Manually upgrading Kaspersky Scan Engine 1.0

To manually upgrade Kaspersky Scan Engine 1.0:

1. Make sure you have root (administrator) privileges.
2. Stop Kaspersky Scan Engine:
   • If you use Kaspersky Scan Engine in ICAP mode, run this command:

     /etc/init.d/kavicapd stop

   • If you use Kaspersky Scan Engine in HTTP mode, run this command:

     /etc/init.d/kavhttpd stop

   • If you use Kaspersky Scan Engine GUI, run this command:

     /etc/init.d/klScanEngineUI stop

3. Create backup copies of the following data:
   • If Kaspersky Scan Engine worked in ICAP mode and you configured ICAP rules in kavicapd_gui_rules.conf, you need to copy /opt/kaspersky/ScanEngine/icap_data.
   • If you generated a certificate and a private key to use with the Kaspersky Scan Engine GUI, copy the certificate and the private key.

     You can find information on the location of the certificate and private key in the SSLCertificatePath and SSLPrivateKeyPath elements of the klScanEngineUI.xml file.

   • The key file (if Kaspersky Scan Engine was activated in offline licensing mode) or the activation code (if Kaspersky Scan Engine was activated in online licensing mode).

     You can find information on the location of the key file or activation code in the LicensePath element of the kavhttpd.xml configuration file (if Kaspersky Scan Engine worked in HTTP mode) or kavicapd.xml configuration file (if Kaspersky Scan Engine worked in ICAP mode).

4. In the /opt/kaspersky/ScanEngine directory, uninstall Kaspersky Scan Engine with uninstall.

   If you used the Kaspersky Scan Engine GUI, you also need to confirm deletion of data from the kavebase database. The structure of database in Kaspersky Scan Engine 1.0 differs significantly from the new version, so you cannot use the old database with the new version of Kaspersky Scan Engine.

5. Remove files form the directory /opt/kaspersky/ScanEngine/ or delete this directory.
6. Install the new version of Kaspersky Scan Engine with the installer.
7. Stop Kaspersky Scan Engine:
   • If you used Kaspersky Scan Engine in ICAP mode, run this command:

     service kavicapd stop

   • If you used Kaspersky Scan Engine in HTTP mode, run this command:

     service kavhttpd stop

   • If you used Kaspersky Scan Engine GUI, run this command:

     service klScanEngineUI stop

8. Copy data that you backed up earlier:
   • Copy klScanEngineUI.xml to /opt/kaspersky/ScanEngine/etc/
   • To be able to use Kaspersky Scan Engine GUI:
     1. Go to /opt/kaspersky/ScanEngine/tools/
     2. Run the following command:

        ./kav_encrypt -d '%USERNAME%:%PASSWORD%'

        Here, %USERNAME% and %PASSWORD% are the username and password used to connect to the kavebase database.

        If you forgot the username or password, use the psql utility.

        If you forgot the username or password used to connect to the database, use the psql utility to get the username or to change the password.

        To see the database username, run the following command:

        postgres=# \l kavebase

        The psql utility displays information about the database name and its owner (username):

        List of databases -[ RECORD 1 ]-----+-------------------------- Name | kavebase Owner | scanengine

        If you forgot the password, you need to change it with the following command:

        alter user %USERNAME% with password '%PASSWORD%';

        Here, %PASSWORD% is the new password for the %USERNAME% user.

   • If the previous version of Kaspersky Scan Engine worked in ICAP mode and you configured ICAP rules in kavicapd_gui_rules.conf, copy data from /opt/kaspersky/ScanEngine/icap_data.
   • If you used Kaspersky Scan Engine GUI and you made copies of the certificate and the private key, place them in the locations that are specified in the SSLCertificatePath and SSLPrivateKeyPath elements of the klScanEngineUI.xml file, respectively.

     Make sure that only users with administrator rights have read access to the certificate and the private key.

   • Make sure that the key file (if the previous version of Kaspersky Scan Engine was activated in offline licensing mode) or the activation code (if the previous version of Kaspersky Scan Engine was activated in online licensing mode) is located in the correct directory.

     You can find information on the location of the key file or activation code in the LicensePath element of the kavhttpd.xml configuration file (if Kaspersky Scan Engine worked in HTTP mode) or kavicapd.xml configuration file (if Kaspersky Scan Engine worked in ICAP mode).

9. Run Kaspersky Scan Engine:
   • To use Kaspersky Scan Engine in ICAP mode, run service kavicapd start
   • To use Kaspersky Scan Engine in HTTP mode, run service kavhttpd start
   • To use the Kaspersky Scan Engine GUI, run service klScanEngineUI start
10. If you are using the Kaspersky Scan Engine GUI, clear your browser cache after the upgrade.