Kaspersky Security Center 13.1

Installation of Kaspersky Security Center 13.1 Web Console on Linux platforms

This section explains how to install Kaspersky Security Center 13.1 Web Console Server (also referred to as Kaspersky Security Center 13.1 Web Console) on devices running the Linux operating system (see the list of supported Linux distributions).

In this section

Installing Kaspersky Security Center 13.1 Web Console on Linux platforms

Kaspersky Security Center 13.1 Web Console installation parameters

Page top
[Topic 181956]

Installing Kaspersky Security Center 13.1 Web Console on Linux platforms

This section describes how to install Kaspersky Security Center 13.1 Web Console Server (also referred to as Kaspersky Security Center 13.1 Web Console) on devices running the Linux operating system. Before installation, you must install a database management system and the Kaspersky Security Center Administration Server.

Use the installation file—ksc-web-console-[version_number].deb or ksc-web-console-[version_number].x86_64.rpm—that corresponds to the Linux distribution installed on your device. You receive the installation file by downloading it from the Kaspersky website.

To install Kaspersky Security Center 13.1 Web Console:

  1. Make sure that the device on which you want to install Kaspersky Security Center 13.1 Web Console is running one of the supported Linux distributions.
  2. Read the End User License Agreement (EULA). If the Kaspersky Security Center distribution kit does not include a TXT file with the text of EULA, you can download the file from the Kaspersky website. If you do not accept the terms of the License Agreement, do not install the application.
  3. Create a response file that contains parameters for connecting Kaspersky Security Center 13.1 Web Console to the Administration Server. Name this file ksc-web-console-setup.json and place it in the following directory: /etc/ksc-web-console-setup.json.

    Example of a response file containing the minimal set of parameters and the default address and port:

    {

    "address": "127.0.0.1",

    "port": 8080,

    "trusted": "127.0.0.1|13299|/var/opt/kaspersky/klnagent_srv/1093/cert/klserver.cer|KSC Server",

    "acceptEula": true

    }

    When you install Kaspersky Security Center 13.1 Web Console on the Linux ALT operating system, you must specify a port number other than 8080, because port 8080 is used by the operating system.

    Kaspersky Security Center 13.1 Web Console cannot be updated by using the same .rpm installation file. If you want to change settings in a response file and use this file to reinstall the application, you must first remove the application, and then install it again with the new response file.

  4. Under an account with root privileges, use the command line to run the setup file with the .deb or .rpm extension, depending on your Linux distribution.
    • To install or upgrade Kaspersky Security Center 13.1 Web Console from a .deb file, run the following command:

      $ sudo dpkg -i ksc-web-console-[version_number].deb

    • To install Kaspersky Security Center 13.1 Web Console from an .rpm file, run the following command:

      $ sudo rpm -ivh --nodeps ksc-web-console-[version_number].x86_64.rpm

    • To upgrade from a previous version of Kaspersky Security Center Web Console, run one of the following commands:

      • For devices running RPM-based operating system:

        $ sudo rpm -Uvh --nodeps --force ksc-web-console-[version_number].x86_64.rpm

      • For devices running Debian-based operating system:

        $ sudo dpkg -i ksc-web-console-[version_number].x86_64.deb

    This starts unpacking of the setup file. Please wait until the installation is complete. Kaspersky Security Center 13.1 Web Console is installed to the following directory: /var/opt/kaspersky/ksc-web-console.

When the installation is complete, you can use your browser to open and log in to Kaspersky Security Center 13.1 Web Console.

Page top
[Topic 181968]

Kaspersky Security Center 13.1 Web Console installation parameters

For installing Kaspersky Security Center 13.1 Web Console Server on devices running Linux, you must create a response file in the JSON format, which contains parameters for connecting Kaspersky Security Center 13.1 Web Console to the Administration Server.

Example of a response file containing the minimal set of parameters and the default address and port:

{

"address": "127.0.0.1",

"port": 8080,

"defaultLangId": 1049,

"enableLog": false,

"trusted": "127.0.0.1|13299|/var/opt/kaspersky/klnagent_srv/1093/cert/klserver.cer|KSC Server",

"acceptEula": true,

"certPath": "/var/opt/kaspersky/klnagent_srv/1093/cert/klserver.cer",

"webConsoleAccount": "Group1:User1",

"managementServiceAccount": "Group1:User2",

"serviceWebConsoleAccount": "Group1:User3",

"pluginAccount": "Group1:User4",

"messageQueueAccount": "Group1:User5"

}

When you install Kaspersky Security Center 13.1 Web Console on the Linux ALT operating system, you must specify a port number other than 8080, because port 8080 is used by the operating system.

The table below describes the parameters that can be specified in a response file.

Parameters for installing Kaspersky Security Center 13.1 Web Console on devices running Linux

Parameter

Description

Available values

address

Address of Kaspersky Security Center 13.1 Web Console Server (required).

String value.

port

Number of port that Kaspersky Security Center 13.1 Web Console Server uses to connect to the Administration Server (required).

Numerical value.

defaultLangId

Language of user interface (by default, 1033).

Numerical code of the language:

  • German: 1031
  • English: 1033
  • Spanish: 3082
  • Spanish (Mexico): 2058
  • French: 1036
  • Japanese: 1041
  • Kazakh: 1087
  • Polish: 1045
  • Portuguese (Brazil): 1046
  • Russian: 1049
  • Turkish: 1055
  • Simplified Chinese: 4
  • Traditional Chinese: 31748

If no value is specified, then English language is used.

enableLog

Whether or not to enable Kaspersky Security Center 13.1 Web Console activity logging.

Boolean value:

  • true—Logging is enabled (selected by default).
  • false—Logging is disabled.

trusted

List of trusted Administration Servers allowed to connect to Kaspersky Security Center 13.1 Web Console (required). Each Administration Server must be defined with the following parameters:

  • Administration Server address
  • OpenAPI port that is used by Kaspersky Security Center 13.1 Web Console to connect to the Administration Server (by default, 13299)
  • Path to the certificate of the Administration Server
  • Administration Server name that will be displayed in the login window

The parameters are separated with vertical bars. If several Administration Servers are specified, separate them with two vertical bars (pipes).

String value in the following format:

"server address|port|certificate path|server name".

Example:

"X.X.X.X|13299|/cert/server-1.cer|Server 1||Y.Y.Y.Y|13299|/cert/server-2.cer|Server 2".

acceptEula

Whether or not you want to accept the terms of the End User License Agreement (EULA). The file containing the terms of the EULA is downloaded together with the installation file (required).

Boolean value:

  • true—I have fully read, understand, and accept the terms of the End User License Agreement.
  • false—I do not accept the terms of the License Agreement (selected by default).

certDomain

If you want to generate a new certificate, use this parameter to specify the domain name for which a new certificate is to be generated.

String value.

certPath

If you want to use an existing certificate, use this parameter to specify the path to the certificate file.

String value.

Specify the path "/var/opt/kaspersky/klnagent_srv/1093/cert/klserver.cer" to use the existing certificate. For a custom certificate, specify the path where this custom certificate is stored.

keyPath

If you want to use an existing certificate, use this parameter to specify path to the key file.

String value.

webConsoleAccount

Name of the account under which the KSCWebConsole service is run.

String value in the following format: "group name:user name".

Example: "Group1:User1".

If no value is specified, the Kaspersky Security Center 13.1 Web Console installer creates a new account with the default name user_management_%uid%.

managementServiceAccount

Name of the privileged account under which the KSCWebConsoleManagement service is run.

String value in the following format: "group name:user name".

Example: "Group1:User1".

If no value is specified, the Kaspersky Security Center 13.1 Web Console installer creates a new account with the default name user_nodejs_%uid%.

serviceWebConsoleAccount

Name of the account under which the KSCSvcWebConsole service is run.

String value in the following format: "group name:user name".

Example: "Group1:User1".

If no value is specified, the Kaspersky Security Center 13.1 Web Console installer creates a new account with the default name user_svc_nodejs_%uid%.

pluginAccount

Name of the account under which the KSCWebConsolePlugin service is run.

String value in the following format: "group name:user name".

Example: "Group1:User1".

If no value is specified, the Kaspersky Security Center 13.1 Web Console installer creates a new account with the default name user_web_plugin_%uid%.

messageQueueAccount

Name of the account under which the KSCWebConsoleMessageQueue service is run.

String value in the following format: "group name:user name".

Example: "Group1:User1".

If no value is specified, the Kaspersky Security Center 13.1 Web Console installer creates a new account with the default name user_message_queue_%uid%.

If you specify the webConsoleAccount, managementServiceAccount, serviceWebConsoleAccount, pluginAccount, or messageQueueAccount parameters, make sure that the custom user accounts belong to the same security group. If these parameters are not specified, the Kaspersky Security Center 13.1 Web Console installer creates a default security group, and then creates user accounts with default names in this group.

See also:

Ports used by Kaspersky Security Center

Page top
[Topic 181969]