We’ve closed a critical vulnerability in the mechanism for checking the modules loaded in the Full Disk Encryption Authentication Agent. This vulnerability allowed UEFI Secure Boot to be bypassed.

You can only update Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 3 for Windows (version 10.3.3.275) to Service Pack 2 Maintenance Release 4 (version 10.3.3.304) via the Kaspersky Lab update service.

Updating to Kaspersky Endpoint Security 10 Windows Service Pack 2 Maintenance Release 4 from beta versions is not supported.

Special considerations when updating an application via the Kaspersky Lab update service:

• After updating you will not be able to roll back to the previous application version.
• This update is only available for applications with a valid license.
• You will not be able to manage full disk encryption (FDE) until the application update has finished installing.
• To complete the update installation, you must restart your computer.
• To complete the update on a computer that has hard drives encrypted using full disk encryption (FDE), you must restart the computer twice.

The application is compatible with Kaspersky Security Center 10 Service Pack 2 Maintenance Release 1 and Kaspersky Security Center 10 Service Pack 3.

To manage the application remotely via Kaspersky Security Center:

1. Install Network Agent on the computer. For instructions, see Online Help.
   
2. Install the Kaspersky Endpoint Security 10 for Windows management plug-in in the Kaspersky Security Center 10 console.
   The management plug-in installer is included in the application installation package. You can also download the plug-in version you require from the list of Kaspersky Security Center plug-ins.

The Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 4 for Windows update is compatible with all the private patches for version Service Pack 2 Maintenance Release 3.