Installing EDR Agent

1. Copy the distribution kit folder to the user's computer.
2. Run setup_kes.exe.

The Setup Wizard starts.

Configuration of Kaspersky Endpoint Security

Choosing the configuration of the application

Select the Endpoint Detection and Response Agent configuration. In this configuration, you can only install the components that provide support for Detection and Response solutions: Endpoint Detection and Response (KATA) or Managed Detection and Response. This configuration is needed if a third-party Endpoint Protection Platform (EPP) is deployed in your organization alongside a Kaspersky Detection and Response solution. This makes Kaspersky Endpoint Security in the Endpoint Detection and Response Agent configuration compatible with third-party EPP applications.

Kaspersky Endpoint Security components

Select the components that you want to install (see figure below). You can change the available application components after the application is installed. To do so, you need to run the Setup Wizard again and choose to change the available components.

Advanced settings

Advanced application installation settings

Protect the application installation process. Installation protection includes protection against replacement of the distribution package with malicious applications, blocking access to the installation folder of Kaspersky Endpoint Security, and blocking access to the system registry section containing application keys. However, if the application cannot be installed (for example, when performing remote installation with the help of Windows Remote Desktop), you are advised to disable protection of the installation process.

Ensure compatibility with Citrix PVS. You can enable support of Citrix Provisioning Services to install Kaspersky Endpoint Security to a virtual machine.

Add the path to the file avp.com to the system variable %PATH%. You can add the installation path to the %PATH% variable for convenient use of the command line interface.

1. Run the command line interpreter (cmd.exe) as an administrator.
2. Go to the folder where the Kaspersky Endpoint Security distribution package is located.
3. Run the following command:

   setup_kes.exe /pEULA=1 /pPRIVACYPOLICY=1 /pKSN=1 /pSTANDALONEMODE=1 [/s]

   or

   msiexec /i <distribution kit name> EULA=1 PRIVACYPOLICY=1 KSN=1 STANDALONEMODE=1 [/qn]

As a result, the EDR Agent application for integration with Kaspersky Anti Targeted Attack Platform (EDR) is installed on the computer. You can confirm that application is installed and check application settings by issuing the status command.

1. In the Administration Console, go to the folder Administration Server → Additional → Remote installation → Installation packages.

   This opens a list of installation packages that have been downloaded to Kaspersky Security Center.

2. Open the properties of the installation package.

   If necessary, create a new installation package.

3. Go to the Settings section.
4. Select the Endpoint Detection and Response Agent configuration. In this configuration, you can only install the components that provide support for Detection and Response solutions: Endpoint Detection and Response (KATA) or Managed Detection and Response. This configuration is needed if a third-party Endpoint Protection Platform (EPP) is deployed in your organization alongside a Kaspersky Detection and Response solution. This makes Kaspersky Endpoint Security in the Endpoint Detection and Response Agent configuration compatible with third-party EPP applications.
5. Select the components that you want to install.

   You can change the available application components after the application is installed.

6. Save your changes.
7. Create a remote installation task. In task properties, select the installation package you created.

1. In the main window of the Web Console, select Discovery & Deployment → Deployment & Assignment → Installation packages.

   This opens a list of installation packages that have been downloaded to Kaspersky Security Center.

   

   List of installation packages

2. Open the properties of the installation package.

   If necessary, create a new installation package.

3. Select the Settings tab.
4. Go to the Protection components section.

   

   Components included in the installation package

5. Select the Endpoint Detection and Response Agent configuration. In this configuration, you can only install the components that provide support for Detection and Response solutions: Endpoint Detection and Response (KATA) or Managed Detection and Response. This configuration is needed if a third-party Endpoint Protection Platform (EPP) is deployed in your organization alongside a Kaspersky Detection and Response solution. This makes Kaspersky Endpoint Security in the Endpoint Detection and Response Agent configuration compatible with third-party EPP applications.
6. Select the components that you want to install.

   You can change the available application components after the application is installed.

7. Save your changes.
8. Create a remote installation task. In task properties, select the installation package you created.