The encryption algorithm used by Kaspersky Endpoint Security 10 for Windows depends on the encryption module, which is installed separately. The data encryption functionality becomes available only after the encryption module is installed.

To download the encryption module installer, go to the Kaspersky Endpoint Security 10 for Windows (for workstations) download page, click Files and select aes_encryption_module_1.0.1.814en.exe.

Once the encryption module installer with the .exe extension has been downloaded, unpack it to get the installer .msi file aes_encryption_module.msi.

To get full access to all encryption management features in Kaspersky Security Center 10, you must additionally install the encryption module on a host with the Administration Console. This will allow you to manage the Authentication Agent accounts or request and recieve the Authetication Agent password recovery data via the Administration Console.

Installation of the encryption module on a local host via the Setup Wizard

To install the encryption module on a local host via the Setup Wizard:

• Run the aes_encryption_module.msi file. This will start the Encryption Module Setup Wizard.
  
• Follow the Wizard's instructions.
  

Installation on a local host from command prompt in silent mode

To install the encryption module on a local host from command prompt in silent mode

• msiexec /i <package_path>\aes_encryption_module.msi EULA=1 /qn
  

Remote installation using domain group policies

To install the encryption module using domain group policies:

• Create a shared folder on a domained host and copy the application installer aes_encryption_module.msi into it.
  
• Run the Group Policy Management Console and select Edit in the context menu to open the group policy settings.
  
• Go to Computer configuration → Policies → Software settings → Software installation in the Group Policy Management Editor.
  
• Select New in the context menu, then Package, and indicate the application installer network address (which is in the shared folder) in the window.
  
• In the Deploy Software window, select Assigned and click OK.
  
• Once the group policy is applied, the application will be installed on workstations after the next reboot.
  

Remote installation via a Kaspersky Security Center 10 task

The encryption module can be installed on workstations in a centralized manner via Kaspersky Security Center 10.

Make sure hard drives, files and folders are decrypted prior to removing the encryption module from the workstation. There are several ways of removing the encryption module:

How to remove the encryption module locally via Control Panel

To remove the encryption module:

• Open Windows Control Panel.
  
• Click Programs and Features.
  
• Select the encryption module in the list of the installed software.
  
• Click Uninstall.

How to remove the encryption module from the command line prompt in silent mode

To remove the encryption module in silent mode, type the following string in the command line prompt:

• msiexec /x <package_path>\aes_encryption_module.msi /qn

You can use the following command to remove the encryption module:

• For strong version 1.0.2.1068: msiexec.exe /x {090EAE5F-F428-49D5-9CAF-BEED98A702CA} /qb
• For strong version 1.0.1.814: msiexec.exe /x {6BB70BB7-854E-417D-B9D4-AFC9D9F6A1ED} /qb
• For strong version 1.0.0.724: msiexec.exe /x {03D4BF12-8F63-4CFA-8EFA-E22F6B069EED} /qb
• For light version 1.0.2.1068: msiexec.exe /x {64850D2F-E655-48F9-B9E0-003565E76221} /qb
• For light version 1.0.1.814: msiexec.exe /x {64850D2F-E655-48F9-B9E0-003565E76221} /qb
• For light version 1.0.0.724: msiexec.exe /x {55D4A588-D63C-43F9-8F1E-7DF8B576FA6C} /qb

How to remove the encryption module using domain group policies

To remove the encryption module using domain group policies:

• Go to Computer configuration → Policies → Software settings → Software installation in the Group Policy Management console tree.
  
• Open the context menu of the encryption module installation package.
  
• Go to All tasks → Remove.
  
• In the Remove Software dialog box, select Immediately uninstall the software from users and computers.
  
• Once the group policy is applied to computers, the encryption module will be removed during the next OS restart.
  

How to remove the encryption module via Kaspersky Security Center 10

The encryption module can be removed from workstations in a centralized manner via Kaspersky Security Center 10.

In case of issues with installing / removing the encryption module, its installation / removal log file may be required for troubleshooting.

To generate the encryption module installation / removal log file:

• In the command line prompt, execute the encryption module installation command with the following switch: /l*v c:\install.log, e.g.:
  

msiexec /i <package_path>\aes_encryption_module.msi /l*v c:\install.log EULA=1 /qn

The installation log file is generated at c:\install.log.

• In the command line prompt, execute the encryption module uninstallation command with the following switch: /l*v c:\uninstall.log, e.g.:

msiexec /x {55D4A588-D63C-43F9-8F1E-7DF8B576FA6C} /l*v c:\uninstall.log /qn

The uninstallation log file is generated at c:\uninstall.log.

Attach the encryption module installation / removal log file along with the detailed description of the issue to the Technical Support request.