1. Start the SSH client on the Kaspersky Security Center administrator's workstation.
2. Connect to the remote computer.
3. Connect the shared folder of Administration Server as a network drive on the remote computer. To do this, enter the following commands in the SSH client:

   mkdir /Volumes/KLSHARE

   mount_smbfs //<administrator account>:<password>@<Administration Server IP address>/KLSHARE /Volumes/KLSHARE

   Parameter descriptions:

   • <administrator account> – Name of the administrator account on Administration Server.
   • <password> – Password of the administrator on Administration Server.
   • <Administration Server IP address> – IP address of the server hosting Kaspersky Security Center.
4. Run the installation script. To do this, enter the following commands in the SSH client:

   cd /Volumes/KLSHARE/<KES package folder>

   sudo ./install.sh

   where <KES package folder> is the folder in which the Kaspersky Endpoint Security installation package is located.

   Important: Administrator rights are required for executing this command.

5. Disconnect the network drive on the remote computer. To do this, enter the following command in the SSH client:

   umount /Volumes/KLSHARE

1. Start Administration Console of Kaspersky Security Center.
2. Maximize the Administration Server <Server name> node.
3. Select the Tasks folder.
4. In the workspace, start the New Task Wizard by clicking the Create a task button.
5. Follow the steps of the New Task Wizard below to create a task for remote installation of Kaspersky Endpoint Security on the client computer.

1. In the Select the task type window, maximize the Kaspersky Security Center 10 Administration Server node.
2. Select the Install application remotely task.

1. In the Select installation package window, do one of the following:
   • If the Kaspersky Endpoint Security installation package with the required settings has been created previously, select it in the list of installation packages in the upper part of the Select installation package window.
   • If the required installation package has not been created yet, click New to start the New Package Wizard.

In the Advanced window, select the Install Network Agent checkbox and the Nagent for Mac checkbox if you want to install Network Agent on the client computer.

Note: The installation package for Network Agent must be created beforehand.

In the Settings window, configure remote installation of the application.

In the Moving to the list of managed computers window, select a group to which computers will be moved after installation if necessary.

Note: The Moving to the list of managed computers window appears if you select to install Network Agent in step 3.

In the Select devices to which the task will be assigned window, select the method you want to use to specify client computers:

• To select from among computers detected on the network by Administration Server, select the Select networked devices detected by Administration Server option.
• To specify the IP addresses of computers manually or import the IP addresses of computers from a file, select the Specify device addresses manually, or import addresses from list option.
• To create a task for a selection of devices based on a preset criterion, select the Assign task to a device selection option.
• To select computers from a specific administration group, select the Assign task to an administration group option.

In the window that opens (Select devices, Device selection, or Select Administration group, depending on the option you selected in the previous step), select the client computers, specify the IP addresses of computers, specify a computer selection, or select the administration group to which the task will be applied.

In the Selecting an account to run the task window, select the No account required (Network Agent installed) checkbox.

It is assumed that you have installed Network Agent before starting this wizard.

1. In the Configure task scheduling settings window, select the start mode in the Scheduled start drop-down list.
2. If necessary, configure a scheduled task to start automatically (by specifying the task start date and time).
3. If you want to run tasks that the application was unable to start according to schedule (for example, because the computer was turned off at the scheduled time), select the Run missed tasks checkbox.

   Kaspersky Endpoint Security starts the task as soon as the obstacle preventing the task from being started is eliminated.

In the Define the task name window, in the Name field, enter the name of the task you are creating.

In the Finishing creating the task window, do the following:

1. If you want the task to start as soon as the wizard is finished, select the Run task after Wizard finishes checkbox.
2. Click the Finish button to close the wizard.

The task that you have created appears in the workspace of the Tasks folder.

1. Start Administration Console of Kaspersky Security Center.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, select the Advanced folder, then Remote installation subfolder, and then the Installation packages subfolder.
4. In the workspace, click the Create installation package button.
5. In the Select installation package type window, click Create an installation package for Kaspersky Lab application.
6. In the Defining installation package name window, type the name of the new installation package in the Name field and click Next.
7. In the Selecting the distribution package for installation window, click the Browse button.

   The window for selecting a file for creating the installation package opens.

8. Open the folder with the contents of the Kaspersky Endpoint Security installation package and select the kesmac.kud file.

   The Selecting the distribution package for installation window shows the name and version of the application to be installed remotely using the file that has been added.

9. Select the Copy updates from repository to installation package checkbox to copy application updates from the Kaspersky Security Center storage into the installation package if necessary and click Next.

   The License Agreement window opens.

10. In the License Agreement window, select the I accept the terms of the License Agreement checkbox and click Next.

    The installation package starts uploading to Administration Server. When the upload is finished, the Installation Type window opens.

11. In the Installation Type window, do the following:
    1. In the Packages to install section, deselect the checkboxes next to the names of the components that you want to skip during installation on the client computer.

       If you skip installation of the Graphical User Interface (GUI) component, the user of the client computer will not be able to activate Kaspersky Endpoint Security and manage the application via the local graphical user interface or configure the application settings and Kaspersky Security Network usage settings via the local GUI.

    2. If you want to participate in
       Kaspersky Security Network

       An infrastructure of services that provides access to a database with constantly updated information about the reputation of files, web resources, and software. Kaspersky Security Network ensures faster responses by Kaspersky Lab applications to threats, improves the performance of some protection components, and reduces the likelihood of false positives.

       , in the Kaspersky Security Network settings section, select the I agree to participate in Kaspersky Security Network checkbox.
    3. If you want to read the text of the Kaspersky Security Network Statement, click the KSN Statement button.

       As you continue to use Kaspersky Endpoint Security, you can opt in or out of participation in Kaspersky Security Network at any time.

12. In the Installation Type window, click Next.

    The Kaspersky Endpoint Security installation package is created with the specified settings.

13. In the last window of the wizard, click the Finish button to exit the New Package Wizard.

1. Start Administration Console of Kaspersky Security Center.
2. Maximize the Administration Server <Server name> node.
3. Select the Tasks folder.
4. In the workspace, start the New Task Wizard by clicking the Create a task button.
5. Follow the steps of the New Task Wizard below to create the task for remote uninstallation of Kaspersky Endpoint Security from the client computer.

1. In the Select task type window, expand the Kaspersky Security Center 10 Administration Server node.
2. Expand the Advanced child node.
3. Select the Uninstall application remotely task.

In the Select application to be removed window, select Uninstall application supported by Kaspersky Security Center 10.

In the Settings window, in the Application to be removed drop-down list, select Kaspersky Endpoint Security 10 Service Pack 2 for Mac.

In the Selecting operating system restart option window, select the Do not restart the computer option.

In the Select devices to which the task will be assigned window, select the method you want to use to specify client computers:

• To select from among computers detected on the network by Administration Server, select the Select networked devices detected by Administration Server option.
• To specify the IP addresses of computers manually or import the IP addresses of computers from a file, select the Specify device addresses manually, or import addresses from list option.
• To create a task for a selection of devices based on a preset criterion, select the Assign task to a device selection option.
• To select computers from a specific administration group, select the Assign task to an administration group option.

In the window that opens (Select devices, Device selection, or Select Administration group, depending on the option you selected in the previous step), select the client computers, specify the IP addresses of computers, specify a computer selection, or select the administration group to which the task will be applied.

In the Selecting an account to run the task window, select the No account required (Network Agent installed) checkbox.

It is assumed that you have installed Network Agent before starting this wizard.

1. In the Configure task scheduling settings window, select the start mode in the Scheduled start drop-down list.
2. If necessary, configure a scheduled task to start automatically (by specifying the task start date and time).
3. If you want to run tasks that the application was unable to start according to schedule (for example, because the computer was turned off at the scheduled time), select the Run missed tasks checkbox.

   Kaspersky Endpoint Security starts the task as soon as the obstacle preventing the task from being started is eliminated.

In the Define the task name window, in the Name field, enter the name of the task you are creating.

1. To start the task as soon as the wizard is finished, in the Finish creating the task window, select the Run task after Wizard finishes checkbox.
2. Click the Finish button to exit the wizard.

The task that you have created appears in the workspace of the Tasks folder.