Automatic upgrade (Linux)

Starting with Kaspersky Scan Engine version 2.0, you can automatically upgrade Kaspersky Scan Engine to a newer version.

Using the install utility to upgrade

You can upgrade Kaspersky Scan Engine with the same utility that is used to install Kaspersky Scan Engine: the install utility. You can find the utility in the distribution kit.

The install utility upgrades Kaspersky Scan Engine when the program meets the following requirements:

• Kaspersky Scan Engine is already installed on the computer (that is, the /opt/kaspersky/ScanEngine directory exists).

  If Kaspersky Scan Engine is not installed on the computer, the install utility performs automatic installation.

• The version of Kaspersky Scan Engine that is already installed is 2.0 or later, and this version is earlier than the version being installed during the upgrade.

  If Kaspersky Scan Engine version does not meet this requirement, the install utility displays an error message, and then exits.

When upgrading Kaspersky Scan Engine, the install utility backs up important objects such as configuration files, TLS certificates, and the license. Successful upgrade means that all of these objects are already integrated into the new version of Kaspersky Scan Engine. If the upgrade fails for some reason, the install utility restores the previous version of Kaspersky Scan Engine, including objects that were backed up.

Stopping instances of Kaspersky Scan Engine

If the Kaspersky Scan Engine instance being upgraded is a part of a cluster, you need to stop all instances in the cluster before the upgrade.

It is important to stop all instances because the install utility modifies the kavebase database when upgrading Kaspersky Scan Engine.

To stop the Kaspersky Scan Engine instance:

• If an instance works in ICAP mode, run service kavicapd stop.
• If an instance works in HTTP mode, run service kavhttpd stop.
• If an instance uses the Kaspersky Scan Engine GUI, run service klScanEngineUI stop.

Upgrading Kaspersky Scan Engine

To upgrade Kaspersky Scan Engine automatically:

1. Make sure that you have root (administrator) privileges.
2. Run install.
3. Read the End User License Agreement (EULA) for Kaspersky Scan Engine.

   If you agree with the terms of the EULA, accept it. If you decline to accept the terms of the EULA, the upgrade will be canceled.

4. If you agreed to use Kaspersky Security Network (KSN) earlier, the install utility displays the current terms of the EULA for KSN and the Privacy Policy. Read the new EULA for KSN and the Privacy Policy.

   If you agree with the terms of the EULA and the Privacy Policy, accept them. If you decline the terms of the EULA for KSN or the Privacy Policy, you will not be able to use KSN, but the upgrade will continue. You can enable KSN later by using Kaspersky Scan Engine GUI or the Kaspersky Scan Engine configuration file (HTTP or ICAP).

5. Specify the absolute path to the directory that contains the KAV SDK package.

   The KAV SDK package is located in a separate directory, starting with Kaspersky Scan Engine version 2.1.

After you specify the necessary data, Kaspersky Scan Engine is upgraded, and then started.

After you upgrade Kaspersky Scan Engine, you can check the integrity of its components at any time by using the integrity check tool.

Migration from the init script to the systemd unit file

Starting from Kaspersky Scan Engine version 2.1, the init script is no longer supported. Instead of this script, you can use the systemd unit file.

If you used the init script to manage Kaspersky Scan Engine in previous versions, the install utility automatically performs the migration from the init script to systemd during the upgrade.

Learn more about using systemd in HTTP mode and ICAP mode.

Adding new elements to the configuration files

There are new elements added in the new version of Kaspersky Scan Engine. The install utility does not add these elements to the configuration files during the upgrade. You can add the new elements by using the Kaspersky Scan Engine GUI, or directly to the kavhttpd.xml and kavicapd.xml configuration files. See also the detailed information about the new elements in the configuration file.

Clearing browser cache

If you are using the Kaspersky Scan Engine GUI, clear your browser cache after the upgrade.