The Maintenance Release 2 update for Kaspersky Endpoint Security 10 Service Pack 2 contains changes required for fixing incompatibility issues between Kaspersky Endpoint Security and the Microsoft Windows 10 Redstone 4 operating system.

To install the application locally, run the setup.exe file from the full distribution package and follow the Setup Wizard instructions. For more details on how to install the application, see this article.

During installation, Kaspersky Endpoint Security detects and allows you to uninstall applications that may affect the performance of the user's computer or cause other problems (even to the point of complete inoperability) when running at the same time as the product. The full list of incompatible software is available here.

You can upgrade the following applications to Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 2 for Windows during installation from the full distribution package:

• Kaspersky Endpoint Security 10 for Windows Service Pack 1 (версия 10.2.2.10535).
• Kaspersky Endpoint Security 10 for Windows Service Pack 1 Maintenance Release 1 (version 10.2.2.10535(MR1)).
• Kaspersky Endpoint Security 10 for Windows Service Pack 1 Maintenance Release 2 (version 10.2.4.674).
• Kaspersky Endpoint Security 10 for Windows Service Pack 1 Maintenance Release 3 (version 10.2.5.3201).
• Kaspersky Endpoint Security 10 for Windows Service Pack 1 Maintenance Release 4 (version 10.2.6.3733).
• Kaspersky Endpoint Security 10 for Windows Service Pack 2 (version 10.3.0.6294).
• Kaspersky Endpoint Security 10 for Windows Service Pack 2 Maintenance Release 1 (version 10.3.0.6294).

The encryption module is included in the application installation package starting with Kaspersky Endpoint Security 10 Service Pack 2 version. All libraries required for encryption will be automatically installed to your computer in the following cases

1. During installation of the full disk encryption (FDE) component.
2. During installation of the file level encryption (FLE) component.
3. During installation of an update on a computer that has the following versions of the application installed (provided that any of the encryption components (FDE or FLE) is installed):
   • Kaspersky Endpoint Security 10 Service Pack 2 for Windows (build 10.3.0.6294)
   • Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 1 for Windows (build 10.3.0.6294).
4. During installation of an upgrade on a computer with the encryption module installed. Automatic upgrade will be performed only for the following configurations:
   • Kaspersky Endpoint Security 10 Service Pack 1 (build 10.2.2.10535) and encryption module version 1.0.2.1068.
   • Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 1 (build 10.2.2.10535(MR1)) and encryption module version 1.0.2.1068.
   • Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 2 (build 10.2.4.674) and encryption module version 1.1.0.73.
   • Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 3 (build 10.2.5.3201) and encryption module version 1.1.0.73.
   • Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 4 (build 10.2.6.3733) and encryption module version 1.1.0.73.

If the conditions described above are met, the application installer automatically removes the installed encryption module and installs all libraries required for encryption, if necessary.

For a description of the methods used for updating configurations different from those listed above, as well as the actions that must be performed if you want to switch from the utilized encryption to encryption with a different effective key length, please refer to this article.

The encryption module is included in the application installation package starting with Kaspersky Endpoint Security 10 Service Pack 2 version. In light of this, Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 2 for Windows is incompatible with AES encryption modules released for previous versions of Kaspersky Endpoint Security.

When the application is installed from the distribution package, all libraries required for encryption are installed automatically if the full disk encryption (FDE) or file level encryption (FLE) component is selected.

If you want to switch from the utilized encryption to encryption with a different key length, you must delete the utilized AES encryption module before upgrading the application to the Service Pack 2 Maintenance Release 2 version.

Before removing or upgrading the encryption module, you must decrypt all hard drives that have been encrypted using full disk encryption (FDE). No access to folder level encryption (FLE) files will be provided after you remove Encryption Module.

When upgrading from the following configurations, the application installer automatically removes the installed encryption module and installs all libraries necessary for encryption:

• Kaspersky Endpoint Security 10 Service Pack 1 (build 10.2.2.10535) and encryption module version 1.0.2.1068
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 1 (build 10.2.2.10535(MR1)) and encryption module version 1.0.2.1068
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 2 (build 10.2.4.674) and encryption module version 1.1.0.73
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 3 (build 10.2.5.3201) and encryption module version 1.1.0.73
• Kaspersky Endpoint Security 10 Service Pack 1 Maintenance Release 4 (build 10.2.6.3733) and encryption module version 1.1.0.73

If you are upgrading the application from the Service Pack 1 (build 10.2.2.10535) or Service Pack 1 Maintenance Release 1 (build 10.2.2.10535(MR1)) version and an encryption module of version 1.0.0.724 or 1.0.1.814 is installed on the computer, you have to upgrade the encryption module to version 1.0.2.1068 before upgrading the application.

If you are upgrading the application from the Service Pack 1 Maintenance Release 2 (build 10.2.4.674) or Service Pack 1 Maintenance Release 4 (build 10.2.6.3733) version and an encryption module of version 1.0.0.724, 1.0.1.814 or 1.0.2.1068 is installed on the computer, you have to upgrade the encryption module to version 1.1.0.73 before upgrading the application.

The application is compatible with Kaspersky Security Center 10 Service Pack 2 Maintenance Release 1 and Kaspersky Security Center 10 Service Pack 3.

To manage the application remotely via Kaspersky Security Center:

1. Install Network Agent on the computer.
   For detailed information, refer to this article.
2. Install the Administration Plug-in of Kaspersky Endpoint Security for Windows in the Kaspersky Security Center console.
   The installation file of the Administration Plug-in is included in the application distribution package. You can also download the appropriate version of the plug-in from the list of Kaspersky Security Center 10 plug-ins.

The Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 2 for Windows update is compatible with all private fixes for Kaspersky Endpoint Security 10 Service Pack 2, but does not include them.

Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 2 for Windows can be installed via the Kaspersky Lab update service.  

You can upgrade the following applications using the Kaspersky Lab update service:

• Kaspersky Endpoint Security 10 Service Pack 2 for Windows (build 10.3.0.6294)
• Kaspersky Endpoint Security 10 Service Pack 2 Maintenance Release 1 for Windows (build 10.3.0.6294)

Please note the following special considerations when upgrading an application via the Kaspersky Lab update service:

• The update can be installed over all private patches for the Service Pack 2 and Service Pack 2 Maintenance Release 1 version.
• Before installation of an update, you must read the text of the End User License Agreement and confirm your acceptance of its terms. If you do not confirm your acceptance, the update will not be installed.
  If the computer is managed by Kaspersky Security Center, you can confirm your acceptance using the Kaspersky Security Center console, in the Application Management node, in the Software Updates section.
  If the application has been installed in stand-alone mode (without management using Kaspersky Security Center), you can confirm your acceptance in the local interface of the application.
• To complete the update installation, you must restart your computer.

You can view the list of limitations and known errors in this article.