• Anti-virus technologies:
  It is now possible to restore files that have been encrypted by cryptors. Please note: it is only possible to restore files that were attacked while the application was running with the System Watcher component and the option Use behavior stream signatures (BSS) enabled.  
• Licensing:
  A new type of licensing has been added — subscription. 
  The subscription service provides partners with the option of selling application licenses according to a plan, which allows renewing the license and change the number of computers protected under that license without replacing the activation code; it also allows paying for the license renewal upon a regular schedule.
• Full Disk Encryption:
  
  • Support of full disk encryption on UEFI systems has been implemented. 
  • Support of full disk encryption on devices with GUID Partition Table has been implemented. 
  • Authentication agent authorization using tokens and smart-cards is now supported. 
    List of supported devices:
    • SafeNet eToken PRO 64K (4.2b) (USB),
    • SafeNet eToken PRO 72K Java (USB),
    • SafeNet eToken PRO 72K Java (Smart Card),
    • SafeNet eToken 5100 (USB),
    • SafeNet eToken 5105 (USB),
    • SafeNet eToken 7300 (USB),
    • EMC RSA SID 800 (USB),
    • ruToken dongle (USB),
    • Aladdin-RD JaCarta PKI (USB),
    • Aladdin-RD JaCarta PKI (Smart Card),
    • Athena IDProtect Laser (USB),
    • Gemalto IDPrime 510 (SmartCard),
    • Gemalto IDBridge CT40 (Reader).
      Important! Authentication by means of tokens and smart cards is possible only if a strong encryption module is installed. 
  • Support has been added in the authentication agent for entering user names and passwords that contain characters in the following languages: English, Arabic, Spanish, Italian, German, Portuguese, Turkish, and French. 
  • More keyboard layouts are now supported by authentication agent. Keyboard layouts are available for the following languages: English (UK), English (USA), Arabic (Algeria, Morocco, Tunis, AZERTY layout), Spanish (Latin America), Italian, German (Germany and Austria), German (Switzerland), Portuguese (Brazil, ABNT2 layout), Turkish (QWERTY layout), French (France), French (Switzerland). 
  • A new GUI with mouse support has been developed for the authentication agent. 
  • The operating system on a computer with an encrypted system hard drive now loads faster. 
  • A new setting remembers the name of the authentication agent account under which the previous authentication was performed successfully. This setting can be configured in the Kaspersky Security Center policy.
• A new application module update mechanism has been implemented (a dedicated service called avpsus). It offers the following functionality:
  • Updates are installed / rolled back without shutting down the application or interrupting computer protection. 
  • Both critical fixes and new functionality can be installed. 
  • Application status is monitored after updates are installed. Application functionality is restored after crashes. 
  • Integration with Kaspersky Security Center: notifications about available updates, management of update installation, support of phased installation of updates, possibility to apply critical fixes automatically.
• Centralized administration of the application through Kaspersky Security Center:
  • Settings profiles are now supported. Settings profiles let you modify the values of policy settings for individual computers that are covered by the specific policy and match the conditions specified in the profile. 
  • Different access rights can now be assigned to specific functional areas of application settings (Kaspersky Security Center functionality). 
  • The list of events that are relayed to Kaspersky Security Center by default has been shortened. If necessary, users can manually edit the list of events to be relayed to Kaspersky Security Center. 
  • When a new policy of Kaspersky Endpoint Security 10 Service Pack 1 for Windows is created, Application Startup Control is disabled in the policy.
• Device Control:
  • When a rule that blocks the operation of WiFi modules is applied, the component terminates the established WiFi connections. 
  • The interface for managing trusted devices has been improved: the "Device ID" and "Comment" fields have been added. 
  • It is now possible to create rules for trusted devices based on a device ID mask. Possible masks: the "*" symbol represents any number of symbols; the "?" symbol represents any one symbol.
• Application Startup Control:
  • The logic of processing Application Control rules has changed: by default, the application denies application startup only to users that are expressly included in the deny list. The "Deny for other users" setting has been added to Application Startup Control rules to support the logic implemented in previous versions of the application. 
  • The option of generating a test verdict for the "Block by default" implicit rule.
• Firewall:
  By default, 172.16.0.0/12, 192.168.0.0/16, 10.0.0.0/8 LANs are added in the Kaspersky Security Center policy for Firewall functionality.
• Writing of application dumps and trace files:
  • If writing of application dumps and trace files is disabled, the application removes the dumps and trace files from the computer automatically. 
  • The list of installed patches is now recorded in trace files.
• The following changes have been made to the application installer:
  • To install file level encryption (FLE) functionality and/or full disk encryption (FDE) functionality, these components have to be selected specifically after choosing the "Custom installation" option (the "Full installation" option is no longer available). 
  • For convenient deployment of encryption functionality, the distribution kit of the AES encryption module is included in the distribution kit of Kaspersky Endpoint Security 10 Service Pack 1 for Windows. The encryption module is installed only if file level encryption (FLE) functionality and/or full disk encryption (FDE) functionality is installed. 
  • Network drivers are installed only if one of the following components is installed: Mail Anti-Virus, Web Anti-Virus, or IM Anti-Virus, Firewall, Network Attack Blocker, Web Control, or Device Control. 
  • To optimize the load on the Kaspersky Security Center server, Application Startup Control functionality is disabled by default.
• Application performance and RAM usage have been optimized.

To install the application, run the installer file and follow the Setup wizard instructions.

Interoperation of Kaspersky Endpoint Security 10 Service Pack 1 for Windows and AES encryption modules of versions 1.0.0.724 and 1.0.1.814 is not supported.

You can upgrade the following applications to Kaspersky Endpoint Security 10 Service Pack 1 for Windows:

• Kaspersky Anti-Virus 6.0 for Windows Workstations MP4 CF1 (build 6.0.4.1424) / MP4 CF2 (build 6.0.4.1611).
• Kaspersky Anti-Virus 6.0 for Windows Servers MP4 (build 6.0.4.1424) / MP4 CF2 (build 6.0.4.1611).
• Kaspersky Endpoint Security 8 for Windows (builds 8.1.0.831, 8.1.0.646).
• Kaspersky Endpoint Security 8 for Windows CF2.
• Kaspersky Endpoint Security 10 Maintenance Release 1 for Windows.

Important! Upgrading of Kaspersky Endpoint Security 10 Service Pack 1 for Windows beta versions (Beta 1, Beta 2, and Beta 3) to Kaspersky Endpoint Security 10 Service Pack 1 for Windows is not supported. The application installation requires removing the previously installed beta version of Kaspersky Endpoint Security. During installation, Kaspersky Endpoint Security detects and allows you to uninstall applications that may affect the performance of the user's computer (even to the point of complete inoperability) when running at the same time as the product. The full list of incompatible software is available at: http://support.kaspersky.com/9371.
You can install the application remotely using Kaspersky Security Center.

Learn about the known limitations in this article.

In Kaspersky Endpoint Security 10 for Windows SP1 Beta1, the following issues have been fixed:

• In some cases, reports from Kaspersky Security Center contain non-localized events.
• In some cases, the product may crash when attempting to send a complaint on access to a web resource prohibited by the Web Control component.
• During installation, Kaspersky Endpoint Security removes Microsoft System Center upon recognizing it as incompatible software.
• In some cases, decryption of files that have been encrypted with File Level Encryption (FLE) feature may consume up to 100% of CPU resources.
• Web Control does not block web resources when using SSL3.0 if the certificate has been handed for subdomains (e.g., *.facebook.com).
• Events from Kaspersky Endpoint Security in Windows Event Log do not contain descriptions if the self-defense events logging is enabled.
• In some cases, an attempt to send an email notification via the local interface of Kaspersky Endpoint Security may result in a hang-up of the application.
• In some cases, Web Control blocks access to allowed web resources.
• Some Microsoft updates cannot be installed when Kaspersky Endpoint Security is installed.
• In some cases, Network Agent may crash when starting the OS.
• In some cases, the system may crash when installing Kaspersky Endpoint Security 10 Maintenance Release 1 for Windows.
• Installing Kaspersky Endpoint Security on a server with the RRAS role results in a loss of Internet access by all hosts that use that server.
• Local management of group tasks via avp.com does not function, though the corresponding permission is active in the policy.
• Exclusions in <Disk name>:\<File name> format are not supported.
• Incompatibility with some video drivers.
• Kaspersky Endpoint Security cannot be restarted from Kaspersky Security Center Administration Console using the remote diagnostics utility.
• In some cases, installation of the application with install.cfg results in an incorrect behavior of the Web Anti-Virus component.
• Disabling and re-enabling the protection leads to enabling all of the components, regardless of the current policy settings.
• Password migration error during the policy migration.
• Excessive messages "Action blocked by self-defense".
• Some of the policy settings are not displayed if Kaspersky Security Center Administration Console is running under an account without the administrator rights.
• In some cases, the System Watcher component mistakenly blocks running applications located on network resources.
• In some cases, the advanced disinfection procedure cannot disinfect objects in the system memory.
• The application blocks access to flash drives that support the U3 formatting standard.
• In some cases, files being downloaded are corrupted when Web Control is enabled.
• Network Attack Blocker: in some cases, hosts added as exclusions are blocked.
• The application blocks the key shortcut Alt + Ctrl + Shift + P.
• When creating an installation package, the "Remove incompatible software" check box is cleared after you change the installation type.
• In some cases, the local interface of the application displays update tasks incorrectly.
• In some cases, the volume of memory consumed by Network Agent may increase.
• In some cases, the application may crash when you open the window with the statistics of Application Activity Monitor.
• A folder cannot be specified as an exclusion in the trusted zone.
• In some cases, applications cannot be categorized based on such KL category as Multimedia\Players.
• In some cases, the local interface of the application does not display the names of applications to be added to the list of trusted applications.
• In some cases, when installing updates on computers running under Windows 8.1, the operating system may crash due to incompatibility with the network driver.
• Installation on a computer running under Windows 8 x64 may lead to a malfunction of Cisco Systems VPN Client.
• Installation on a computer running under Windows 8 x64 may lead to a malfunction of MS VPN Client.
• In some cases, the size of the contents in the folder C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\KES10\temp\crypt may increase.
• Incorrect display of information about an application without a digital signature in a pop-up window.
• In some cases, connection to Novell network drives through Novell Client may lead to a hang-up of the computer.
• Incompatibility with Citrix Provisioning Server 6.1.
• After installation of an encryption module to the root of a disk, a new file or folder cannot be created on that disk.
• The task of full-disk encryption of a removable device with FAT32 file system hangs on computers running under Windows XP.
• In some cases, the application may block the user's logging in to Skype.
• In some cases, the Device Control component may block a trusted printer.

In Kaspersky Endpoint Security 10 for Windows SP1 Beta2 the following issues have been fixed:

• Slow TOPSOLID software compilation process when Kaspersky Endpoint Security 10 is running.
• Incorrect import of some product settings when transferring settings from a different operating system configuration.
• Delayed access to files on NAS Netapp Filer.
• Trusted zone settings fail to copy when creating policies via the quick installation wizard.
• Incorrect behavior of the product due to simultaneous running of scan tasks and active infection disinfection.
• Localization errors.
• Incorrect calculation of the update date leading to iterative updates.
• The button for submitting an issue is not displayed when blocking USB devices.
• Outdated information on detected threats in the administration center.
• Incorrect description of the quick installation wizard for trusted zones.
• Trace files fail to send to Technical Support.
• Trace files fail to be removed in the local interface.
• Incorrect display of detected threats fields in the administration center.
• Incorrect display of non-critical notifications.
• Incorrect symbols in the interface when configuring the area of a Custom scan task.
• Incorrect localization in the interface of application startup control rules settings.
• Incorrect text colour in a local interface vulnerabilities report.

In Kaspersky Endpoint Security 10 for Windows SP1 Beta3 the following issues have been fixed:

• Incorrect display of pop-up Web Anti-Virus notifications. 
• Disabling of Wi-Fi connection during the product activation.