Automated migration from Kaspersky Security Center to Kaspersky Endpoint Security Cloud

You can migrate your users' devices from Kaspersky Security Center to Kaspersky Endpoint Security Cloud by using a script, as described in this section.

You can migrate automatically only devices running Windows.

Before starting the migration procedure, make sure that there is no password for uninstallation protection within the Kaspersky Endpoint Security for Windows and Network Agent policies.
For the time of migration, disable the uninstallation protection if it is enabled. When the devices are connected to Kaspersky Endpoint Security Cloud, you will be able to turn this protection on again via the Kaspersky Endpoint Security Cloud console.

As an alternative, you can view a video instruction for using the migration script. The video includes subtitles in all of the languages supported by Kaspersky Endpoint Security Cloud.

To migrate to Kaspersky Endpoint Security Cloud:

1. On the Kaspersky Security Center server, create a folder.
2. Go to your Kaspersky Endpoint Security Cloud workspace.

   If you do not have a workspace yet, create it.

3. Go to the Distribution packages section.
4. Download the distribution package for Kaspersky Endpoint Security for Windows to the created folder.
5. In any text editor, create a file with the migration script:

   Script contents

6. Save the script as a *.ps1 file to the created folder.
7. Run PowerShell, and then drag and drop the created script there.

   The script will automatically create the following Kaspersky Security Center tasks:

   • Uninstallation of Kaspersky Endpoint Security for Windows from all devices in the Managed devices group, excluding the device with Kaspersky Security Center.
   • Reinstallation of Kaspersky Endpoint Security for Windows on the devices, after which they will be connected to Kaspersky Endpoint Security Cloud.
8. Follow the instructions within the script:
   1. Specify whether the devices for migration are in the domain (Are the devices for migration in the domain? Y/N):
      • If the devices for migration are not in the domain, type N and press Enter.

        You will be asked to type the Kaspersky Security Center Installation Administrator credentials, specify the path to the Kaspersky Endpoint Security Cloud installation package, and then choose whether to perform a force restart of the devices (Force Restart? Y/N).

      • If the devices for migration are in the domain, type Y and press Enter.

        You will be asked to type the Kaspersky Security Center Installation Administrator credentials, specify the path to the Kaspersky Endpoint Security Cloud installation package, specify credentials for a local administrator on the devices, and choose whether to perform a force restart of the devices (Force Restart? Y/N).

      When specifying the path to the Kaspersky Endpoint Security Cloud installation package, you can drag and drop it to the PowerShell window or specify the path manually (but do not forget to add the *.exe extension).

      For detailed information about user roles in Kaspersky Security Center, refer to the Kaspersky Security Center documentation.

   2. Specify whether the devices must be forcibly restarted (Force Restart? Y/N):
      • If you need to perform a force restart, type Y and press Enter, specify the restart delay in minutes, and then choose whether to start the migration immediately (Do you want to start migration now? Y/N).
      • If you do not need to perform a force restart, type N and press Enter. In this case, you will have to run both uninstallation and reinstallation tasks manually from Kaspersky Security Center.
   3. Specify whether the migration must start immediately (Do you want to start migration now? Y/N):
      • If you want the uninstallation task to run automatically, type Y and press Enter. You will need to run only the reinstallation task manually from Kaspersky Security Center.
      • If you are going to run both uninstallation and reinstallation tasks manually from Kaspersky Security Center, type N and press Enter.
9. Open the Kaspersky Security Center Administration Console.
10. In the console tree, open the Tasks folder.
11. If the uninstallation task was not started automatically according to the settings that you defined during the script execution, run the KSC to KES Cloud migration – Uninstall task.
12. If you have configured the force restart of the devices, make sure that the devices rebooted successfully.

    This is required for successful completion of the installation task. To determine that the reboot is successful, you may use the execution statistics of the uninstallation task (wait until it fully completes) and the fact that the Network Agent installation status on all of the devices in the Managed devices section is No.

    Otherwise, restart the devices manually.

13. If your users' devices are not in the domain, open the installation task, and then specify a local administrator account on the devices.
14. Run the KSC to KES Cloud migration – Install KES Cloud task.

After the installation task completes successfully, your users' devices running Windows will be connected to Kaspersky Endpoint Security Cloud (the connection may take up to 15 minutes). The Default security profile (configured by Kaspersky experts) will be automatically applied to each device.