Scenario: Migration of devices running Linux or macOS operating systems
Oct 23, 2023
This section describes how to migrate devices running Linux or macOS operating systems from Kaspersky Security Center Web Console running on-premises to Kaspersky Security Center Cloud Console. The basic scenarios of migration without a hierarchy of Administration Servers and migration with such a hierarchy allow transferring all devices and related objects to Kaspersky Security Center Cloud Console. However, if your network includes devices running not only Windows, but also Linux or macOS, you need to transfer the devices of each operating system type separately. As a result, you have to perform the migration several times.
Before you start, do the following:
- Upgrade Administration Server running on-premises to version 12 Patch A or later.
- Install Kaspersky Security Center Web Console of version 12.1 or later.
- Upgrade Network Agent on managed devices to version 12 or later.
- Upgrade the managed applications to the versions supported by Kaspersky Security Center Cloud Console.
- Make sure that you have policies for the latest versions of the managed applications. If you use outdated policies, create new ones for the application versions supported by Kaspersky Security Center Cloud Console.
- To use actual policies, upgrade the web plug-ins for the applications that you intend to manage through Kaspersky Security Center Cloud Console.
- Uninstall Kaspersky applications from managed devices if these applications are not supported by Kaspersky Security Center Cloud Console, and then replace the uninstalled applications with supported ones.
Kaspersky Security Center Cloud Console allows for a maximum of 25,000 managed devices per one Administration Server.
Migration to Kaspersky Security Center Cloud Console comprises the following stages:
- Grouping managed devices by their operating systems
If your network includes devices running different operating systems (Windows, Linux, or macOS), place the devices of each operating system in separate administration groups in Kaspersky Security Center Web Console. Also, create an administration group for each Linux distribution. For example, if you have Debian and Red Hat Linux devices, allocate them in different administration groups. This will allow you to perform the migration successfully because different Network Agent installation packages are required for various operating systems.
- Perform separately the migration of every administration group and its application objects
The managed devices of each operating system must migrate separately, to include their policies and tasks. For example, if you have Windows, macOS, Ubuntu, and CentOS devices, first, transfer the devices running the Windows operating system to Kaspersky Security Center Cloud Console, then macOS, then Ubuntu, and eventually, CentOS. You can transfer the managed devices in any order.
To do this, perform the migration without the hierarchy of Administration Servers or migration with such a hierarchy, depending on whether your network includes secondary Administration Servers. During the migration, use the Network Agent installation package corresponding to the operating system of the transferred devices. For example, select the Kaspersky Security Center 13.2 Network Agent for Linux devices to perform the migration successfully.
Note that non-group objects, such as global tasks, custom device selections, or reports, only need to be migrated once.
Upon finishing with the migration, you can make sure that it was successful:
- The proper version of Network Agent is re-installed on each managed device running the Linux or macOS operating system.
- All Linux or macOS devices are managed through Kaspersky Security Center Cloud Console.
- All object settings that were effective before migration are preserved.