Migrating from Kaspersky Endpoint Security Cloud to an on-premise solution

Support

Support for business applications

Kaspersky Endpoint Security Cloud

August 2, 2024

ID 242537

If you no longer want or are allowed to use Kaspersky Endpoint Security Cloud but want to provide uninterrupted protection of your users' devices, you have to migrate to an on-premise solution. This solution uses Kaspersky Security Center to manage the device protection.

What can and cannot be migrated

Data items and settings that can and cannot be migrated from Kaspersky Endpoint Security Cloud to Kaspersky Security Center

Data item or setting	Can be migrated	Comment
User accounts and groups, including device owners	No	You will have to add user accounts and groups to Kaspersky Security Center from scratch. Kaspersky Security Center will display owners of the migrated devices as Unknown.
Devices	Partially	For details, refer to the migration scenario below.
Security profiles	Partially	Profile power: Not migrated. Kaspersky Endpoint Security for Windows: Cloud Discovery: You will not be able to use this feature in Kaspersky Security Center. Application Control: Not migrated. You will have to configure the feature from scratch. Other settings: Migrated Kaspersky Endpoint Security for Mac: Migrated. Kaspersky Endpoint Security for Android: Migrated. iOS and iPadOS device settings: Migrated.
Vulnerability Assessment and Patch Management	Partially	Vulnerability detection and patch installation tasks: Migrated. Lists of already fixed vulnerabilities and installed updates: Not migrated.
Data Discovery	No	You will not be able to use this feature in Kaspersky Security Center.
Endpoint Detection and Response	Partially	IoC scan tasks: Migrated, with the exclusion of the scan scope of the Custom scan task. Other settings: Migrated You need Kaspersky Security Center Web Console to continue managing this feature.
Records in Quarantine	No
Distribution packages	No	You will have to create installation packages from scratch.
Event notifications	Partially	Events to be notified of: Migrated. Notification recipients: Not migrated. You will have to configure the mail server.
Anti-malware database update and Malware scan tasks	Yes
Widgets, reports, report deliveries, and event log	No	Kaspersky Security Center has its own monitoring functionality.

Migration scenario

The migration scenario proceeds in stages:

Download an archive with your settings from Kaspersky Endpoint Security Cloud
To download an archive with settings:
1. Open Kaspersky Endpoint Security Cloud Management Console.
2. Select the Settings section.
  The General settings of Kaspersky Endpoint Security Cloud page is displayed.
3. Under Migration to an on-premise solution, click the Download a file with settings link.
An archive with settings is downloaded.
Install Kaspersky Security Center on a computer from which you want to operate
To install Kaspersky Security Center:
1. Download Kaspersky Security Center from the Kaspersky website.
  You need the full version for Windows.
2. Select and install the database management system (DBMS) to be used by Kaspersky Security Center.
3. Run the downloaded installation file.
4. Click the Install Kaspersky Security Center <version> link to start installation.
  You can use the default installation settings, with the following exceptions:
  - On the Kaspersky Security Center Administration Consoles step, select the consoles that you need: either only the MMC-based console or both consoles.
    Kaspersky Security Center provides two types of consoles: MMC-based Administration Console and Web Console. In most cases, you need the MMC-based Administration Console.
    If you use Endpoint Detection and Response, we recommend that you also install Web Console. This way, you will be able to continue using the feature.
  - On the Network size step, select the actual number of devices that you protect.
  - On the Database server and Connection settings steps, specify the DBMS that you installed and its connection settings.
5. If you have selected to install Web Console, proceed through the Web Console installation. You can use the default installation settings.
6. On the last step of the installation wizard, select the Start MMC-based Administration Console check box.
Kaspersky Security Center is installed. The MMC-based Administration Console opens.

For detailed information about installing and configuring Kaspersky Security Center, refer to the Kaspersky Security Center documentation.
Configure Kaspersky Security Center
Right after Kaspersky Security Center is installed, the MMC-based Administration Console opens. At the first connection to the Administration Server, the quick start wizard starts automatically.

You can perform the initial configuration of Administration Server by using the default settings, with the following exceptions:
- If the device where you have installed Kaspersky Security Center uses a proxy server for internet access, on the Proxy server settings... step, select the Use proxy server check box, and then define the proxy server settings.
  Otherwise, skip this step.
- On the Select application activation method step, select Activate application by using an activation code, and then enter the activation code that you used to activate Kaspersky Endpoint Security Cloud. Select the Automatically distribute license key to managed devices check box.
- On the Additional components step, select the types and operating systems of the devices that you protect by using Kaspersky Endpoint Security Cloud.
  Kaspersky Security Center will install plug-ins for the selected operating systems and create installation packages of the respective security applications.
  
  When prompted, accept license agreements for these applications.
- On the last step, clear the Run Protection deployment wizard check box.
Kaspersky Security Center is configured and is ready to use.

For detailed information about the Administration Server quick start wizard, refer to the Kaspersky Security Center documentation.
Import settings from the archive downloaded from Kaspersky Endpoint Security Cloud
An archive that you downloaded from Kaspersky Endpoint Security Cloud contains several files:
- KLP files with protection settings for each of the operating systems supported by Kaspersky Endpoint Security Cloud.
  You must import settings only from those files that correspond to the operating systems of the devices that you actually protect by using Kaspersky Endpoint Security Cloud.
- KLP file with protection settings for Network Agents.
  A program component that enables interaction between the Administration Server and the security applications that are installed on devices connected to Kaspersky Endpoint Security Cloud. Security applications for Windows devices and for Mac devices use different versions of Network Agent.
  
  You must import settings from this file.
- KLT files with settings of various tasks (for example, malware scan or vulnerabilities detection).
  You must import the settings from each file. If you do not use Endpoint Detection and Response, you may skip the IOC Scan*.klt files.
To import settings to Kaspersky Security Center:
1. Browse to the archive that you downloaded from Kaspersky Endpoint Security Cloud, and then unpack the archive.
2. Import the protection settings:
  1. In the console tree of the MMC-based Administration Console, select the Managed devices node, and then go to the Policies tab.
  2. Click the Import policy from file button.
  3. Select one of the KLP files that corresponds to an operating system of the devices that you protect by using Kaspersky Endpoint Security Cloud, and then click the Open button to apply the file.
  4. Repeat steps b-c for each required operating system and for Network Agent.
3. Import tasks:
  1. In the console tree of the MMC-based Administration Console, select the Managed devices node, and then go to the Tasks tab.
  2. Click the Import task from file button.
  3. Select one of the KLT files, and then click the Open button to apply the file.
    If you do not use Endpoint Detection and Response, you may skip the IOC Scan*.klt files.
  4. Repeat steps b-c for each task.
Protection settings and tasks are imported to Kaspersky Security Center.
Connect your users' devices running Windows and macOS
To connect your users' devices running Windows and macOS to Kaspersky Security Center:
1. Create stand-alone installation packages for Network Agents:
  1. In the console tree of the MMC-based Administration Console, select the Advanced → Remote installation → Installation packages node.
    A list of installation packages available on Administration Server is displayed.
  2. In the list of installation packages, select the Kaspersky Security Center Network Agent installation package. This is Network Agent for connecting devices running Windows.
  3. In the context menu, click Create stand-alone installation package.
    The Stand-alone installation package creation wizard starts. Proceed through the wizard by using the Next button.
  4. If you need to connect devices running macOS, repeat steps b-c for the Kaspersky Network Agent for Mac installation package.
2. Click the View the list of stand-alone packages button.
  The list of created packages opens.
3. Download each of the created packages:
  1. Click the package name.
  2. Click the Save as button.
  3. Browse to the folder where you want to save the package to, and then click the Save button.
4. Deliver the downloaded installation packages to your users.
  You can use Active Directory, a shared folder, or any other suitable method.
5. Tell your users to remove actual Network Agent from their devices and install a new version from the installation packages.
  Or, you can do this yourself.
  
  If you configured password protection for Network Agent in Kaspersky Endpoint Security Cloud, either your users or you must specify a password to remove Network Agents from their devices.
Your users' devices running Windows and macOS are connected to Kaspersky Security Center.
Connect your users' mobile devices running Android, iOS, and iPadOS
Mobile devices running Android, iOS, and iPadOS cannot be migrated from Kaspersky Endpoint Security Cloud. You must connect them to Kaspersky Security Center manually, as if they haven't been protected before. For detailed information about connecting mobile devices, refer to the Kaspersky Security Center documentation:
- Connecting devices running Android
- Connecting devices running iOS and iPadOS

Did you find this article helpful?

What can we do better?

Thank you for your feedback! You're helping us improve.