Kaspersky Endpoint Security for Mac: Administrator’s Guide
[Topic 127691]

Install the application using the SSH protocol

Before installing Kaspersky Endpoint Security on a remote computer, make sure that the following conditions are met:

  • Kaspersky Security Center Administration Server is deployed on the corporate network.
  • Administration Console is installed on the Kaspersky Security Center administrator's workstation.
  • An installation package for Kaspersky Endpoint Security has been created and is located in a shared folder on Administration Server.
  • A key file for Kaspersky Endpoint Security is located in the shared folder on Administration Server (optional).
  • Remote Login is enabled on the remote computer.
  • The computer account used to install the application is included in sudoers.

Install Kaspersky Endpoint Security on a client computer using the SSH protocol

  1. Start the SSH client on the Kaspersky Security Center administrator's workstation.
  2. Connect to the remote computer.
  3. Connect the shared folder of Administration Server as a network drive on the remote computer. To do this, enter the following commands in the SSH client:

    mkdir /Volumes/KLSHARE

    mount_smbfs //<administrator account>:<password>@<Administration Server IP address>/KLSHARE /Volumes/KLSHARE

    Parameter descriptions:

    • <administrator account> – Name of the administrator account on Administration Server.
    • <password> – Password of the administrator on Administration Server.
    • <Administration Server IP address> – IP address of the server hosting Kaspersky Security Center.
  4. Run the installation script. To do this, enter the following commands in the SSH client:

    cd /Volumes/KLSHARE/<KES package folder>

    ./install.sh --accept_eula

    where <KES package folder> is the folder, in which the Kaspersky Endpoint Security installation package is located.

    Important: Administrator rights are required for executing this command.

  5. Disconnect the network drive on the remote computer. To do this, enter the following command in the SSH client:

    umount /Volumes/KLSHARE

Page top
[Topic 127692]

Install the application using Kaspersky Security Center

Before installing Kaspersky Endpoint Security on a client computer, make sure that the following conditions are met:

  • Kaspersky Security Center Administration Server is deployed on the corporate network.
  • Administration Console is installed on the Kaspersky Security Center administrator's workstation.
  • Network Agent is installed on the client computer.
  • An installation package for Kaspersky Endpoint Security has been created and is stored in the shared folder on Administration Server.
  • A key file for Kaspersky Endpoint Security is stored in the shared folder on Administration Server (optional).
  • The client computer is added to the Managed devices administration group on Administration Server (optional).

For detailed information about administration groups on Administration Server, see the Kaspersky Security Center help.

To install Kaspersky Endpoint Security on a client computer using Kaspersky Security Center, you must create and start the Install application remotely task.

Create a task for remote installation of Kaspersky Endpoint Security on a client computer

  1. Start Kaspersky Security Center Administration Console.
  2. Maximize the Administration Server <Server name> node.
  3. Select the Tasks folder.
  4. In the workspace, start the New Task Wizard by clicking New task.
  5. Follow the steps of the New Task Wizard below to create a task for remote installation of Kaspersky Endpoint Security on the client computer.

To proceed to the next step of the wizard, click Next. To return to the previous step of the wizard, click . To exit the wizard at any step, click Cancel.

Note: The appearance of the buttons may vary depending on your version of Windows.

Step 1. Select the task type

  1. In the Select the task type window, maximize the Kaspersky Security Center 13 Administration Server node.
  2. Select the Install application remotely task.

Step 2. Select the installation package

In the Select installation package window, do one of the following:

  • If the Kaspersky Endpoint Security installation package with the required settings has been created previously, select it in the list of installation packages in the upper part of the Select installation package window.
  • If the required installation package has not been created yet, click New to start the New Package Wizard.

Step 3. Install additional applications

In the Advanced window, select the Install Network Agent together with this application and <Network Agent installation package name> checkboxes if you want to install Network Agent on the client computer also.

Note: The installation package for Network Agent must be created beforehand. If it has not been created, click Create to start the New Package Wizard.

Step 4. Configure the installation settings

In the Settings window, configure the remote installation of the application.

Step 5. Select an administration group to add computers to after installation

In the Move to list of managed devices window, select a group to which computers will be moved after the installation, if necessary.

Note: The Move to list of managed devices window appears if you select installation of Network Agent in step 3.

Step 6. Define how to select the client computers for which the task will be created

In the Select devices to which the task will be assigned window, select the method you want to use to specify client computers:

  • To select from among computers detected on the network by Administration Server, select the Select networked devices detected by Administration Server option.
  • To specify the IP addresses of computers manually or import the IP addresses of computers from a file, select the Specify device addresses manually or import addresses from list option.
  • To create a task for a selection of devices based on a preset criterion, select the Assign task to a device selection option.
  • To select computers from a specific administration group, select the Assign task to an administration group option.

Step 7. Select client computers

In the window that opens (Select devices, Device selection, or Select Administration group, depending on the option you selected in the previous step), select the client computers, specify the IP addresses of computers, specify a computer selection, or select the administration group to which the task will be applied.

Step 8. Select an account to run the task

In the Selecting an account to run the task window, select the No account required (Network Agent installed) checkbox.

It is assumed that you have installed Network Agent before starting this wizard.

Step 9. Configure the task schedule

  1. In the Configure task schedule window, select the start mode in the Scheduled start drop-down list.
  2. If necessary, configure a scheduled task to start automatically (by specifying the task start date and time).
  3. If you want to run tasks that the application was unable to start according to schedule (for example, because the computer was turned off at the scheduled time), select the Run missed tasks checkbox.

    Kaspersky Endpoint Security starts the task as soon as the obstacle preventing the task from being started is eliminated.

Step 10. Specify the task name

In the Define the task name window, in the Name field, enter the name of the task you are creating.

Step 11. Finish creating the task

In the Finish task creation window, do the following:

  1. If you want the task to start as soon as the wizard is finished, select the Run the task after the Wizard finishes checkbox.
  2. Click Finish to close the wizard.

The task that you have created appears in the workspace of the Tasks folder.

Page top
[Topic 127693]

Create an installation package

When you create the Install application remotely task, you can either use an existing installation package or create a new one. To view the list of the created Installation packages, click Advanced > Remote installation > Installation packages.

Create an installation package in Kaspersky Security Center

  1. Start Kaspersky Security Center Administration Console.
  2. Maximize the Administration Server <Server name> node.
  3. In the console tree, select the Advanced folder, then Remote installation subfolder, and then the Installation packages subfolder.
  4. In the workspace, click Create installation package.
  5. In the Select installation package type window, click Create an installation package for a Kaspersky application.
  6. In the Defining the installation package name window, type the name of the new installation package in the Name field and click Next.
  7. In the Selecting the distribution package for installation window, click Browse.

    The window for selecting a file for creating the installation package opens.

  8. Open the folder with the contents of the Kaspersky Endpoint Security installation package and select the kesmac.kud file.

    The Selecting the distribution package for installation window shows the name and version of the application to be installed remotely using the file that has been added.

  9. Select the Copy updates from repository to installation package checkbox to copy application updates from the Kaspersky Security Center storage to the installation package, if necessary, and click Next.

    The installation package starts uploading to Administration Server. When the upload is finished, the Installation Type window opens.

  10. In the Installation Type window, in the Packages to install section, deselect the checkboxes next to the names of the components that you want to skip during installation on the client computer, and click Next.

    The Kaspersky Endpoint Security installation package is created with the specified settings.

  11. In the last window of the wizard, click Finish to complete the New Package Wizard.
Page top
[Topic 135503]

Uninstall the application using Kaspersky Security Center

Before removing Kaspersky Endpoint Security from a client computer via Kaspersky Security Center, make sure the following conditions are met:

  • Kaspersky Security Center Administration Server is deployed on the corporate network.
  • Administration Console is installed on the Kaspersky Security Center administrator's workstation.
  • Network Agent is installed on the client computer.

To uninstall Kaspersky Endpoint Security from the client computer via Kaspersky Security Center, you have to create and start the Uninstall application remotely task.

Important: Removing Kaspersky Endpoint Security from a client computer may lead to a risk of infection.

Create a task for remote uninstallation of Kaspersky Endpoint Security from a client computer

  1. Start Kaspersky Security Center Administration Console.
  2. Maximize the Administration Server <Server name> node.
  3. Select the Tasks folder.
  4. In the workspace, start the New Task Wizard by clicking New task.
  5. Follow the steps of the New Task Wizard below to create a task for remote uninstallation of Kaspersky Endpoint Security from the client computer.

To proceed to the next step of the wizard, click Next. To return to the previous step of the wizard, click . To exit the wizard at any step, click Cancel.

Note: The appearance of the buttons may vary depending on your version of Windows.

Step 1. Select the task type

  1. In the Select the task type window, maximize the Kaspersky Security Center 13 Administration Server node.
  2. Expand the Advanced child node.
  3. Select the Uninstall application remotely task.

Step 2. Select the application to uninstall

In the Select application to be uninstalled window, select Uninstall application supported by Kaspersky Security Center 13.

Step 3. Configure uninstallation settings

In the Settings window, do the following:

  1. In the Application to be uninstalled drop-down list, select Kaspersky Endpoint Security for Mac (11.2).
  2. Click Next.
  3. Configure remote uninstallation of the application.

Step 4. Select the operating system restart option

In the Selecting an operating system restart option window, select the Do not restart the device option.

Step 5. Define how to select client computers for which the task will be created

In the Select devices to which the task will be assigned window, select the method you want to use to specify client computers:

  • To select from among computers detected on the network by Administration Server, select the Select networked devices detected by Administration Server option.
  • To specify the IP addresses of computers manually or import the IP addresses of computers from a file, select the Specify device addresses manually or import addresses from list option.
  • To create a task for a selection of devices based on a preset criterion, select the Assign task to a device selection option.
  • To select computers from a specific administration group, select the Assign task to an administration group option.

Step 6. Select client computers

In the window that opens (Select devices, Device selection, or Select Administration group, depending on the option you selected in the previous step), select the client computers, specify the IP addresses of computers, specify a computer selection, or select the administration group to which the task will be applied.

Step 7. Select a user account to run the task

In the Selecting an account to run the task window, select the No account required (Network Agent installed) checkbox.

It is assumed that you have installed Network Agent before starting this wizard.

Step 8. Configure the task schedule

  1. In the Configure task schedule window, select the start mode in the Scheduled start drop-down list.
  2. If necessary, configure a scheduled task to start automatically (by specifying the task start date and time).
  3. If you want to run tasks that the application was unable to start according to schedule (for example, because the computer was turned off at the scheduled time), select the Run missed tasks checkbox.

    Kaspersky Endpoint Security starts the task as soon as the obstacle preventing the task from being started is eliminated.

Step 9. Specify the task name

In the Define the task name window, in the Name field, enter the name of the task you are creating.

Step 10. Finish creating the task

In the Finish task creation window, do the following:

  1. If you want the task to start as soon as the wizard is finished, select the Run the task after the Wizard finishes checkbox.
  2. Click Finish to close the wizard.

The task that you have created appears in the workspace of the Tasks folder.

Page top
[Topic 127736]