Kaspersky Security Center 14 Windows

Migration to Kaspersky Security Center Linux by using Administration Server data backup

You can use a data backup to migrate the Kaspersky Security Center Windows Administration Server data to Kaspersky Security Center Linux. Before the migration, make sure that necessary features of Kaspersky Security Center Windows are supported in Kaspersky Security Center Linux.

Limitations:

• The DBMS type used for Kaspersky Security Center Linux must match the DBMS type in the backup from Kaspersky Security Center Windows.

  An exception to this is if you use Microsoft SQL Server as a DBMS for Kaspersky Security Center Windows. Since Kaspersky Security Center Linux does not support Microsoft SQL Server, you can migrate Administration Server data stored in the Microsoft SQL Server database to PostgreSQL, Postgres Pro, MySQL, or MariaDB.

• Migration of Administration Server data stored in the Microsoft SQL Server, MySQL, or MariaDB database to MySQL or MariaDB is supported for migration from any supported version of Kaspersky Security Center Windows to Kaspersky Security Center Linux version 15.2 or later.
• Migration of Administration Server data stored in the Microsoft SQL Server database to PostgreSQL or Postgres Pro is supported for migration from Kaspersky Security Center Windows version 14.2 or later to Kaspersky Security Center Linux version 15.3 or later.

  To support migration to PostgreSQL or Postgres Pro, you must install the patch 15.1.0.20748-pf2 for Kaspersky Security Center Windows Administration Server. Contact Kaspersky Technical Support to get this patch.

• If you use MySQL or MariaDB as a DBMS for Kaspersky Security Center Windows and for Kaspersky Security Center Linux, the lower_case_table_names parameter must match for the current and new DBMSs.

  Before you create a data backup, check the lower_case_table_names parameter. Then, when installing MySQL or MariaDB for Kaspersky Security Center Linux, you must set this parameter to the same value as specified for this parameter for Windows.

Stages

Migration by using the Administration Server data backup proceeds in stages:

1. Creating an up-to-date backup copy of the Kaspersky Security Center Windows Administration Server data

   Depending on the DBMS type used for Kaspersky Security Center Windows and Kaspersky Security Center Linux, do one of the following:

   • For migration to the same DBMS type: create a backup copy by using the klbackup utility or a data backup task on the device that has Administration Server installed.
   • For migration of Microsoft SQL Server to MySQL or MariaDB: create a backup copy by using the klbackup utility, with the Migrate to MySQL/MariaDB format option enabled.
   • For migration of Microsoft SQL Server to PostgreSQL or Postgres Pro:
     1. Install the patch 15.1.0.20748-pf2 for Administration Server to support migration to PostgreSQL and Postgres Pro. Contact Kaspersky Technical Support to get this patch.
     2. Create a backup copy by using the klbackup utility.

        If you run klbackup from the command line, use the -migrate postgres flag.

        If you use the klbackup interface, enable the Migrate to Postgres format option.

   After creating a backup copy, disconnect Kaspersky Security Center Windows Administration Server from the network.

2. Preparing a new device for installation of Kaspersky Security Center Linux

   At this stage of the scenario, you have to do the following:

   1. Select a new device on which to install the Administration Server. This device must meet the hardware and software requirements. Also, check that the ports used on Administration Server are available.
   2. Assign the same address to the new device.

      The new Administration Server can be assigned the NetBIOS name, FQDN, and static IP address. It depends on which Administration Server address was set in the Network Agent installation package when Network Agents were deployed. Alternatively, you can use the connection address that determines the Administration Server to which Network Agent connects (you can obtain this address on managed devices by using the klnagchk utility).

3. Installing and configuring the DBMS

   At this stage of the scenario, you have to do the following:

   1. Select the DBMS type that provides optimum performance. Take into account the number of networked devices, network topology, and workload on the network. You can choose from one of the supported DBMSs.
   2. Install the DBMS according to the DBMS type selected when creating a backup. For information about how to install the selected DBMS, refer to its documentation.

      A new database version must not be lower than the current one.

   3. Configure the DBMS for working with Kaspersky Security Center Linux.
4. Installing Kaspersky Security Center Linux and completing the migration

   At this stage of the scenario, you have to do the following:

   1. Install Kaspersky Security Center Linux on the new device.
   2. After the installation is complete, recover Administration Server data on the new device by using the klbackup utility.
   3. Install Kaspersky Security Center Web Console.

      If Kaspersky Security Center Web Console was installed earlier, reinstall it with the same response file.

   4. Open Kaspersky Security Center Web Console and connect to the Administration Server.

      The data initialization process usually takes up to 15 minutes after restoring Administration Server data, but the time depends on the hardware performance and the size of Administration Server data. During this time, Kaspersky Security Center Web Console may fail to connect and display the errors.

   5. Check the functionality of the main Administration Server features when the data initialization in the database is complete. Verify that Administration Server synchronizes with managed devices and Administration Server data is recovered.
   6. Poll domain controllers to restore information about the domain structure, user accounts, security groups, and DNS names of the devices that are included in the domains.
   7. If necessary, uninstall the Administration Server and the database server from the previous device.

      There must not be multiple Administration Servers on the same network with the same connection address and Administration Server certificate.

The administrator has access to Administration Server data and managed devices which were in Kaspersky Security Center Windows, taking into account the functionality supported in Kaspersky Security Center Linux.