Installing and removing Kaspersky Endpoint Agent for Linux

This section provides information about installing Kaspersky Endpoint Agent for Linux on a device, updating the previous version of the application, restoring and removing the application from the device.

Preparing to install Kaspersky Endpoint Agent for Linux

Before installing Kaspersky Endpoint Agent for Linux on a device or updating the previous version of the application, you must verify that the device satisfies the hardware and software requirements.

Installing Kaspersky Endpoint Agent for Linux using Kaspersky Security Center Administration Console

This section describes the remote installation of Kaspersky Endpoint Agent on a local device using Kaspersky Security Center Administration Console.

Installing the Kaspersky Endpoint Agent for Linux administration plug-in

You can manage Kaspersky Endpoint Agent in the Kaspersky Security Console by using the administration plug-in. Therefore, to gain access to the program management interface, the administration plug-in must be installed on the administrator's workstation.

To install the Kaspersky Endpoint Agent administration plug-in,

copy the klcfginst.msi file from the distribution kit to the device where Kaspersky Security Center Administration Console is installed and run the file.

The Setup Wizard of the program starts.

Page top

Adding devices for installing Kaspersky Endpoint Agent for Linux

To install the program remotely using Kaspersky Security Center, you must add the devices that you are installing the program on to the managed devices group.

To add devices for installing the application:

1. Install the Kaspersky Security Center Network Agent on the device.

   The procedure for preparing a Linux-running device for remote installation of Network Agent is described in the Kaspersky Security Center Help.

2. In the command line, run the following command: /opt/kaspersky/klnagent/bin/klmover --address <IP address of the Kaspersky Security Center server>.

   The device becomes available for management using Kaspersky Security Center.

   If Network Agent was previously installed on the device, the first two steps of these instructions are not necessary.

3. Open the Kaspersky Security Center Administration Console.
4. In the console tree, select the Managed devices folder.

   If Kaspersky Endpoint Security for Linux is installed on a device, the device will reside in the group in which the Kaspersky Endpoint Security for Linux policy is active. You do not need to move the device.

5. In the workspace of the folder, select the Devices tab.
6. Click Move devices to group.

   This opens the move devices wizard.

7. Click Select devices discovered on the network by the Administration Server.
8. In the next window of the wizard, in the list of devices, select the check box next to the device where you need to install the program.
9. Click Next.

   The device is moved to the managed devices group.

10. Click Finish to complete the wizard.

The device will become available for remote installation of the application.

Creating an installation package for Kaspersky Endpoint Agent for Linux

To remotely install the program using Kaspersky Security Center, you must create an installation package for Kaspersky Endpoint Agent from the Kaspersky repository or from a file.

Before creating the Kaspersky Endpoint Agent installation package, make sure that the administration plug-in is installed on the administrator workstation.

To create an installation package for the program from the Kaspersky program repository:

1. Open the Kaspersky Security Center Administration Console.
2. In the console tree, in the Administration Server → Advanced → Remote installation folder, select the Installation packages subfolder.
3. Click Create an installation package to start the installation package creation wizard.
4. In the Select installation package type window of the wizard, click Create an installation package for a Kaspersky application.

   When creating an installation package for a program, you will be prompted to read the End User License Agreement for that program and the Privacy Policy of that program. Carefully read the End User License Agreement between you and Kaspersky Lab, as well as the Privacy Policy. If you agree with all the terms of the License Agreement and the Privacy Policy, select the following check boxes in the I confirm that I have fully read, understand, and accept section:

   • The terms and conditions of this End User License Agreement
   • Privacy Policy describing the handling of data
5. In the next window of the wizard, enter the name for the new installation package.
6. In the next window of the wizard, select the Kaspersky Endpoint Agent installation file with the "kud" extension.
7. In the next window of the wizard, select Kaspersky Endpoint Agent components that you need to install, the installation directory and the installation mode of the program.

After the wizard finishes, the created installation package appears in the workspace of the Installation packages folder in the console tree.

To create an installation package for the program from a file:

1. Open the Kaspersky Security Center Administration Console.
2. In the console tree, in the Administration Server → Advanced → Remote installation folder, select the Installation packages subfolder.
3. Click Create an installation package to start the installation package creation wizard.
4. In the Select installation package type window of the wizard, click Create an installation package for the specified executable file.

   When creating an installation package for a program, you will be prompted to read the End User License Agreement for that program and the Privacy Policy of that program. Carefully read the End User License Agreement between you and Kaspersky Lab, as well as the Privacy Policy. If you agree with all the terms of the License Agreement and the Privacy Policy, select the following check boxes in the I confirm that I have fully read, understand, and accept section:

   • The terms and conditions of this End User License Agreement
   • Privacy Policy describing the handling of data
5. In the next window of the wizard, enter a name for the installation package.
6. In the next window of the wizard, select the installation file of the program and complete the creation of the installation package by following the directions of the wizard.

After the wizard finishes, the created installation package appears in the workspace of the Installation packages folder in the console tree.

Page top

Remote installation of Kaspersky Endpoint Agent for Linux on selected devices

Kaspersky Security Center allows you to install applications on devices remotely, using remote installation tasks.

To create and run the task to remotely install Kaspersky Endpoint Agent on selected devices:

1. Open the Kaspersky Security Center Administration Console.
2. In the console tree, in the Remote installation folder, select the Installation packages subfolder.
3. In the workspace of the folder, select the installation package of Kaspersky Endpoint Agent.
4. In the context menu of the installation package, select Install program.
5. The Remote Installation Wizard starts.
6. In the Select devices for installation, you can create a list of devices to install the program on.
7. In the Configure the remote installation task, configure the remote installation of the program.
8. In the Select operating system reboot option window, select whether the devices will be rebooted if a system reboot is required during installation.
9. In the Select accounts for access to devices window, you can add accounts that will be used to start the remote installation task.
10. In the Start installation window, click Next to create and start the remote installation task on selected devices.

    If in the Start installation window, the Do not start the task after the remote installation wizard finishes check box is selected, the remote installation task is not started. You can start this task manually later. The name of the task corresponds to the name of the installation package for installing the program: Install <name of the installation package>.

Installing Kaspersky Endpoint Agent for Linux using Kaspersky Security Center Web Console

This section describes the remote installation of Kaspersky Endpoint Agent for Linux on a local device using Kaspersky Security Center Web Console.

Installing the Kaspersky Endpoint Agent web administration plug-in

You can manage Kaspersky Endpoint Agent for Linux using Kaspersky Security Center Web Console with the web administration plug-in. Therefore to gain access to program management, you must install the web administration plug-in on the administrator workstation (see information on installing and updating the web administration plug-in in the help section that describes the management of Kaspersky Endpoint Agent for Windows).

Before installing, familiarize yourself with the information about compatible versions of the web administration plug-in.

Adding devices for installing Kaspersky Endpoint Agent for Linux

To install the program remotely using Kaspersky Security Center, you must add the devices that you are installing the program on to the managed devices group.

To add devices for installing the application:

1. Install the Kaspersky Security Center Network Agent on the device.

   The procedure for preparing a Linux-running device for remote installation of Network Agent is described in the Kaspersky Security Center Help.

2. In the command line, run the following command: /opt/kaspersky/klnagent/bin/klmover --address <IP address of the Kaspersky Security Center server>.

   The device becomes available for management using Kaspersky Security Center.

   If Network Agent was previously installed on the device, the first two steps of these instructions are not necessary.

3. Log in to the Kaspersky Security Center Web Console.
4. In the main window of the web console, select Device discovery -> Unassigned devices.

   If Kaspersky Endpoint Security for Linux is installed on a device, the device will reside in the group in which the Kaspersky Endpoint Security for Linux policy is active. You do not need to move the device.

5. In the list of devices, select the check box next to the device where you need to install the application.
6. Click Move to group.
7. This opens a menu on the right side; in the menu, select the check box next to the Managed devices group.
8. Click Move.

The device will become available for remote installation of the application.

Page top

Creating an installation package for Kaspersky Endpoint Agent for Linux

To remotely install the program using Kaspersky Security Center Web Console, you must create an installation package for Kaspersky Endpoint Agent for Linux from the Kaspersky program repository or from a file.

To create an installation package for the program:

1. Log in to the Kaspersky Security Center Web Console.
2. On the Discovery & Deployment tab, select Deployment & Assignment → Installation packages.
3. Click Add.

   This starts the New Package Wizard. To continue with the wizard, click Next.

4. At the first step of the wizard, you can select how you want to create the installation package: from the Kaspersky program repository or from a file.
   • If you selected Create an installation package for a Kaspersky application, a list of installation packages available on Kaspersky web servers is displayed. To make finding the necessary installation package easier, click Filter, and in the menu that opens in the Property window, select Operating system and the Linux option.
   • If you selected Create an installation package from a file, you are prompted to enter the path to a local folder containing the archive with the installation package of the program.
5. Select the necessary Kaspersky Endpoint Agent for Linux installation package.

   This opens a window containing information about the installation package.

6. Read the information and click Download and create installation package.

   The installation package begins downloading to the Administration Server.

7. While the download is in progress, the Accept button is displayed. Do the following:
   1. Click Accept to read the text of the License Agreement and the Privacy Policy.
   2. If you agree with all the terms of the License Agreement and the Privacy Policy, select the following check boxes in the I confirm that I have fully read, understand, and accept section:
      • the terms and conditions of this End User License Agreement
      • Privacy Policy describing the handling of data
   3. Click Accept.

      The download of the installation package resumes after both check boxes are selected. If you click Decline, the download is canceled.

8. After the download is complete, click Close to close the installation package information window.

The downloaded installation package is located in the Packages subfolder within the shared folder of the Administration Server. The downloaded installation package is displayed in the list of installation packages.

Page top

Remote installation of Kaspersky Endpoint Agent for Linux on selected devices

Kaspersky Security Center Web Console allows you to install applications on devices remotely, using remote installation tasks.

To create and run the task to remotely install Kaspersky Endpoint Agent for Linux on selected devices:

1. Log in to the Kaspersky Security Center Web Console.
2. On the Devices tab, select Tasks.
3. Click Add.

   The New Task Wizard starts. Follow the instructions of the wizard.

4. At the first step of the wizard:
   1. In the Application window, select Kaspersky Security Center 12.
   2. In the Task type window, select Install application remotely as the task type.
   3. If necessary, enter a name for the task in the Task name window.
   4. In the Select devices to which the task will be assigned section, select Device group.
5. Click Next.

   This opens the next screen of the New Task Wizard.

6. Select the check box next to the Managed devices group or check boxes next to individual devices in that group.
7. Click Next.

   This opens the next screen of the New Task Wizard.

8. In the Selecting installation package window, select the Kaspersky Endpoint Agent for Linux that you created earlier.

   Do not modify any other options at this step or the subsequent steps.

9. Click Next.

   This opens the final step of the New Task Wizard.

10. At the final step of the Wizard, click Finish.
11. Select the check box next to the created task in the task list.
12. Click Start.
13. Wait until the installation of Kaspersky Endpoint Agent for Linux on selected devices is complete.

    The status of the task changes to Completed.

Page top

Local installation of Kaspersky Endpoint Agent for Linux

This section contains information about installing Kaspersky Endpoint Agent on a local device from DEB or RPM installation packages.

To install the program or update an older version of the program:

1. Copy the DEB or RPM installation package of the program from the distribution kit to the user device.
2. Open the console and run the command to install the program from the relevant package:
   • To install the program from a deb installation package: sudo apt install package_name.deb
   • To install the program from an rpm installation package: sudo rpm -i package_name.rpm

The program is installed on the local device.

To use the program, you must accept the terms and conditions of the End User License Agreement and the Privacy Policy.

Too view the End User License Agreement and the Privacy Policy and accept the terms and conditions:

1. Open the console and run the /opt/kaspersky/epagent/sbin/lenactl --eula-pp accept command.
2. Carefully read the End User License Agreement between you and Kaspersky Lab.
3. Click I confirm that I have fully read, understand, and accept the terms and conditions of this End User License Agreement.
4. Carefully read the terms and conditions of the Privacy Policy.
5. Click I understand and agree that my information will be processed and transmitted (including to third countries) in accordance with the Privacy Policy. I confirm that I have fully read and understand the Privacy Policy.

The program is ready for use.

Page top

Updating and restoring Kaspersky Endpoint Agent for Linux

The program can be updated and restored using Kaspersky Security Center or locally.

To update Kaspersky Endpoint Agent for Linux using Kaspersky Security Center, you must create an installation package for the new version and follow the installation procedure. To restore the application, you can use the installation package created for the current version of the application.

Page top

Removing Kaspersky Endpoint Agent for Linux

The program can be removed using Kaspersky Security Center or locally.

To remove the program remotely from selected devices using Kaspersky Security Center:

1. Log in to the Kaspersky Security Center Web Console.
2. On the Devices tab, select Tasks.
3. Click Add.

   Follow the instructions of the New Task Wizard.

4. At the first step of the wizard:
   1. In the Application window, select Kaspersky Security Center 12.
   2. In the Task type window, select Uninstall application remotely as the task type.
   3. If necessary, enter a name for the task in the Task name window.
   4. In the Select devices to which the task will be assigned section, select Device group.
5. Click Next.

   This opens the next screen of the New Task Wizard.

6. Select the check box next to the Managed devices group or check boxes next to individual devices in that group.
7. Click Next.

   This opens the next screen of the New Task Wizard.

8. In the Application to uninstall window, select the installed version of Kaspersky Endpoint Agent for Linux.

   Do not modify any other options at this step or the subsequent steps.

9. At the last step of the Wizard, click Finish.
10. Select the check box next to the created task in the task list and click Start.
11. Wait until the removal of Kaspersky Endpoint Agent for Linux from the selected devices is complete.

    The task status changes to Completed.

Upon completion of the task, the selected application is removed from the selected devices.