How to change the name of the Kaspersky Security Center Administration Server
Latest update: April 24, 2024
ID: 16024
Show applications and versions that this article concerns
- Kaspersky Security Center 14.2 (version 14.2.0.26967)
- Kaspersky Security Center 14 (version 14.0.0.10902)
- Kaspersky Security Center 13.2 (version 13.2.0.1511)
- Kaspersky Security Center 13.1 (version 13.1.0.8324)
- Kaspersky Security Center 13 (version 13.0.0.11247)
This article is not applicable if a Kaspersky Security Center (KSC) failover cluster is deployed in your network.
If you need to modify the Administration Server name, disconnect the Administration Server from the Active Directory domain or connect it to another domain, follow the instructions below.
Step 1. Prepare the KSC infrastructure before changing the name of the Administration Server.
- Connect managed devices to the Administration Server by IP address. After changing the name of the Administration Server, the devices that use its name for connection will be disconnected from the Server. To connect by IP address, run the Change Administration Server task on devices with direct line of sight to the Administration Server, including devices acting as connection gateways.
Do not run the task on devices without direct line of sight to the Administration Server, otherwise they will lose connection to the Administration Server and connection gateways.The managed devices connected through connection gateways do not check the Administration Server name. Therefore, no additional action is required for them. Information about the Administration Server address will not be updated in the output of the klnagchk.exe diagnostic command.
- Make sure that all the managed devices are connected to the Administration Server by IP address. To do this, check the following:
- Results of the klnagchk.exe diagnostic command in the Administration Server Address line on managed devices with direct line of sight to the Administration Server.
- The properties information of the Network Agent installation package at the time of installation on devices.
- Specify a new name in the existing Administration Server connection profiles.
The devices will be inaccessible until the server renaming is complete. To maintain the access, you can use the Administration Server IP address to connect devices. - If you are using Mobile Device Management (for Android and iOS device management), follow the instructions.
If you are using the UEFI protection device feature, no further action is required.
Step 2. Update the name of the Administration Server
- Change the server name or domain.
- If necessary, modify the domain user accounts under which the Administration Server services run and database connection is made, using the klsrvswch.exe tool.
- Update the Kaspersky Security Network (KSN) proxy server address to prevent losing connection between KSN and managed devices. See these instructions.
- If the Administration Server hierarchy is used and the secondary Administration Servers are connected by the server name (not by IP address), reconnect the secondary Administration Servers.
- Update the Administration Server address in the Web Server settings. To do this, open the Administration Server properties and go to the Web Server tab.
- Specify a new name of the Administration Server or its new address in the properties of the following installation packages:
- For Network Agent:
- For published stand-alone packages: After changing the Administration Server address, unpublish the packages and publish them again.
- For mobile devices:
- Update the name of a security code issuer using these instructions.
- Specify the new Administration Server name in the policies and settings of other Kaspersky applications.
- If the Web Console is installed locally on the Administration Server, update the Web Console SSL certificate to ensure that it uses the new connection address. To do this, open Control Panel → Programs → Programs and Features. Find Kaspersky Security Center Web Console in the list and click Uninstall/Change. In the wizard welcome window select Reissue certificate.
If the Web Console is installed on a separate device, select Modify connection settings in this wizard welcome window and specify the new address of the Administration Server. - Specify the new connection address in remote MMC Administration Consoles.
- Update the name of the Administration Server which appears in the MMC Administration Consoles:
- Remove the existing Administration Server node from the console tree.
- Add the Administration Server again.
- Use the klmover utility to restore the connection to the Administration Server on the devices which were disconnected after changing the Server name.
You cannot use the klmover utility on devices which were connected to the Administation Server through a connection gateway. In this case, reinstall Network Agent and respecify the connection gateway again according to the instructions. - If necessary, reconnect the managed devices by specifying the new name of the Administration Server.
Limitations
- The old name of the Administration Server will be displayed in the Advanced → Administration Server shared folder section of the Administration Server properties.
You can keep the old path if only the name of the Administration Server has been changed, not the folder name. The Administration Server will work correctly. - The Administration Server and Web Server certificates will contain the old name of the Administration Server.
Unscheduled replacement of certificates is recommended only if you use non-self-signed certificates generated during Kaspersky Security Center installation and automatically renewed by the Administration Server. - The scenario of adding CNAME or A records to DNS for the old Administration Server name is not supported, technical support via Kaspersky CompanyAccount is not possible.
Useful references
What to do if Kaspersky Security Center Web Console does not work or you cannot connect to a server
How to move the Kaspersky Security Center Administration Server or the DBMS server
Replacing the Administration Server certificate by using the klsetsrvcert utility
About Kaspersky Security Center certificates