Standard installation

Standard installation is an Administration Server installation that uses the default paths for application files, installs the default set of plug-ins, and does not enable Mobile Device Management.

To install Kaspersky Security Center Administration Server on a local device:

Run the ksc_<version number>.<build number>_full_<localization language>.exe executable file.

A window opens prompting you to select Kaspersky applications to install. In the application selection window, click the Install Kaspersky Security Center 13.1 Administration Server link to start the Administration Server Setup Wizard. Follow the instructions of the Wizard.

Step 1. Reviewing the License Agreement and Privacy Policy

At this step of the Setup Wizard, you must read the License Agreement, which is to be concluded between you and Kaspersky, as well as the Privacy Policy.

You may also be prompted to view the License Agreements and Privacy Policies for application management plug-ins that are available in the Kaspersky Security Center distribution kit.

Please carefully read the License Agreement and Privacy Policy. If you agree with all the terms of the License Agreement and the Privacy Policy, select the following check boxes in the I confirm I have fully read, understood, and accept the following section:

• The terms and conditions of this EULA
• Privacy Policy describing the handling of data

Installation of the application on your device will continue after you select both check boxes.

If you do not accept the License Agreement or the Privacy Policy, cancel installation by clicking the Cancel button.

Step 2. Selecting an installation method

In the installation type selection window, select Standard.

Standard installation is recommended if you want to try out Kaspersky Security Center by, for example, testing its operation on a small area within your enterprise network. During standard installation, you only configure the database. You do not specify any Administration Server settings: their respective default values are used instead. Standard installation does not allow you to select management plug-ins to install; only the default set of plug-ins is installed. During standard installation, no installation packages for mobile devices are created. However, you can create them later in Administration Console.

Step 3. Installing Kaspersky Security Center 13.1 Web Console

This step is displayed only if you are using a 64-bit operating system. Otherwise, this step is not displayed, because Kaspersky Security Center 13.1 Web Console does not work with 32-bit operating systems.

By default, both Kaspersky Security Center 13.1 Web Console and MMC-based Administration Console will be installed.

If you want to install only Kaspersky Security Center 13.1 Web Console:

1. Select Install only this one.
2. Choose Web-based console in the drop-down list.

Installation of Kaspersky Security Center 13.1 Web Console starts automatically after completion of Administration Server installation.

If you want to install only the MMC-based console:

1. Select Install only this one.
2. Choose MMC-based console in the drop-down list.

Page top

Step 4. Selecting network size

Specify the size of the network on which Kaspersky Security Center is to be installed. Depending on the number of devices on the network, the Wizard configures the installation and appearance of the application interface so that they match.

The following table lists the application installation settings and interface appearance settings, which are adjusted based on various network sizes.

Dependence of installation settings on the network scale selected

If you connect Administration Server to a MySQL or SQL Express database server, it is not recommended to use the application to manage more than 10,000 devices. For the MariaDB database management system, the maximum recommended number of managed devices is 20,000.

Page top

Step 5. Selecting a database

At this step of the Wizard, you must select the mechanism—Microsoft SQL Server (SQL Express) or MySQL—that will be used to store the Administration Server database. The MySQL option is relevant to both MySQL and MariaDB.

It is recommended to install the Administration Server on a dedicated server instead of a domain controller. However, if you install Kaspersky Security Center on a server that acts as a read-only domain controller (RODC), Microsoft SQL Server (SQL Express) must not be installed locally (on the same device). In this case, we recommend that you install Microsoft SQL Server (SQL Express) remotely (on a different device), or that you use MySQL or MariaDB, if you need to install the DBMS locally.

The Administration Server database structure is provided in the klakdb.chm file, which is located in the Kaspersky Security Center installation folder (this file is also available in an archive on the Kaspersky portal: klakdb.zip).

Step 6. Configuring the SQL Server

At this step of the Wizard, you configure SQL Server.

Depending on the database that you have selected, specify the following settings:

• If you selected Microsoft SQL Server (SQL Server Express) in the previous step:
  • In the SQL Server instance name field, specify the name of the SQL Server on the network. To view a list of all SQL Servers that are on the network, click the Browse button. This field is blank by default.

    If you connect to the SQL Server through a custom port, then together with the SQL Server host name specify the port number separated with a comma, for example:

    SQL_Server_host_name,1433

    If you secure communication between the Administration Server and SQL Server by means of a certificate, specify in the SQL Server instance name field the same host name that was used at the certificate generating. If you use a named instance of SQL Server, then together with the SQL Server host name specify the port number separated with a comma, for example:

    SQL_Server_name,1433

    If you use several instances of SQL Server on the same host, then additionally specify the instance name separated with a backslash, for example:

    SQL_Server_name\SQL_Server_instance_name,1433

    If a SQL Server on the enterprise network has the Always On feature enabled, specify the name of the availability group listener in the SQL Server instance name field. Note that Administration Server supports only the synchronous-commit availability mode when the Always On feature is enabled.

  • In the Database name field, specify the name of the database that has been created to store Administration Server data. The default value is KAV.

  If at this stage you want to install SQL Server on the device from which you are installing Kaspersky Security Center, you must stop installation and restart it after SQL Server is installed. The supported SQL Server versions are listed in the system requirements.

  If you want to install SQL Server on a remote device, you do not have to interrupt the Kaspersky Security Center Setup Wizard. Install SQL Server and resume installation of Kaspersky Security Center.

• If you selected MySQL in the previous step:
  • In the SQL Server instance name field, specify the name of the SQL Server instance. By default, the name is the IP address of the device on which Kaspersky Security Center is to be installed.
  • In the Port field, specify the port for Administration Server connection to the SQL Server database. The default port number is 3306.
  • In the Database name field, specify the name of the database that has been created to store Administration Server data. The default value is KAV.

Page top

Step 7. Selecting an authentication mode

Determine the authentication mode that will be used when Administration Server connects to the SQL Server.

Depending on the database that is selected, you can choose from the following authentication modes:

• For SQL Express or Microsoft SQL Server select one of the following options:
  • Microsoft Windows Authentication mode. Verification of rights uses the account used for starting Administration Server.
  • SQL Server Authentication mode. If you select this option, the account specified in the window is used to verify access rights. Fill in the Account and Password fields.

    To see the entered password, click and hold the Show button.

  For both authentication modes, the application checks if the database is available. If the database is not available, an error message is displayed, and you have to provide correct credentials.

  If the Administration Server database is stored on another device and the Administration Server account does not have access to the database server, you must use SQL Server authentication mode when installing or upgrading Administration Server. This may occur when the device that stores the database is outside the domain or when Administration Server is installed under a LocalSystem account.

• For the MySQL server or MariaDB server, specify the account and password.

Step 8. Unpacking and installing files on the hard drive

After the installation of Kaspersky Security Center components is configured, you can start installing files on the hard drive.

If installation requires additional programs, the Setup Wizard will notify you, on the Installing Prerequisites page, before installation of Kaspersky Security Center begins. The required programs are installed automatically after you click the Next button.

On the last page, you can select which console to start for work with Kaspersky Security Center:

• Start MMC-based Administration Console
• Start Kaspersky Security Center Web Console

  This option is available only if you opted to install Kaspersky Security Center 13.1 Web Console in one of the previous steps.

You can also click Finish to close the Wizard without starting work with Kaspersky Security Center. You can start the work later at any time.

At the first startup of Administration Console or Kaspersky Security Center 13.1 Web Console, you can perform the initial setup of the application.

When the Setup Wizard finishes, the following application components are installed on the hard drive on which the operating system was installed:

• Administration Server (together with the server version of Network Agent)
• Microsoft Management Console-based Administration Console
• Kaspersky Security Center 13.1 Web Console (if you chose to install it)
• Application management plug-ins available in the distribution kit

Additionally, Microsoft Windows Installer 4.5 will be installed if it was not installed previously.