Creating the task for downloading updates to the repository of the Administration Server

The Download updates to the repository of the Administration Server task of the Administration Server is created automatically by the Kaspersky Security Center quick start wizard. You can create only one Download updates to the repository of the Administration Server task. Therefore, you can create a Download updates to the repository of the Administration Server task only if this task was removed from the Administration Server tasks list.

To create a Download updates to the repository of the Administration Server task:

In the console tree, select the Tasks folder.
Start creation of the task in one of the following ways:
- In the context menu of the Tasks folder in the console tree, select New → Task.
- In the workspace of the Tasks folder, click the Create a task button.
The New task wizard starts. Follow the steps of the wizard.
On the Select the task type page of the wizard, select Download updates to the Administration Server repository.
On the Settings page of the wizard, specify the task settings as follows:
- Sources of updates
  The following resources can be used as a source of updates for the Administration Server:
  - Kaspersky update servers
    HTTP(S) servers at Kaspersky from which Kaspersky applications download database and application module updates. By default, the Administration Server communicates with Kaspersky update servers and downloads updates by using the HTTPS protocol. You can configure the Administration Server to use the HTTP protocol instead of HTTPS.
    
    Selected by default.
  - Primary Administration Server
    This resource applies to tasks created for a secondary or virtual Administration Server.
  - Local or network folder
    A local or network folder that contains the latest updates. A network folder can be an FTP or HTTP server, or an SMB share. If a network folder requires authentication, only the SMB protocol is supported. When selecting a local folder, you must specify a folder on the device that has Administration Server installed.
    
    An FTP or HTTP server or a network folder used by an update source must contain a folders structure (with updates) that matches the structure created when using Kaspersky update servers.
- Other settings:
  - Force update of secondary Administration Servers
    If this option is enabled, the Administration Server starts update tasks on the secondary Administration Servers as soon as new updates are downloaded. Update tasks are started by using the source of update that is configured in the task properties on the secondary Administration Servers.
    
    If this option is disabled, the update tasks on the secondary Administration Servers start according to their schedules.
    
    By default, this option is disabled.
  - Copy downloaded updates to additional folders
    After the Administration Server receives updates, it copies them to the specified folders. Use this option if you want to manually manage the distribution of updates on your network.
    
    For example, you may want to use this option in the following situation: the network of your organization consists of several independent subnets, and devices from each of the subnets do not have access to other subnets. However devices in all of the subnets have access to a common network share. In this case, you set Administration Server in one of the subnets to download updates from Kaspersky update servers, enable this option, and then specify this network share. In downloaded updates to the repository tasks for other Administration Servers, specify the same network share as the update source.
    
    If you select to copy the downloaded updates to a local folder, you must specify a folder on the device that has Administration Server installed. The path to the folder depends on the device's operating system. Since the local folder is located on Linux-based Administration Server, you have to specify the POSIX path, for example: /path/to/dir.
    
    When selecting a network folder that is located on Linux-based Administration Server, you must ensure access to the network folder in advance from the device with Administration Server installed by mounting the folder. Access to the folder is performed by using the SMB protocol.
    
    By default, this option is disabled.
    - Do not force updating of devices and secondary Administration Servers unless copying is complete
      The tasks of downloading updates to client devices and secondary Administration Servers start only after those updates are copied from the main update folder to additional update folders.
      
      This option must be enabled if client devices and secondary Administration Servers download updates from additional network folders.
      
      By default, this option is disabled.
  - Download updates by using the old scheme
    Starting from version 14, Kaspersky Security Center downloads updates of databases and software modules by using the new scheme. For the application to download updates by using the new scheme, the update source must contain update files with metadata that is compatible with the new scheme. If the update source contains update files with metadata that is compatible with the old scheme only, enable the Download updates by using the old scheme option. Otherwise, the update download task will fail.
    
    For example, you must enable this option when a local or network folder is specified as an update source, and the update files in this folder were downloaded by one of the following applications:
    - Kaspersky Update Utility
      This utility downloads updates by using the old scheme.
    - Kaspersky Security Center 13.2 or earlier version
      For example, your Administration Server 1 does not have an internet connection. In this case, you may download updates by using an Administration Server 2 that has an internet connection, and then place the updates to a local or network folder to use it as an update source for the Administration Server 1. If the Administration Server 2 has version 13.2 or earlier, enable the Download updates by using the old scheme option in the task for the Administration Server 1.
    By default, this option is disabled.
On the Configure task schedule page of the wizard, you can create a schedule for task start. If necessary, specify the following settings:
- Scheduled start:
  Select the schedule according to which the task runs, and configure the selected schedule.
  - Every N hours
    The task runs regularly, with the specified interval in hours, starting from the specified date and time.
    
    By default, the task runs every 6 hours, starting from the current system date and time.
  - Every N days
    The task runs regularly, with the specified interval in days. Additionally, you can specify a date and time of the first task run. These additional options become available, if they are supported by the application for which you create the task.
    
    By default, the task runs every day, starting from the current system date and time.
  - Every N weeks
    The task runs regularly, with the specified interval in weeks, on the specified day of week and at the specified time.
    
    By default, the task runs every Monday at the current system time.
  - Every N minutes
    The task runs regularly, with the specified interval in minutes, starting from the specified time on the day that the task is created.
    
    By default, the task runs every 30 minutes, starting from the current system time.
  - Daily (daylight saving time is not supported)
    The task runs regularly, with the specified interval in days. This schedule does not support observance of daylight saving time (DST). It means that when clocks jump one hour forward or backward at the beginning or ending of DST, the actual task start time does not change.
    
    We do not recommend that you use this schedule. It is needed for backward compatibility of Kaspersky Security Center.
    
    By default, the task starts every day at the current system time.
  - Weekly
    The task runs every week on the specified day and at the specified time.
  - By days of week
    The task runs regularly, on the specified days of the week, at the specified time.
    
    By default, the task runs every Friday at 6:00:00 PM.
  - Monthly
    The task runs regularly, on the specified day of the month, at the specified time.
    
    In months that lack the specified day, the task runs on the last day.
    
    By default, the task runs on the first day of each month, at the current system time.
  - Manually
    The task does not run automatically. You can only start it manually.
    
    By default, this option is selected.
  - Every month on specified days of selected weeks
    The task runs regularly, on the specified days of each month, at the specified time.
    
    By default, no days of month are selected. The default start time is 18:00.
  - On virus outbreak
    The task runs after a Virus outbreak event occurs. Select application types that will monitor virus outbreaks. The following application types are available:
    - Anti-virus for workstations and file servers
    - Anti-virus for perimeter defense
    - Anti-virus for mail systems
    By default, all application types are selected.
    
    You may want to run different tasks depending on the security application type that reports a virus outbreak. In this case, remove the selection of the application types that you do not need.
  - On completing another task
    The current task starts after another task completes. This option only works if both tasks are assigned to the same devices. For example, you may want to run the Manage devices task with the Turn on the device option and, after it completes, run the Virus scan task as a triggering task.
    
    You have to select the triggering task from the table and the status with which this task must complete (Completed successfully or Failed).
    
    If necessary, you can search, sort, and filter the tasks in the table as follows:
    - Enter the task name in the search field, to search the task by its name.
    - Click the sort icon to sort the tasks by name.
      By default, the tasks are sorted in alphabetical ascending order.
    - Click the filter icon, and in the window that opens, filter the tasks by group, and then click the Apply button.
- Run missed tasks
  This option determines the behavior of a task if a client device is not visible on the network when the task is about to start.
  
  If this option is enabled, the system attempts to start the task the next time the Kaspersky application is run on the client device. If the task schedule is Manually, Once or Immediately, the task is started immediately after the device becomes visible on the network or immediately after the device is included in the task scope.
  
  If this option is disabled, only scheduled tasks run on client devices. For Manually, Once and Immediately schedule, tasks run only on those client devices that are visible on the network. For example, you may want to disable this option for a resource-consuming task that you want to run only outside of business hours.
  
  By default, this option is disabled.
- Use automatically randomized delay for task starts
  If this option is enabled, the task is started on client devices randomly within a specified time interval, that is, distributed task start. A distributed task start helps to avoid a large number of simultaneous requests by client devices to the Administration Server when a scheduled task is running.
  
  The distributed start time is calculated automatically when a task is created, depending on the number of client devices to which the task is assigned. Later, the task is always started on the calculated start time. However, when task settings are edited or the task is started manually, the calculated value of the task start time changes.
  
  If this option is disabled, the task starts on client devices according to the schedule.
- Use randomized delay for task starts within an interval of (min)
  If this option is enabled, the task is started on client devices randomly within the specified time interval. A distributed task start helps to avoid a large number of simultaneous requests by client devices to the Administration Server when a scheduled task is running.
  
  If this option is disabled, the task starts on client devices according to the schedule.
  
  By default, this option is disabled. The default time interval is one minute.
On the Define the task name page of the wizard, specify the name for the task that you are creating. A task name cannot be more than 100 characters long and cannot include any special characters ("*<>?\:|).
On the Finish task creation page of the wizard, click the Finish button to close the wizard.
If you want the task to start as soon as the wizard finishes, select the Run the task after the wizard finishes check box.

After the wizard finishes, Download updates to the Administration Server repository appears in the list of Administration Server tasks in the workspace.

In addition to the settings that you specify during task creation, you can change other properties of a created task.

When Administration Server performs the Download updates to the repository of the Administration Server task, updates to databases and software modules are downloaded from the updates source and stored in the shared folder of Administration Server. If you create this task for an administration group, it will only be applied to Network Agents included in the specified administration group.

Updates are distributed to client devices and secondary Administration Servers from the shared folder of Administration Server.