How to change the Administration Server address on mobile devices that use Kaspersky Endpoint Security for Android with the MDM or KSMM role
Show applications and versions that this article concerns
- Kaspersky Security Center 14.2 (version 14.2.0.26967)
- Kaspersky Security Center 14 (version 14.0.0.10902)
- Kaspersky Security Center 13.2 (version 13.2.0.1511)
- Kaspersky Security Center 13.1 (version 13.1.0.8324)
- Kaspersky Security Center 13 (version 13.0.0.11247)
- Kaspersky Endpoint Security 10 for Android
- Kaspersky Secure Mobility Management 4
The article is intended for cases when Android devices are managed using Mobile Device Management (MDM) via Kaspersky Endpoint Security for Android (KES for Android) or Kaspersky Secure Mobility Management (KSMM) and you need to change the name of the Kaspersky Security Center (KSC) Administration Server.
This article supplements the main instructions on how to change the KSC server name and must be done in conjunction with those.
KES for Android and KSMM may be installed by the administrator via app stores or the KSC web server.
If the applications were installed via app stores (e.g. Google Play), you can change the Administration Server address in the KES for Android settings by specifying a new address of the Administration Server or a connection gateway in the address of mobile device connection according to these instructions.
You cannot change the Administration Server address if you installed the applications via the KSC web server. To reconnect to KSC, the old (vacated) Administration Server name will display a new device with its name and role of a connection gateway for mobile devices. Use these instructions to change the Administration Server address.
Known issues and restrictions
- The scenario of adding CNAME or A-records to DNS for the old Administration Server name is not supported, Technical Support via Kaspersky CompanyAccount is not provided for this case.
- If the Administration Server IP address is specified as a connection address on devices with KES for Android, or the devices are connected via a connection gateway, no action is required.
Renaming the Administration Server will not affect the maintenance of the connection. - Changing the Administration Server address is possible only on devices where KES for Android is installed via Google Play.
Use these instructions to switch the device (where KES for Android is installed from the Administration Server package) to a device with a connection gateway with the same Administration Server name. - It is impossible to change the Administration Server address in MDM profiles for iOS. You need to reinstall the profiles on the devices.
- The corporate portal from KSMM requires reinstallation to update the Administration Server address.
How to change the Administration Server address on devices with no connection gateways
- Schedule a date to rename the Administration Server when all needed mobile devices are connected to the KSC network.
- Select the Show synchronization settings on device check box in the KES for Android policy to be able to manually change the server address in the app (if this check box has been cleared when configuring synchronization settings).
- Reissue a mobile certificate with the new DNS name or IP address of the current Administration Server with an activation start date after the scheduled server rename date:
- If you are using a self-signed mobile certificate of the Administration Server, follow these instructions to reissue the certificate issued by Administration Server tools.
- If you are using a custom mobile certificate, the issued certificate of a distribution point must contain its DNS name and be signed by the Administration Server mobile certificate.
Both actions will result in loss of control over KES for Android mobile devices:- The certificate type cannot be changed through adding to a reserve one (e.g. changing a self-signed certificate to a custom one or vice versa).
- Switching to a new installation of the Administration Server with a new certificate by setting a new address in the reissued mobile certificate is not possible due to the change of the certificate issuer.
- Notify device users about necessary changes in KES for Android configuration after the selected date for renaming the Administration Server using this guide.
How to reconnect through a connection gateway
If you cannot reuse the old server name, you need to reinstall KES for Android on devices and connect them to the new Administration Server address.
After you complete the instructions above, perform the following steps:
- Rename any available device to the old Administration Server name.
- Install Network Agent on the device in the connection gateway mode using these instructions.
- Add the device as a distribution point using this guide.
- Configure the connection gateway role for the distribution point using these instructions.
- In the network firewall tools, check the connection permissions on the address and connection gateway ports.
- Make sure KES for Android is synchronized correctly on your devices.
