using the EXE or MSI file under the system account (SYSTEM), Kaspersky Industrial CyberSecurity for Nodes gains access to current licenses of Kaspersky solutions. Therefore, if the computer has, for example, Kaspersky Endpoint Agent installed and the EDR Optimum solution activated, the Kaspersky Industrial CyberSecurity for Nodes installer automatically configures the set of components and selects the EDR Optimum component. This makes Kaspersky Industrial CyberSecurity for Nodes switch to using the built-in agent and removes Kaspersky Endpoint Agent. Running the MSI installer under the system account (SYSTEM) is usually performed when upgrading via the Kaspersky update service (SMU) or when deploying an installation package via Kaspersky Security Center.
If you are upgrading Kaspersky Industrial CyberSecurity for Nodes using an MSI file under a non-privileged user account, Kaspersky Industrial CyberSecurity for Nodes lacks access to current licenses of Kaspersky solutions. In this case, Kaspersky Industrial CyberSecurity for Nodes automatically selects components based on Kaspersky Endpoint Agent configuration. After that Kaspersky Industrial CyberSecurity for Nodes switches to using the built-in agent and removes Kaspersky Endpoint Agent.
If you use a common Kaspersky Endpoint Detection and Response Optimum license to activate Kaspersky Industrial CyberSecurity for Nodes and Kaspersky Endpoint Agent, EDR Optimum functionality will be activated automatically after upgrading the application to version 4.5. You do not need to do anything else.
If you use a stand-alone Kaspersky EDR Optimum Add-on license to activate EDR Optimum functionality, you must make sure that the EDR Optimum Add-on key is added to the Kaspersky Security Center repository and the automatic license key distribution functionality is enabled. After you upgrade the application to version 4.5, EDR Optimum functionality is activated automatically.
If you use a Kaspersky Endpoint Detection and Response Optimum license to activate Kaspersky Endpoint Agent, and a different license to activate Kaspersky Industrial CyberSecurity for Nodes, you must replace the Kaspersky Industrial CyberSecurity for Nodes key with the common Kaspersky Endpoint Detection and Response Optimum key. You can replace the key using the Add key task.
In the Kaspersky Security Center Web Console, upgrade the Kaspersky Industrial CyberSecurity for Nodes web plug-in to version 4.5.
Use the Policy and Task Migration Wizard to migrate Kaspersky Endpoint Agent settings to Kaspersky Industrial CyberSecurity for Nodes.