Kaspersky Security Center 13.1

Installation of Network Agent in silent mode (without a response file)

Partial installation configuration through setup.exe

Installation of Network Agent in silent mode (without a response file)

Page top

General information

Installers of Kaspersky Security Center 13.1 components (Administration Server, Network Agent, and Administration Console) are built on Windows Installer technology. An MSI package is the core of an installer. This format of packaging allows using all of the advantages provided by Windows Installer: scalability, availability of a patching system, transformation system, centralized installation through third-party solutions, and transparent registration with the operating system.

Partial installation configuration through setup.exe

Page top

Installation in silent mode (with a response file)

The installers of Administration Server and Network Agent have the feature of working with the response file (ss_install.xml), where the parameters for installation in silent mode without user participation are integrated. The ss_install.xml file is located in the same folder as the MSI package; it is used automatically during installation in silent mode. You can enable the silent installation mode with the command line key "/s".

An overview of an example run follows:

setup.exe /s

Before you start the installer in silent mode, read the End User License Agreement (EULA). If the Kaspersky Security Center distribution kit does not include a TXT file with the text of the EULA, you can download the file from the Kaspersky website.

The ss_install.xml file is an instance of the internal format of parameters of the Kaspersky Security Center installer. Distribution packages contain the ss_install.xml file with the default parameters.

Please do not modify ss_install.xml manually. This file can be modified through the tools of Kaspersky Security Center when editing the parameters of installation packages in Administration Console.

To modify the response file for Administration Server installation:

Open the Kaspersky Security Center distribution package. If you use a full package EXE file, then unpack it.
Form the Server folder, open the command line, and then run the following command:

setup.exe /r ss_install.xml

The Kaspersky Security Center installer starts.
Follow the Wizard's steps to configure the Kaspersky Security Center installation.

When you complete the Wizard, the response file is automatically modified according to the new settings that you specified.

See also:

Installation of Network Agent in silent mode (without a response file)

Partial installation configuration through setup.exe

Main installation scenario

Page top

Installation of Network Agent in silent mode (without a response file)

You can install Network Agent with a single .msi package, specifying the values of MSI properties in the standard way. This scenario allows Network Agent to be installed by using group policies. To avoid conflicts between parameters defined through MSI properties and parameters defined in the response file, you can disable the response file by setting the property DONT_USE_ANSWER_FILE=1. An example of a run of the Network Agent installer with an .msi package is as follows.

Installation of Network Agent in non-interactive mode requires acceptance of the terms of the End User License Agreement. Use the EULA=1 parameter only if you have fully read, understand and accept the terms of the End User License Agreement.

Example:

msiexec /i "Kaspersky Network Agent.msi" /qn DONT_USE_ANSWER_FILE=1 SERVERADDRESS=kscserver.mycompany.com EULA=1

You can also define the installation parameters for an .msi package by preparing the response file in advance (one with an .mst extension). This command appears as follows:

Example:

msiexec /i "Kaspersky Network Agent.msi" /qn TRANSFORMS=test.mst;test2.mst

You can specify several response files in a single command.

Ports used by Kaspersky Security Center

Partial installation configuration through setup.exe

Main installation scenario

Page top

Partial installation configuration through setup.exe

When running installation of applications through setup.exe, you can add the values of any properties of MSI to the MSI package.

This command appears as follows:

Example:

/v"PROPERTY_NAME1=PROPERTY_VALUE1 PROPERTYNAME2=PROPERTYVALUE2"

See also:

Installation of Network Agent in silent mode (without a response file)

Page top

Administration Server installation parameters

The table below describes the MSI properties that you can configure when installing Administration Server. All of the parameters are optional, except for EULA and PRIVACYPOLICY.

Parameters of Administration Server installation in non-interactive mode

MSI property	Description	Available values
EULA	Acceptance of the licensing terms (required)	1—I have fully read, understand and accept the terms of the End User License Agreement. Other value or no value—I do not accept the terms of the License Agreement (installation is not performed).
PRIVACYPOLICY	Acceptance of the terms of the Privacy Policy (required)	1—I am aware and agree that my data will be handled and transmitted (including to third countries) as described in the Privacy Policy. I confirm that I have fully read and understand the Privacy Policy. Other value or no value—I do not accept the terms of the Privacy Policy (installation is not performed).
INSTALLATIONMODETYPE	Type of Administration Server installation	Standard. Custom.
INSTALLDIR	Application installation folder	String value.
ADDLOCAL	List of components to install (separated by commas)	CSAdminKitServer, NAgent, CSAdminKitConsole, NSAC, MobileSupport, KSNProxy, SNMPAgent, GdiPlusRedist, Microsoft_VC90_CRT_x86, Microsoft_VC100_CRT_x86. Minimum list of components sufficient for proper Administration Server installation: `ADDLOCAL=CSAdminKitServer, CSAdminKitConsole, KSNProxy, Microsoft_VC90_CRT_x86, Microsoft_VC100_CRT_x86`
NETRANGETYPE	Network size	NRT_1_100—From 1 to 100 devices. NRT_100_1000—From 101 to 1000 devices. NRT_GREATER_1000—More than 1000 devices.
SRV_ACCOUNT_TYPE	Way of specifying the user for the operation of the Administration Server service	SrvAccountDefault—The user account will be created automatically. SrvAccountUser—The user account is defined manually.
SERVERACCOUNTNAME	User name for the service	String value.
SERVERACCOUNTPWD	User password for the service	String value.
DBTYPE	Database type	MySQL—A MySQL or MariaDB database server will be used. MSSQL—A Microsoft SQL Server (SQL Server Express) database server will be used.
MYSQLSERVERNAME	Full name of MySQL or MariaDB database server	String value.
MYSQLSERVERPORT	Number of port for connection to MySQL or MariaDB database server	Numerical value.
MYSQLDBNAME	Name of MySQL or MariaDB database server	String value.
MYSQLACCOUNTNAME	User name for connection to MySQL or MariaDB database server	String value.
MYSQLACCOUNTPWD	User password for connection to MySQL or MariaDB database server	String value.
MSSQLCONNECTIONTYPE	Type of use of MSSQL database	InstallMSSEE—Install from a package. ChooseExisting—Use the installed server.
MSSQLSERVERNAME	Full name of SQL Server instance	String value.
MSSQLDBNAME	Name of SQL Server database	String value.
MSSQLAUTHTYPE	Method of authentication for connection to SQL Server	Windows. SQLServer.
MSSQLACCOUNTNAME	User name for connection to SQL Server in SQLServer mode	String value.
MSSQLACCOUNTPWD	User password for connection to SQL Server in SQLServer mode	String value.
CREATE_SHARE_TYPE	Method of specifying the shared folder	Create—Create a new shared folder; in this case, the following properties must be defined: SHARELOCALPATH—Path to a local folder. SHAREFOLDERNAME—Network name of a folder. Null—EXISTSHAREFOLDERNAME property must be specified.
EXISTSHAREFOLDERNAME	Full path to an existing shared folder	String value.
SERVERPORT	Port number to connect to Administration Server	Numerical value.
SERVERSSLPORT	Number of port for establishing SSL connection to Administration Server	Numerical value.
SERVERADDRESS	Administration Server address	String value.
SERVERCERT2048BITS	Size of the key for the Administration Server certificate (bits)	1—The size of the key for the Administration Server certificate is 2048 bit. 0—The size of the key for the Administration Server certificate is 1024 bit. If no value is specified, the size of the key for the Administration Server certificate is 1024 bit.
MOBILESERVERADDRESS	Address of the Administration Server for connection of mobile devices; ignored if the MobileSupport component has not been selected	String value.

See also:

Installation of Network Agent in silent mode (without a response file)

Installing Network Agent in non-interactive (silent) mode

Partial installation configuration through setup.exe

Page top

Network Agent installation parameters

The table below describes the MSI properties that you can configure when installing Network Agent. All of the parameters are optional, except for EULA and SERVERADDRESS.

Parameters of Network Agent installation in non-interactive mode

MSI property	Description	Available values
EULA	Acceptance of the terms of the License Agreement	1—I have fully read, understand and accept the terms of the End User License Agreement. 0—I do not accept the terms of the License Agreement (installation is not performed). No value—I do not accept the terms of the License Agreement (installation is not performed).
DONT_USE_ANSWER_FILE	Read installation settings from response file	1—Do not use. Other value or no value—Read.
INSTALLDIR	Path to the Network Agent installation folder	String value.
SERVERADDRESS	Administration Server address (required)	String value.
SERVERPORT	Number of port for connection to Administration Server	Numerical value.
SERVERSSLPORT	Number of the port for encrypted connection to Administration Server by using SSL protocol	Numerical value.
USESSL	Whether to use SSL connection	1—Use. Other value or no value—Do not use.
OPENUDPPORT	Whether to open a UDP port	1—Open. Other value or no value—Do not open.
UDPPORT	UDP port number	Numerical value.
USEPROXY	Whether to use a proxy server	1—Use. Other value or no value—Do not use.
PROXYLOCATION (PROXYADDRESS:PROXYPORT)	Proxy address and number of port for connection to proxy server	String value.
PROXYLOGIN	Account for connection to proxy server	String value.
PROXYPASSWORD	Password of account for connection to proxy server (Do not specify any details of privileged accounts in the parameters of installation packages.)	String value.
GATEWAYMODE	Connection gateway use mode	0—Do not use connection gateway. 1—Use this Network Agent as connection gateway. 2—Connect to the Administration Server using connection gateway.
GATEWAYADDRESS	Connection gateway address	String value.
CERTSELECTION	Method of receiving a certificate	GetOnFirstConnection—Receive a certificate from the Administration Server. GetExistent—Select an existing certificate If this option is selected, the CERTFILE property must be specified.
CERTFILE	Path to the certificate file	String value.
VMVDI	Enable dynamic mode for Virtual Desktop Infrastructure (VDI)	1—Enable. 0—Do not enable. No value—Do not enable.
LAUNCHPROGRAM	Whether to start the Network Agent service after installation	1—Start. Other value or no value—Do not start.
NAGENTTAGS	Tag for Network Agent (has priority over the tag given in the response file)	String value.

See also:

Installing Network Agent in non-interactive (silent) mode

Installation of Network Agent in silent mode (without a response file)

Ports used by Kaspersky Security Center

Partial installation configuration through setup.exe