Automatic upgrade (Linux)
5 March 2024
ID 221941
Starting with Kaspersky Scan Engine version 2.0, you can automatically upgrade Kaspersky Scan Engine to a newer version.
Using the install utility to upgrade
You can upgrade Kaspersky Scan Engine with the same utility that is used to install Kaspersky Scan Engine: the install
utility. You can find the utility in the distribution kit.
The install
utility upgrades Kaspersky Scan Engine when the program meets the following requirements:
- Kaspersky Scan Engine is already installed on the computer (that is, the
/opt/kaspersky/ScanEngine
directory exists).If Kaspersky Scan Engine is not installed on the computer, the
install
utility performs automatic installation. - The version of Kaspersky Scan Engine that is already installed is 2.0 or later, and this version is earlier than the version being installed during the upgrade.
If Kaspersky Scan Engine version does not meet this requirement, the
install
utility displays an error message, and then exits.
When upgrading Kaspersky Scan Engine, the install
utility backs up important objects such as configuration files, TLS certificates, and the license. Successful upgrade means that all of these objects are already integrated into the new version of Kaspersky Scan Engine. If the upgrade fails for some reason, the install
utility restores the previous version of Kaspersky Scan Engine, including objects that were backed up.
Stopping instances of Kaspersky Scan Engine
If the Kaspersky Scan Engine instance being upgraded is a part of a cluster, you need to stop all instances in the cluster before the upgrade.
It is important to stop all instances because the install
utility modifies the kavebase
database when upgrading Kaspersky Scan Engine.
To stop the Kaspersky Scan Engine instance:
- If an instance works in ICAP mode, run
service kavicapd stop.
- If an instance works in HTTP mode, run
service kavhttpd stop.
- If an instance uses the Kaspersky Scan Engine GUI, run
service klScanEngineUI stop.
Upgrading Kaspersky Scan Engine
To upgrade Kaspersky Scan Engine automatically:
- Make sure that you have root (administrator) privileges.
- Run
install
. - Read the End User License Agreement (EULA) for Kaspersky Scan Engine.
If you agree with the terms of the EULA, accept it. If you decline to accept the terms of the EULA, the upgrade will be canceled.
- If you agreed to use Kaspersky Security Network (KSN) earlier, the install utility displays the current terms of the EULA for KSN and the Privacy Policy. Read the new EULA for KSN and the Privacy Policy.
If you agree with the terms of the EULA and the Privacy Policy, accept them. If you decline the terms of the EULA for KSN or the Privacy Policy, you will not be able to use KSN, but the upgrade will continue. You can enable KSN later by using Kaspersky Scan Engine GUI or the Kaspersky Scan Engine configuration file (HTTP or ICAP).
- Specify the absolute path to the directory that contains the KAV SDK package.
The KAV SDK package is located in a separate directory, starting with Kaspersky Scan Engine version 2.1.
After you specify the necessary data, Kaspersky Scan Engine is upgraded, and then started.
After you upgrade Kaspersky Scan Engine, you can check the integrity of its components at any time by using the integrity check tool.
Migration from the init script to the systemd unit file
Starting from Kaspersky Scan Engine version 2.1, the init
script is no longer supported. Instead of this script, you can use the systemd
unit file.
If you used the init
script to manage Kaspersky Scan Engine in previous versions, the install
utility automatically performs the migration from the init
script to systemd
during the upgrade.
Learn more about using systemd
in HTTP mode and ICAP mode.
Adding new elements to the configuration files
There are new elements added in the new version of Kaspersky Scan Engine. The install
utility does not add these elements to the configuration files during the upgrade. You can add the new elements by using the Kaspersky Scan Engine GUI, or directly to the kavhttpd.xml and kavicapd.xml configuration files. See also the detailed information about the new elements in the configuration file.
Clearing browser cache
If you are using the Kaspersky Scan Engine GUI, clear your browser cache after the upgrade.