About the upgrade of Kaspersky Security MMC plug-ins and Integration Server
January 10, 2024
ID 86341
The MMC plug-ins, Integration Server, and Integration Server Console must be upgraded using the account that belongs to the group of local administrators.
The upgrade requires at least 4 GB of free disk space where the %ProgramData% folder is saved, and additional space to save a backup copy of the Integration Server database and settings.
Close the Integration Server Console before starting the update. It is also recommended to close the Kaspersky Security Center Administration Console.
When upgrading the Integration Server, save a backup copy of the database and settings and the certificate of the previously installed Integration Server. You can choose the path to save this data or use the default path: %ProgramData%\Kaspersky Lab\VIISLA_Backup\VIISData(1). The number in the folder name is incremented by 1 each time an update is done.
The backup copy of the Integration Server database and settings contains the following data:
- Accounts for connecting the Integration Server Console, SVM, and Light Agents to the Integration Server.
- Settings for connecting the Integration Server to the virtual infrastructure and the Kaspersky Security Center Administration Server.
- If the application is used in multi-tenancy mode: a list of registered tenants and protection statistics of the tenant virtual machines is displayed.
- Configuration files that define the Integration Server operation settings.
Access to the folder where the backup copy of the database and settings and the Integration Server certificate are saved is restricted using ACL. Administrator rights are required to access this folder.
If the previously installed Integration Server was used to work with Kaspersky Security for Virtualization Agentless, it continues to work after the Integration Server of Kaspersky Security for Virtualization Light Agent is updated, but will use a new port. You need to specify the port number during the update. The updated Integration Server of Kaspersky Security for Virtualization Light Agent continues to use the port that was specified during installation.
If you want to continue using the previous version of the Integration Server to work with Kaspersky Security for Virtualization Agentless, it is recommended to make sure that the new port is specified in the settings for connecting VMware NSX Manager and SVM to the Integration Server. To do this, you can use Kaspersky Security settings configuration procedure (for details, refer to Kaspersky Security for Virtualization Agentless help).
Updating MMC plug-ins, the Integration Server and the Integration Server Console is performed by installing a new version of Kaspersky Security management components in one of the following ways:
- In interactive mode, using the Kaspersky Security components installation Wizard.
The wizard offers to select a folder to save a backup copy of the database and settings and the certificate of the previously installed Integration Server, or to use the default folder.
If the previously installed Integration Server was used to work with Kaspersky Security for Virtualization Agentless, the wizard prompts you to specify the port number to be used to connect to Kaspersky Security for Virtualization Agentless Integration Server.
- In silent mode from the command line.
If you want to select a folder to save the backup copy of the database and settings and the Integration Server certificate, specify the
--backupFolder=<path to the folder>parameter in the command. If the parameter is not specified, the backup copy is saved to the default folder.If the previously installed Integration Server was used to work with Kaspersky Security for Virtualization Agentless, specify the
--newAgentlessViisPort=<port number>parameter in the command. This port is used to connect to Kaspersky Security for Virtualization Protection Agentless Integration Server after Kaspersky Security for Virtualization Light Agent Integration Server is updated. If the parameter is not specified, update procedure fails.
When Kaspersky Security MMC plug-ins and the Integration Server are updated, the link to start the new version of the Integration Server Console is displayed in the Kaspersky Security Center Administration Console, in the Deployment section of the Monitoring tab. If the previous version of the Integration Server was used to work with Kaspersky Security for Virtualization Agentless, the Deployment section also displays a link to launch the previous version of the Integration Server Console.
If errors occur in the Integration Server operation after the upgrade, you can return to using the previous version of the Integration Server. To do this, follow the steps described in the Knowledge Base article.
MMC plug-ins of the previous version continue to work after the new version of Kaspersky Security management components is installed. You can use them to manage SVMs and Light Agents of previous versions of Kaspersky Security. After all the application components are updated, you can uninstall MMC plug-ins of the previous version.
To uninstall MMC plug-ins, use the standard application removal tools of the operating system: in the list of applications, select Kaspersky Security for Virtualization 5.1 Light Agent – management components for removal.
