Установка Kaspersky system на Ubuntu
Для начала на установленном Ubuntu следует выполнить обновление
|
1 2 |
sudo apt update sudo apt dist-upgrade -y |
Далее установка MariaDB
|
1 |
sudo apt install mariadb-server -y |
Первоначальная настройка:
|
1 2 3 4 5 6 7 8 |
sudo /usr/bin/mysql_secure_installation [sudo] password for roots: ENTER Switch to unix_socket authentication [Y/n] y Change the root password? [Y/n] n Remove anonymous users? [Y/n] y Disallow root login remotely? [Y/n] y Remove test database and access to it? [Y/n] y Reload privilege tables now? [Y/n] y |
Создание конфигурации для KSC
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 |
sudo touch /etc/mysql/conf.d/my.cnf sudo nano /etc/mysql/conf.d/my.cnf [mysqld] sort_buffer_size=10M join_buffer_size=100M join_buffer_space_limit=300M join_cache_level=8 tmp_table_size=512M max_heap_table_size=512M key_buffer_size=200M innodb_buffer_pool_size=512M innodb_thread_concurrency=20 innodb_flush_log_at_trx_commit=0 innodb_lock_wait_timeout=300 max_allowed_packet=32M max_connections=151 max_prepared_stmt_count=12800 table_open_cache=60000 table_open_cache_instances=4 table_definition_cache=60000 |
Создадим пользователя и базу данных для KSC
|
1 2 3 4 5 |
sudo mysql CREATE USER 'kscadmin' IDENTIFIED BY 'Gjsd8fius@e324nf7523d'; GRANT ALL PRIVILEGES ON *<em>.</em>* TO 'kscadmin'; CREATE DATABASE kscdb; exit |
Создание пользователя для сервера KSC
|
1 2 |
sudo groupadd kladmins sudo useradd ksc -g kladmins |
Скачивание дистрибутивов KSC и KSC Web console
|
1 2 3 4 |
Страница для скачивания https://www.kaspersky.ru/small-to-medium-business-security/downloads/endpoint Kaspersky Security Center Version 15.2.0.442 Debian x64 Administration server sudo wget https://products.s.kaspersky-labs.com/administrationkit/ksc10/15.2.0.442/russian-21728869-ru/3935323631337c44454c7c31/ksc64_15.2.0-442_amd64.deb sudo wget https://products.s.kaspersky-labs.com/administrationkit/ksc10/15.2.0.442/russian-21728869-ru/3935323631377c44454c7c31/ksc-web-console-15.2.265.x86_64.deb |
Установка KSC
|
1 2 |
sudo apt install ./ksc64_15.2.0-442_amd64.deb sudo /opt/kaspersky/ksc64/lib/bin/setup/postinstall.pl |
Enter ‘Y’
Enter ‘Y’
Choose the Administration Server installation mode: 1) Standard
Enter Administration Server DNS-name or static IP-address: kscserver-01v.domain.ru
Enter Administration Server SSL port number [13000]: 13000
Define the approximate number of devices that you intend to manage: 2) 101 to 1 000 networked devices
Enter the security group name for services: kladmins
Enter the account name to start the Administration Server service. The account must be a member of the entered security group: ksc Enter the account name to start other services. The account must be a member of the entered security group: ksc
Choose the database type to connect to: 1) MySQL
Enter the database address: 127.0.0.1
Enter the database port: 3306
Enter the database name: kscdb
Enter the database login: kscadmin
Enter the database password: ввести пароль придуманный выше
|
1 2 3 4 5 6 7 8 9 |
Add service klnagent_srv… Add service kladminserver_srv… Add service klactprx_srv… Add service klwebsrv_srv… Starting kladminserver_srv… Starting klnagent_srv… Starting klactprx_srv… Starting klwebsrv_srv… Wait till the server initialize… |
Enter the user name: (пользователь web морды) kscwebadmin
Password: придумать пароль
Repeat password: повторить его
User ‘kscwebadmin’ has been created
|
1 2 3 4 5 6 7 8 |
sudo touch /etc/ksc-web-console-setup.json sudo nano /etc/ksc-web-console-setup.json { "address": "127.0.0.1", "port": 8080, "trusted": "127.0.0.1|13299|/var/opt/kaspersky/klnagent_srv/1093/cert/klserver.cer|KSC Server", "acceptEula": true } |
Установка KSC Web console
|
1 2 |
sudo apt install ./ksc-web-console-15.2.265.x86_64.deb sudo setcap 'cap_net_bind_service=+ep' /var/opt/kaspersky/ksc-web-console/node если порт меньше 1000 |
Вход браузером на web console: https://kscserver-01v.domain.ru:8080