Installation of the Kaspersky Security main administration plug-in and Integration Server

Prior to beginning installation of the Kaspersky Security main administration plug-in, Integration Server, and Integration Server Console, it is recommended to close the Kaspersky Security Center Administration Console.

You can install the Kaspersky Security main administration plug-in, Integration Server, and the Integration Server Console by using one of the following methods:

• In interactive mode using the Wizard
• In silent mode via the command line

The main administration plug-in for Kaspersky Security and Integration Server components should be installed using an account that has software installation privileges (for example, an account from the group of local administrators).

The Kaspersky Security main administration plug-in and Integration Server Console must be installed on the computer on which the Kaspersky Security Center Administration Console is installed. The Integration Server must be installed on the computer on which the Administration Server of Kaspersky Security Center is installed.

The Microsoft .NET Framework 4.6.1 platform is required for installation of the Integration Server, Integration Server Console, and Kaspersky Security administration plug-in. You can install the Microsoft .NET Framework 4.6.1 platform in advance or it will be installed automatically during the installation of Kaspersky Security application components. If there are any problems with the installation of Microsoft .NET Framework 4.6.1, make sure that Windows updates KB2919442 and KB2919355 have been installed on the computer.

Depending on the availability of Kaspersky Security Center components installed on the computer, the following operations are performed once installation is started:

• If only the Administration Console of Kaspersky Security Center is installed on the computer, the Kaspersky Security administration plug-in and the Integration Server Console are installed.
• If the Kaspersky Security Center Administration Server and the Administration Console of Kaspersky Security Center are installed on the computer, the Kaspersky Security administration plug-in, the Integration Server, and the Integration Server Console are installed.

A secure SSL connection is used for interaction between the Integration Server and the Integration Server Console, SVMs, the VMware vCenter Server, and VMware NSX Manager. To eliminate known vulnerabilities in the operating system for the SSL protocol, during installation of the Integration Server changes described in the Microsoft technical support database are made to the operating system registry. These changes result in the disabling of the following encryption ciphers and protocols:

• SSL 3.0
• SSL 2.0
• AES 128
• RC2 40/56/128
• RC4 40/56/64/128
• 3DES 168

While the Integration Server is being installed, the Integration Server's self-signed SSL certificate used for establishing a secure connection with the Integration Server is installed in the operating system registry. If necessary, you can replace the SSL certificate of the Integration Server (the certificate replacement procedure is described in the Knowledge Base).

If the Integration Server was previously installed in your virtual infrastructure and you removed it but saved data used in the operation of the Integration Server, this data is used automatically when you install the Integration Server again.

Installation in interactive mode

To install the Kaspersky Security main administration plug-in and Integration Server components in interactive mode using the Wizard:

1. On the computer hosting the Administration Console and Administration Server of Kaspersky Security Center, start the ksv-components_6.0.0.XXX_mlg.exe file, where 6.0.0.XXX is the application version number. This file is included in the distribution kit.

   If the Kaspersky Security Center Administration Server is not installed on a computer, the Integration Server will not be installed on that computer. Only the Kaspersky Security administration plug-in and Integration Server Console will be installed.

   The Kaspersky Security Components Installation Wizard will start.

2. Select the localization language of the Wizard and of the Kaspersky Security components and proceed to the next step of the Wizard.

   By default, the window uses the localization language of the operating system installed on the computer where the Wizard was started.

3. Read the End User License Agreement concluded between you and Kaspersky, and the Privacy Policy describing the handling and transmission of data.

   To continue the installation, you must confirm that you have fully read and accept the terms of the End User License Agreement and the Privacy Policy. To confirm, select both check boxes in the window of the Wizard.

   Proceed to the next step of the wizard.

4. If the Kaspersky Security Center Administration Server is installed on the computer running the Wizard and this computer does not belong to an Active Directory domain, you must create a password for the Integration Server administrator account. The Integration Server administrator account (admin) is used for managing the Integration Server.

   Enter a password in the Password and Confirm password fields. The account name cannot be edited.

   A password must be no longer than 60 characters. You can use only letters of the Latin alphabet (uppercase and lowercase letters), numerals, and the following special characters: ! # $ % & ' ( ) * " + , - . / \ : ; < = > _ ? @ [ ] ^ ` { | } ~. For security purposes, you are advised to set a password that is at least 8 characters long and use at least three of the four categories of characters: lowercase letters, uppercase letters, numerals, and special characters.

   Proceed to the next step of the wizard.

5. If the Kaspersky Security Center Administration Server is installed on the computer running the Wizard and port 7271 used to connect to the Integration Server by default is busy, you must specify a port number for connecting to the Integration Server.

   In the Port field, specify a port number in the range of 1025–65536 and proceed to the next step of the Wizard.

6. Review the information about the actions that the Wizard will perform and click Next to begin performing the listed actions.
7. Wait for the wizard to finish.

   If an error occurs during wizard operation, the wizard rolls back the changes made.

8. Click Finish to close the Wizard window.

Information about the work of the Wizard is written to Kaspersky Security Components Installation Wizard trace files. If the Wizard ended with an error, you can use these files when contacting Technical Support.

Installing via the command line

Prior to installing the administration plug-in, it is recommended to carefully read the text of the End User License Agreement and the Privacy Policy. To do so, type the following command in the command line:

ksv-components_6.0.0.XXX_mlg.exe --lang=<language ID> --show-EulaAndPrivacyPolicy

where 6.0.0.XXX is the number of the application version.

The text of the End User License Agreement and the Privacy Policy is output to the EulaAndPrivacyPolicy_<language ID>.txt file in the %temp% folder.

To install the Kaspersky Security main administration plug-in and Integration Server components via the command line,

type one of the following commands in the command line:

• if the computer on which installation is performed belongs to an Active Directory domain:

  ksv-components_6.0.0.XXX_mlg.exe -q --lang=<language ID> --accept-EulaAndPrivacyPolicy=yes

• if the computer on which installation is performed does not belong to an Active Directory domain:

  ksv-components_6.0.0.XXX_mlg.exe -q --lang=<language ID> --accept-EulaAndPrivacyPolicy=yes --viisPass=<password>

where:

• 6.0.0.XXX is the number of the application version.
• <language ID> is the ID of the language of components to install.

  The language ID must be indicated in the following format: ru, en, de, fr, zh-Hans, ja. It is case sensitive.

• <password> is the password of the Integration Server administrator account. If the computer on which Integration Server is installed does not belong to an Active Directory domain, the Integration Server administrator account (admin) is used to manage the Integration Server.

  A password must be no longer than 60 characters. You can use only letters of the Latin alphabet (uppercase and lowercase letters), numerals, and the following special characters: ! # $ % & ' ( ) * " + , - . / \ : ; < = > _ ? @ [ ] ^ ` { | } ~. For security purposes, you are advised to set a password that is at least 8 characters long and use at least three of the four categories of characters: lowercase letters, uppercase letters, numerals, and special characters.

• accept-EulaAndPrivacyPolicy=yes means that you accept the terms of the End User License Agreement and the Privacy Policy describing the handling and transmission of data. By setting the value to yes, you confirm the following:
  • You have fully read, understand, and accept the provisions and terms of the End User License Agreement.
  • You have fully read and understand the Privacy Policy, you understand and consent that your data will be processed and transmitted (including to third-party countries) in accordance with the Privacy Policy.

  You must accept the terms of the End User License Agreement and Privacy Policy if you want to install the Kaspersky Security administration plug-in and Integration Server components.

Port number 7271 is used by default for connecting to the Integration Server. If you want to use a different port to connect to the Integration Server, specify --viisPort=<port number in the range of 1025–65536> in the command.

Installation of the Kaspersky Security main administration plug-in and Integration Server components may take some time. Information about the installation result is written to Kaspersky Security Components Installation Wizard trace files. If installation ended with an error, you can use these files when contacting Technical Support.