How to upgrade to Kaspersky Security for Windows Server 10.1
You can migrate to Kaspersky Security for Windows Server 10.1 from the following versions:
- Kaspersky Anti-Virus 8.0 for Windows Servers Enterprise Edition (8.0.0.559)
- Kaspersky Anti-Virus 8.0 for Windows Servers Enterprise Edition MR1 (8.0.1.923)
- Kaspersky Anti-Virus 8.0 for Windows Servers Enterprise Edition MR2 (8.0.2.213)
- Kaspersky Security for Windows Server (10.0.0.486)
Migrating application settings
The following settings are saved and imported without changing their values:
- Component and task settings
- Task logs and system audit logs
- The contents of Quarantine and Backup
- Accounts whose rights are used to launch tasks
- Rights to control the application
- Task notifications
When migrating to the new version, the following settings are reset:
- All counters, including the statuses of anti-virus databases and whether updates are needed
- Information about installed software module and anti-virus database updates
- Task execution statuses
- Rights to control the Kaspersky Security service
- Application and component settings configured through the registry
- Application and component settings changed and configured as a result of the installation of critical fixes
After the migration from the Kaspersky Anti-Virus 8.0 for Windows Servers Enterprise Edition version, the application events that are published to the Windows Event Log stop outputting to the Windows Event Log Snap-in. If you want to enable the application events outputting to the Windows Event Log Snap-in, you need to reboot a protected server or to restart the Windows Event Log Service.
Rules for applications launch control
When migrating to the new version, the application saves your lists of applications launch control rules without changing them. You don’t need to generate the lists again from scratch. An administrator can also import a configuration file created from rules used in previous versions into the Applications Launch Control task settings in the new version of Kaspersky Security for Windows Server.
When migrating to the new version, we recommend that you stop the Applications Launch Control task if it is running in Active mode, or switch the task to Statistics Only mode. After the migration is complete, we recommend that you use the Statistics Only mode to check the updated lists of rules and verify they work as expected.
List of untrusted computers
The new version of the application changes the mechanism used to block client computers exhibiting harmful file activity or encryption activity:
- The new version eliminates the Untrusted Hosts Blocking task.
- Blocking is now implemented by a change in the way the Real-Time File Protection and Anti-Cryptor tasks run.
- Lists of compromised client computers are saved in the Blocked Hosts storage.
- Settings for automatically unblocking a compromised client computer are configured in the properties for the Blocked Hosts storage.
After migrating to the new version of the application, lists of blocked hosts are not saved. Immediately after migrating and starting real-time protection tasks and the Anti-Cryptor task, the application automatically blocks access to network file resources according to the default settings for protection tasks using the Blocked Hosts storage.
Settings for automatically unblocking access to blocked network file resources are preserved during the migration process.
Updating administration tools
The Administration Plugin for Kaspersky Security for Windows Server 10.1 does not update the Plugins in previous versions. Policies and group tasks created for previous versions of the application will not be automatically applied to computers managed by Kaspersky Security for Windows Server 10.1. You can import created policies and group tasks manually when creating a policy or group task for Kaspersky Security for Windows Server 10.1 using the Administration Server Console.
Kaspersky Security 10.1 Console is installed over and replaces the Consoles in any previous versions being updated.
Compatibility of version 10.1 with earlier versions of consoles and plugins:
- Version 10.1 cannot be controlled by plugins of the previous version of the application.
- A plugin for version 10.1 cannot control previous versions of the application.
- Version 10.1 can control the Console in previous versions.
- The Console in version 10.1 can control previous versions of the application.
The Console in version 10.1 can control previous versions of the application.
The terms of the License Agreement for Kaspersky Security 10.1 for Windows Server differ from the terms stipulated for previous versions of application. You must read and accept the terms of the License Agreement in order to migrate to Kaspersky Security 10.1 for Windows Server.
Additionally, in order to install Kaspersky Security 10.1 for Windows Server, you must read and accept the Privacy Policy, which describes data processing. The text of the Privacy Policy is available in the Installation Wizard, the distribution package, and on the Kaspersky Lab website.
Kaspersky Security Network Statement
The terms of the Kaspersky Security Network Statement for Kaspersky Security 10.1 for Windows Server differ from the terms stipulated for previous versions of the application. To continue using the KSN cloud infrastructure to protect your server after you migrate to Kaspersky Security 10.1 for Windows Server, you must read and accept the terms of the new version of the Kaspersky Security Network Statement.
The text of the Kaspersky Security Network Statement for Kaspersky Security 10.1 for Windows Server is available in the application interface when configuring task settings or KSN Usage policies.
Licensing
If the license keys of the versions being updated have not expired when you migrate, the application automatically accepts the them and activates.
When version 10.1 activates using a license from a previous version of the application, a subset of the new components is available.
Any key used to activate previous versions of the application grants the right to use the following new components:
- Exploit Prevention
- Firewall Management
The availability of the following new components depends on the solution you are using:
- The File Integrity Monitor and Log Inspection components are available in solutions for file servers.
- The Device Control component is available in Advanced and Total solutions for file servers and network storages.
- The Traffic Security component (including the Microsoft Outlook extension) is available in Advanced and Total solutions and for file servers.
- The Traffic Security component is available for external proxy servers in the Total solutions for network storages.
- The Anti-Cryptor for NetApp component is available in the solution for network storages.
Installation settings during migration
You do not have to restart your computer when installing over a previous version.
By default, the application creates a new installation folder based on the path to the existing installation folder: if possible, the application creates a folder using the name of the new version, while using the same folder path. An administrator can manually enter a new path for the installation folder.