• Support of the Microsoft Windows 10 Pro / Enterprise operating system has been added.
• A new component named BadUSB Attack Prevention has been added.
  BadUSB Attack Prevention allows you to prevent your computer from connection with reprogrammed USB devices that emulate keyboards. When a USB device is connected to the computer and identified as a keyboard by the operating system, the component prompts the user to authorize the newly connected device. Any keyboard that has not passed authorization will be blocked.
• The full disk encryption (FDE) functionality has been improved:
  • Support of the following keyboard layouts has been added in Authentication Agent: AZERTY (Belgium), ЙЦУКЕН (Russia, for 105-key IBM/Windows keyboards), QWERTY (Japan, 106 Japanese).
  • Support of authorization in Authentication Agent through the following devices has been added: SafeNet eToken 4100 - 72K (Java), Gemalto IDPrime .NET (511), Rutoken ECP Flash.
  • Support of USB 3.0 devices in Authentication Agent has been added.
• The option of filtering by local address, physical interface, and packet time-to-live (TTL) has been added in Firewall rules.
• New options have been added for report management:
  • The option of protecting the application reports with a password has been added.
  • The set of security audit events has been extended.
• A few changes have been made to fix some vulnerabilities, including:
  • Conversion to the OpenSSL 1.0.1.p library has been performed.
  • Changes have been made to prevent POODLE attacks on the application.
  • Conversion to the secure (https) channel for application dumps has been performed.
  • Some other vulnerabilities have been eliminated.
    
• The default value for the local setting of product update installation has been changed from "Install critical and approved updates" to "Install only approved updates".
• The Integrity Check task has been added. Kaspersky Endpoint Security 10 checks the application modules for corruption or modifications.
• Some more errors have been fixed.

To install the product,run the setup.exe file from the full distribution package and follow the Setup Wizard instructions. See the Administrator's Guide for more details on how to install the application.

During installation, Kaspersky Endpoint Security detects and allows you to uninstall applications that may affect the performance of the user's computer or cause other problems (even to the point of complete inoperability) when running at the same time as the product. The full list of incompatible software is available at this page.

You can upgrade the following versions to Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 2 for Windows:

• Kaspersky Anti-Virus 6.0 for Windows Workstations MP4 CF1 (build 6.0.4.1424), MP4 CF2 (build 6.0.4.1611).
• Kaspersky Anti-Virus 6.0 for Windows Servers MP4 CF1 (build 6.0.4.1424), MP4 CF2 (build 6.0.4.1611).
• Kaspersky Endpoint Security 8 for Windows (build 8.1.0.646), CF1 (build 8.1.0.831), CF2 (8.1.0.1042).
• Kaspersky Endpoint Security 10 for Windows (build 10.1.0.867).
• Kaspersky Endpoint Security 10 Maintenance Release 1 for Windows (build 10.2.1.23).
• Kaspersky Endpoint Security 10 Service Pack 1 for Windows (build 10.2.2.10535).
• Kaspersky Endpoint Security 10 Service Pack 1 for Windows (build 10.2.2.10535MR1).

No update can be installed if the computer has hard disks that have been encrypted using full disk encryption (FDE) . 

You need to decrypt all hard disks before installation of an update.
The application distribution package includes AES Encryption Module version 1.1.0.73. When installing encryption components of hard drives and removable drives (FDE) or encrypting files and folders (FLE), the module installation will start automatically. If AES Encryption Module versions 1.0.0.724, 1.0.1.814, or 1.0.2.1068 are installed on the computer, it will start upgrading to version 1.1.0.73 automatically.

Upgrading from beta versions to Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 2 for Windows is not supported.

Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 1 for Windows is incompatible with AES encryption modules version 1.0.0.724, 1.0.1.814, and 1.0.2.1068.

Learn more about the known issues and limitations in this article.

The application is compatible with AES Encryption Module version 1.1.0.73. Interoperation of Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 2 for Windows and AES Encryption Module versions .0.0.724, 1.0.1.814 and 1.0.2.1068 is not supported.

If you are upgrading the application to version Service Pack 1 Maintenance Release 2 with any of the supported versions, AES Encryption Module versions 1.0.0.724, or 1.0.1.814, or 1.0.2.1068 is installed on the computer, but you do not intend to use encryption and you want to remove Encryption Module from the computer, or you want to replace the current Encryption Module with a module with a different key size, you can perform this using any of the following methods:

• Before installing the application upgrade to version Service Pack 1 Maintenance Release 2, remove your current AES Encryption Module (and, if necessary, install a module with a different key size).
• Together with the application update, install the update for the current AES Encryption Module to upgrade it to version Service Pack 1 Maintenance Release 2; after that, remove Encryption Module (and, if necessary, install AES Encryption Module version Service Pack 1 Maintenance Release 2 with a different key size).

Note that you have to decrypt all hard disks that have been encrypted using full disk encryption (FDE), before removing Encryption Module. No access to folder level encryption (FLE) files will be provided after you remove Encryption Module.

The product is compatible with Kaspersky Security Center 10 Service Pack 1 Patch D. For remote management via Kaspersky Security Center, you must install Administration Agent. 

For detailed information, see the Administrator's Guide for Kaspersky Security Center.

If you are upgrading Kaspersky Endpoint Security on a computer managed by Kaspersky Security Center:

1. Decrypt all disks that have been encrypted using full disk encryption (FDE).
2. Upgrade Network Agent to the version, which is compatible with the application.
3. Install the application update using any available method.

Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 2 for Windows and AES Encryption Module (build 1.1.0.73) can be installed using the Kaspersky Lab update service

You can upgrade the following applications using the Kaspersky Lab update service:

• Kaspersky Endpoint Security 10 Service Pack 1 for Windows (build 10.2.2.10535).
• Kaspersky Endpoint Security 10 Service Pack 1 for Windows (build 10.2.2.10535(MR1)).
• AES Encryption Module from the Kaspersky Endpoint Security 10 Service Pack 1 distribution package (Encryption Module build 1.0.2.1068). 

Upgrading from beta versions to Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 2 for Windows is not supported.

Please note the features of the application upgrading using the Kaspersky Lab update service:

• An update cannot be installed if incompatible private patches have been installed on your computer.
• After you install an update, you will not be able to roll back to the previous application version.
• If the computer is managed by Kaspersky Security Center, you need to install the application management plug-in version Service Pack 1 Maintenance Release 2 before installing the update, prepare it using a policy, and distribute it on computers on which you intend to install updates.
• No update can be installed if the computer has hard disks that have been encrypted using full disk encryption (FDE). You need to decrypt all hard disks before installation of an update.
• Before installation of an update, you must read the text of the End User License Agreement and confirm your acceptance of its terms. If you do not confirm your acceptance, the update will not be installed. 
  If the computer is managed by Kaspersky Security Center, you can confirm your acceptance using the Kaspersky Security Center console, in the Application Management node, in the Software Updates section.
  If the application has been installed in stand-alone mode (without management using Kaspersky Security Center), you can confirm your acceptance in the local interface of the application.
• To complete the update installation, you must restart your computer.
• The full disk encryption (FDE) functionality will remain blocked until installation of the application updates is complete.
• After the update is installed, the setting of application update installation will change to "Install only approved updates".

If Encryption Module for Kaspersky Endpoint Security 10 Service Pack 1 is installed on the computer (Encryption Module build 1.0.2.1068), it also must be upgraded to version Service Pack 1 Maintenance Release 2. Please note the features of Encryption Module updating:

• After you install an Encryption Module update, you will not be able to roll back to the previous version of Encryption Module.
• No Encryption Module update can be installed if the computer has hard disks encrypted using full disk encryption (FDE). You need to decrypt all hard disks before installation of an update.
• Before installation of an Encryption Module update, you must read the text of the End User License Agreement and confirm your acceptance of its terms. If you do not confirm your acceptance, the update will not be installed.
• To complete the Encryption Module update installation, you must restart your computer:
  • Installation of an update for AES Encryption Module (56 bit) can be performed concurrently with the application update installation during a single restart of your operating system.
  • Installation of an update for AES Encryption Module (256 bit) can only be performed after the application update is complete. Thus, you have to restart your computer twice to complete full update of the application and Encryption Module.