1. On the Kaspersky Security Center administrator's workstation, unpack the archive with the Kaspersky Endpoint Security installation package files.
2. Open the folder with the Kaspersky Endpoint Security installation package files.
3. Double-click klcfginst.exe.

Installation of the Kaspersky Endpoint Security administration plug-in starts.

1. On the remote computer, open the folder with the Network Agent distribution kit.
2. Open the Network Agent distribution kit (.dmg file).

   A window with the contents of the distribution kit opens.

3. In the window with the contents of the distribution kit, double-click Kaspersky Network Agent.
4. Confirm that you want to install Network Agent by clicking Continue.
5. In the Introduction window, click Continue.
6. In the License window, read the text of the Network Agent End User License Agreement between you and AO Kaspersky Lab and do the following:
   • To accept all the terms of the agreement and proceed with the installation, click Continue.
   • To print the text of the agreement, click Print.
   • To save the agreement as a text file, click Save.
7. In the confirmation window, do one of the following:
   • To proceed with the installation of Network Agent, click Agree.
   • To return to the text of the End User License Agreement, click Read License.
   • To cancel the installation, click Disagree.
8. In the Preferences window, do the following:
   1. In the Server field, specify the IP address or DNS name of the server on which Kaspersky Security Center is installed.
   2. In the Port field, specify the port number for an unencrypted connection to the server.
   3. In the SSL Port field, specify the port number for an SSL connection to the server.
   4. If you want to launch Network Agent immediately after installation, select the Run after installation checkbox.

   If you do not want to use SSL to connect to the server, deselect the Use SSL checkbox. To proceed with the installation, click Continue.

9. In the Installation Type window, read the information about the disk on which Network Agent will be installed.

   To install Network Agent using the recommended preferences, click Install and enter the administrator's password to confirm your choice.

   Wait until the Network Agent installer finishes installing the application components.

10. Click Close to quit the installer.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. In the console tree, select the Advanced folder, then Remote installation subfolder, and then the Installation packages subfolder.
4. In the workspace, click Create installation package.
5. In the Select installation package type window, click Create an installation package for a Kaspersky application.
6. In the Defining the installation package name window, type the name of the new installation package in the Name field and click Next.
7. In the Selecting the distribution package for installation window, click Browse.

   The window for selecting a file for creating the installation package opens.

8. Open the folder with the contents of the Network Agent installation package and select the klnagent.kud file.

   The Selecting the distribution package for installation window shows the name and version of the application to be installed remotely using the file that has been added.

9. Click Next.

   The Kaspersky Endpoint Security installation package is created with the specified settings.

10. In the last window of the wizard, click Finish to exit the New Package Wizard.

1. Start Kaspersky Security Center Administration Console.
2. Maximize the Administration Server <Server name> node.
3. Select the Tasks folder.
4. In the workspace, start the New Task Wizard by clicking New task.
5. Follow the steps of the New Task Wizard below to create a task for remote installation of Kaspersky Endpoint Security on the client computer.

1. In the Select the task type window, maximize the Kaspersky Security Center 13 Administration Server node.
2. Select the Install application remotely task.

In the Select installation package window, do one of the following:

• If the Network Agent installation package with the required settings has been created previously, select it in the list of installation packages in the upper part of the Select installation package window.
• If the required installation package has not been created yet, click New to start the New Package Wizard.

In the Settings window, do the following:

1. Select the Using operating system resources through Administration Server checkbox.
2. Deselect all other checkboxes.

In the Move to list of managed devices window, select a group to which computers will be moved after the installation, if necessary.

In the Select devices to which the task will be assigned window, select the method you want to use to specify client computers:

• To select from among computers detected on the network by Administration Server, select the Select networked devices detected by Administration Server option.
• To specify the IP addresses of computers manually or import the IP addresses of computers from a file, select the Specify device addresses manually or import addresses from list option.
• To create a task for a selection of devices based on a preset criterion, select the Assign task to a device selection option.
• To select computers from a specific administration group, select the Assign task to an administration group option.

In the window that opens (Select devices, Device selection, or Select Administration group, depending on the option you selected in the previous step), select the client computers, specify the IP addresses of computers, specify a computer selection, or select the administration group to which the task will be applied.

1. In the Selecting an account to run the task window, select the Account required (Network Agent is not used) checkbox.
2. Click Add > Account.

   The Account window opens.

3. Enter the login and password of the dedicated administrator account of a remote computer.
4. Click OK.

1. In the Configure task schedule window, select the start mode in the Scheduled start drop-down list.
2. If necessary, configure a scheduled task to start automatically (by specifying the task start date and time).
3. If you want to run tasks that the application was unable to start according to schedule (for example, because the computer was turned off at the scheduled time), select the Run missed tasks checkbox.

   Kaspersky Endpoint Security starts the task as soon as the obstacle preventing the task from being started is eliminated.

In the Define the task name window, in the Name field, enter the name of the task you are creating.

In the Finish task creation window, do the following:

1. If you want the task to start as soon as the wizard is finished, select the Run the task after the Wizard finishes checkbox.
2. Click Finish to close the wizard.

1. Start the SSH client on the administrator's workstation.
2. Connect to the remote computer.
3. Connect the shared folder of Administration Server as a network drive on the remote computer. To do this, enter the following commands in the SSH client:

   mkdir /Volumes/KLSHARE

   mount_smbfs //<administrator account>:<password>@<Administration Server IP address>/KLSHARE /Volumes/KLSHARE

   Parameter descriptions:

   • <administrator account> – Name of the administrator account on Administration Server.
   • <password> – Password of the administrator on Administration Server.
   • <Administration Server IP address> – IP address of the server hosting Kaspersky Security Center.
4. Run the installation script. To do this, enter the following command in the SSH client:

   cd /Volumes/KLSHARE/<klnagent_package_folder>

   where <klnagent_package_folder> is the folder, in which the Network Agent installation package is located.

   sudo ./install.sh --accept_eula [-r <server>] [-p <port number>] [-s use_ssl 0|1] [-l <SSL port number>] [-x use_proxy 0|1] [-a <proxy>] [-n <proxy login>] [-w <proxy password>]

   Parameter descriptions:

   • <server> – IP address or DNS name of the server on which Kaspersky Security Center is installed.
   • <port number> – Number of the port that will be used to establish an unencrypted connection to Administration Server. Port 14000 is used by default.
   • use_ssl 0|1 – Parameter that defines whether encryption will be used when establishing the connection between Network Agent and Administration Server. If the value is "0", an unencrypted connection is used. If the value is "1", the connection is established via the SSL protocol (default value).
   • <SSL port number> – Number of the port that will be used to establish an encrypted connection to Administration Server using the SSL protocol. Port 13000 is used by default.
   • use_proxy 0|1 – Parameter that defines whether a proxy server will be used when connecting to the internet. If the value is "0", a proxy server is not used. If the value is "1", the connection is established via a proxy server (default value).
   • <proxy> – IP address or DNS name of the proxy server.
   • <proxy_login> – User account for connecting to the proxy server.
   • <proxy_password> – Password for connecting to the proxy server.

   Important: Administrator rights are required for executing this command.

5. Disconnect the network drive on the remote computer. To do this, enter the following command in the SSH client:

   umount /Volumes/KLSHARE

6. Check if Network Agent functions properly on the remote computer. To do this, enter the following commands in the SSH client:

   cd /Library/Application\ Support/Kaspersky\ Lab/klnagent/Binaries/

   sudo ./klnagchk

   If the check is successful, Network Agent functions properly.