Установка сервера Kaspersky Password Manager для бизнеса в тихом режиме

В этом разделе приведены примеры команд, используемых для установки сервера Kaspersky Password Manager для бизнеса.

Для тихой установки на Windows и Linux избегайте передачи паролей непосредственно в параметрах командной строки, поскольку они могут сохраняться в истории терминала. Используйте переменные окружения для безопасной передачи паролей.

Установка на Windows с доменной аутентификацией и SSO

installer.msi /q EULA=1 PRIVACY_POLICY=1 INSTALL_LICENSING=1 SERVICE_ACCOUNT_NAME="<account name>"

SERVICE_ACCOUNT_PWD="<account password>" DB_TYPE="MSSQL" DB_SERVER_NAME="<database server address>\<database instance name>" DB_NAME="KpmDb" DB_AUTH_TYPE="SQLServer"

DB_USER_NAME="<database user name>" DB_USER_PWD="database user password"

KPM_SERVER_PORT=3000 KPM_SERVER_CERT="<path to the PFX container>"

KPM_SERVER_CERT_PWD="<PFX container password>" ADMIN_AUTH_CERT="<path to the administrator certificate>"

SMTP_SERVER="<SMTP server address>" SMTP_SERVER_PORT=<SMTP server port> SMTP_USE_SSL=<true/false> SMTP_AUTH_TYPE="Basic" SMTP_USER_NAME="<SMTP user name>"

SMTP_USER_PWD="<SMTP account password>" SMTP_SENDER_EMAIL="<SMTP sender's email address>"

ORGANIZATION_PWD="<organization password>" ENABLE_DOMAINAUTH=1 LDAP_DOMAIN="<LDAP domain name>" LDAP_SERVER="<LDAP server address>"

LDAP_USE_SSL=1 LDAP_AUTH_TYPE="Negotiate" ENABLE_OAUTH=1 AUTHORITY="<authority URL>" AUDIENCE="<client application ID>"

Установка на Windows с доменной аутентификацией

installer.msi /q EULA=1 PRIVACY_POLICY=1 INSTALL_LICENSING=1 SERVICE_ACCOUNT_NAME="<account name>"

SERVICE_ACCOUNT_PWD="<account password>" DB_TYPE="MSSQL" DB_SERVER_NAME="<database server address>\<database instance name>" DB_NAME="KpmDb" DB_AUTH_TYPE="SQLServer"

DB_USER_NAME="<database user name>" DB_USER_PWD="database user password"

KPM_SERVER_PORT=3000 KPM_SERVER_CERT="<path to the PFX container>"

KPM_SERVER_CERT_PWD="<PFX container password>" ADMIN_AUTH_CERT="<path to the administrator certificate>"

SMTP_SERVER="<SMTP server address>" SMTP_SERVER_PORT=<SMTP server port> SMTP_USE_SSL=<true/false> SMTP_AUTH_TYPE="Basic" SMTP_USER_NAME="<SMTP user name>"

SMTP_USER_PWD="<SMTP account password>" SMTP_SENDER_EMAIL="<SMTP sender's email address>"

ORGANIZATION_PWD="<organization password>" ENABLE_DOMAINAUTH=1 LDAP_DOMAIN="<LDAP domain name>" LDAP_SERVER="<LDAP server address>"

LDAP_USE_SSL=1 LDAP_AUTH_TYPE="Negotiate"

Установка на Windows с базовой аутентификацией

installer.msi /q EULA=1 PRIVACY_POLICY=1 INSTALL_LICENSING=1 SERVICE_ACCOUNT_NAME="<account name>"

SERVICE_ACCOUNT_PWD="<account password>" DB_TYPE="MSSQL" DB_SERVER_NAME="<database server address>\<database instance name>" DB_NAME="KpmDb" DB_AUTH_TYPE="SQLServer"

DB_USER_NAME="<database user name>" DB_USER_PWD="database user password"

KPM_SERVER_PORT=3000 KPM_SERVER_CERT="<path to the PFX container>"

KPM_SERVER_CERT_PWD="<PFX container password>" ADMIN_AUTH_CERT="<path to the administrator certificate>"

SMTP_SERVER="<SMTP server address>" SMTP_SERVER_PORT=<SMTP port> SMTP_USE_SSL=<true/false> SMTP_AUTH_TYPE="Basic" SMTP_USER_NAME="<SMTP user name>"

SMTP_USER_PWD="<SMTP account password>" SMTP_SENDER_EMAIL="<SMTP sender's email address>"

ORGANIZATION_PWD="<organization password>" ENABLE_BASICAUTH=1

Установка на Linux с аутентификацией SSO

/opt/kaspersky/kpmserver/kpmctl/kpmctl postinstall \

--silent

--accept-eula \

--accept-privacy_policy \

--install_licensing \

--settings_pickup=false \

--group_name=kpmadmins \

--account_name=kpmuser \

--auth_schemas=OAuth \

--ldap_enforce_users_status_check \

--ldap_auth_type=Basic \

--ldap_url="ldap://<LDAP user name>:<LDAP user password>@<LDAP server address>:<LDAP port>/dc=tst,dc=kpmb2b,dc=local" \

--db_url="<database type>://<database user name>:<database user password>@<database server address>:<database port>/<database name>" \

--smtp_sender_email="<SMTP sender's email address>" \

--smtp_url="smtp://<SMTP user name>:<SMTP user password>:<SMTP port>/" \

--tls_cert="<path to the PFX container>" \

--tls_cert_pwd=<PFX container password> \

--server_port=<server port> \

--organization_pwd=<organization password> \

--oauth_authority=<URL address of the AD FS> \

--oauth_audience=<URL address of the client application> \

--smtp_auth=<SMTP server authentication type> \

--admin_auth_cert=<administrator authentication certificate>

Установка на Linux с доменной аутентификацией

/opt/kaspersky/kpmserver/kpmctl/kpmctl postinstall \

--silent

--accept-eula \

--accept-privacy_policy \

--install_licensing \

--settings_pickup=false \

--group_name=<security_group_name>\

--account_name=<service_account>\

--auth_schemas=Domain \

--ldap_auth_type=Basic \

--ldap_url="ldap://<LDAP user name>:<LDAP user password>@<LDAP server address>:<LDAP port>/dc=tst,dc=kpmb2b,dc=local" \

--db_url="<database type>://<database user name>:<database user password>@<database server address>:<database port>/<database name>" \

--smtp_auth=Basic \

--smtp_sender_email="<SMTP sender's email address>" \

--smtp_url="smtp://<SMTP user name>:<SMTP user password>:<SMTP port>/" \

--tls_cert="<path to the PFX container>" \

--tls_cert_pwd=<PFX container password> \

--server_port=<server port> \

--organization_pwd=<organization password> \

--admin_auth_cert=<administrator authentication certificate>

Установка на Linux с базовой аутентификацией

/opt/kaspersky/kpmserver/kpmctl/kpmctl postinstall \

--silent

--accept-eula \

--accept-privacy_policy \

--install_licensing \

--settings_pickup=false \

--group_name=kpmadmins \

--account_name=kpmuser \

--auth_schemas=Basic \

--db_url="<database type>://<database user name>:<database user password>@<database server address>:<database port>/<database name>" \

--smtp_auth=Basic \

--smtp_sender_email="<SMTP sender's email address>" \

--smtp_url="smtp://<SMTP user name>:<SMTP user password>:<SMTP port>/" \

--tls_cert="<path to the PFX container>" \

--tls_cert_pwd=<PFX container password> \

--admin_auth_cert=<administrator authentication certificate> \

--server_port=<server port> \

--organization_pwd=<organization password>

Подробную информацию о параметрах, доступных для автоматической установки, см. в этой статье.