Activation of Kaspersky Endpoint Detection and Response Expert

To activate Kaspersky Endpoint Detection and Response Expert:

1. In Kaspersky Security Center Cloud Console, in the Licenses section, add the activation key that you purchased for Kaspersky EDR Expert, and then deploy the license key to the assets of your organization. For details, refer to the Kaspersky Security Center Cloud Console documentation.
2. In Kaspersky Security Center Cloud Console, go to the Marketplace section, and then click the Kaspersky Endpoint Detection and Response Expert tile.

   Make sure you have the Allow access right in the EDR Integration functional area, to activate Kaspersky EDR Expert.

3. In the window that opens, click the Start activation button.
4. Accept the terms of Kaspersky EDR Expert Data Processing Agreement and Kaspersky Security Network Statement.
5. Click the Switch to Private KSN button to enable Private KSN usage with Kaspersky EDR Expert settings

   If Private KSN is already enabled, your current Private KSN will be switched to Private KSN and use the Kaspersky EDR Expert settings.

   A message that confirms the use of Private KSN appears. This step ensures that telemetry is sent to the dedicated servers that comply with GDPR regulations.

   Data that is sent from assets to Kaspersky Endpoint Detection and Response.

   Telemetry data is stored for 30 days. You can extend the storage time by adding an Extension module.

   By default, the telemetry data is stored in Kaspersky Endpoint Detection and Response Expert infrastructure for 30 days. You can buy an Extension Module to extend the storage time. An Extension Module is a license and can be of two types:

   • Kaspersky Endpoint Detection and Response Expert Telemetry Retention 60 days
   • Kaspersky Endpoint Detection and Response Expert Telemetry Retention 90 days

   If you add both Extension Modules, the Extension Module with a longer retention period is applied in Kaspersky EDR Expert. Retention periods do not sum up.

   When you add an Extension Module, the retention time of telemetry data depends on whether the telemetry was sent before adding the Extension Module or after it:

   • Before adding an Extension Module. The storage time is defined by the license that was active when the data from assets was sent.
   • After adding an Extension Module. The storage time is defined by the time that is specified in the Extension Module.

   If you cancel the Extension Module in the future, the retention time will be returned to default. The telemetry that was sent when the Extension Module was in effect, is stored for the time that is specified in the Extension Module.

6. Perform the initial setup of the Kaspersky Endpoint Detection and Response Expert solution.

Activation of Kaspersky Endpoint Detection and Response Expert is complete. You can start using the solution.