Automatic installation (Linux)

This section explains how to install Kaspersky Scan Engine by using the installer. You can use the installer if Kaspersky Scan Engine is not installed on your computer (there is no /opt/kaspersky/ScanEngine directory).

If you want to use Kaspersky Scan Engine together with the Kaspersky Scan Engine GUI, you must have PostgreSQL installed on a computer that is accessible from the computer on which you install Kaspersky Scan Engine. The Kaspersky Scan Engine GUI does not work without PostgreSQL.

Before installing and configuring Kaspersky Scan Engine, you need to specify the locale of the computer on which Kaspersky Scan Engine is installed. Use the following commands:

Installing Kaspersky Scan Engine by using the installer

The procedure below describes the actions that must be performed if you want to install Kaspersky Scan Engine by using the installer.

To install Kaspersky Scan Engine automatically:

1. Make sure you have root (administrator) privileges.
2. Run install.
3. Read the End User License Agreement (EULA) for Kaspersky Scan Engine.

   If you agree with the terms of the EULA, accept it. If you decline to accept the terms of the EULA, the installation will be canceled.

4. Choose whether to use the Kaspersky Scan Engine GUI.
5. If you choose to use the Kaspersky Scan Engine GUI, do the following:
   1. Make sure you have installed and configured PostgreSQL.
   2. Specify the IP and port for connecting to PostgreSQL.
   3. Choose whether to add the product instance to an existing cluster or to connect to an existing database.

      If you chose to add the product instance to an existing cluster, see the next step. Otherwise, go to step f.

   4. Enter the username and password of the PostgreSQL user account.

      Under these credentials, Kaspersky Scan Engine will work with the database.

   5. Continue the procedure from the step 6.
   6. Provide credentials for a user that has permissions for creating new databases and users. The credentials are not recorded anywhere.

      With these credentials, Kaspersky Scan Engine will create a new database called kavebase in which Kaspersky Scan Engine will store its data and a new PostgreSQL user. From this moment on, Kaspersky Scan Engine will use this user to make changes to the database.

   7. Set the username and password for a new PostgreSQL user account.

      The installer will create the account under which Kaspersky Scan Engine will work with the database. This account will have access only to the kavebase database.

      These credentials will be stored as encrypted and available only for the root user. That is why if you run the service as a user without root privileges, an error message will be displayed. To solve this problem, after the installation is complete, configure access to the kl_scanengine_db.key encryption key file stored in the httpsrv directory so that the user account under which you want Kaspersky Scan Engine to work with the database can have the read permission.

6. Choose the mode for Kaspersky Scan Engine.

   The following modes are available:

   • HTTP
   • ICAP
7. For the HTTP mode, specify the IP address and port or the UNIX socket that Kaspersky Scan Engine will listen on for incoming requests to scan objects.

   For the ICAP mode, specify the port whose traffic Kaspersky Scan Engine will scan.

8. Specify whether Kaspersky Scan Engine must use Kaspersky Security Network (KSN).
9. If you choose to use KSN, read the EULA for KSN and the Privacy Policy.

   If you agree with the terms of the EULA and the Privacy Policy, accept it. If you decline the terms of the EULA for KSN or the Privacy Policy, you will not be able to use KSN, but the installation will continue. You can enable KSN later by using Kaspersky Scan Engine GUI or the Kaspersky Scan Engine configuration file (HTTP or ICAP).

10. If you choose to use the Kaspersky Scan Engine GUI, specify the port on which the Kaspersky Scan Engine GUI will be available, if necessary.
11. Specify whether to use a proxy server.
12. If you choose to use a proxy server, specify the proxy settings.
13. Specify the directory for storing temporary files.

    If you press Enter, the /tmp directory will be used for storing temporary files.

    The installer will create the scanengine subdirectory in the directory that you specified. Kaspersky Scan Engine will use this subdirectory for storing temporary files.

14. Starting from Kaspersky Scan Engine version 2.1, the KAV SDK objects are delivered as a separate package. Specify the absolute path to the directory that contains the KAV SDK package. Alternatively, you can press Enter. In this case, the Kaspersky Scan Engine installer will search for the KAV SDK files in the directory one level higher than the directory where the installer is located.
15. Specify the licensing mode to be used in Kaspersky Scan Engine.
    • For simplified licensing mode, specify the key file.
    • For online licensing mode, specify the activation code.
16. At the prompt, check the settings you have specified and modify them if necessary.

After you specify the necessary data, Kaspersky Scan Engine is installed, and then started. Finally, the installer prints the summary information about the installation to the console.

After you install Kaspersky Scan Engine, you can check the integrity of its components at any time by using the integrity check tool.