Installing Kaspersky Security Center 10.0 on Microsoft Windows Server 2012 Core Mode

Transcription

1 Installing Kaspersky Security Center 10.0 on Microsoft Windows Server 2012 Core Mode Version Date Editor Comments th January 2012 Pavel Polyansky Initial version. Introduction Server Core is a minimal server installation option for computers running on the operating system. Server Core provides a low-maintenance server environment with limited functionality. As in Windows Server 2008 R2 and Windows Server 2008, Windows Server 2012 offers Full Server and Server Core installation options. Starting with Windows Server 2012, it is possible to transition between Full Server and Server Core without reinstalling the operating system This document describes how to install Kaspersky Security Center 10 on Windows Server 2012 Core. In general KSC 10 installation on Windows Server 2012 in Core Mode does not differ from usual installation on Windows operating system with GUI. Installation Environment In this case we will not use single server deployment scenario for running both Security Center and DB, because Windows 2012 Core only supports installation of MS SQL Server 2012, not MS SQL Some services are required for MS SQL 2008(.NET, for example). That s why separate DB server with full version (not Express) of MS SQL is used. The following machines are used for explanation: 1. DC.vlab.local ( /16): AD, DNS. Windows 2008 R2 EE SP1. Domain Controller 2. SQL-server.vlab.local ( /16): MS SQL 2008 R2, Database Engine only. Windows 2008 R2 EE SP1. Domain member. 3. win2012.vlab.local ( /16): Windows 2012 Core mode. Domain member. 4. winxpkes.vlab.local ( /16): KSC console. Windows XP SP3. Domain member. The following accounts are used: 1. VLAB\Administrator domain administrator 2. WIN2012\\Administrator account with administrative privileges on server where KSC is going to be installed

2 Kaspersky Security Center 10 Installation 1. Here it s considered that built-in Windows firewall is disabled, for example, via Group Policy or locally, at least on SQL-server and win2012.vlab.local. 2. Locally on KSC 10 server it s possible to check it in registry. Log on to KSC 10 (win2012.vlab.local) server under VLAB\Administrator account -> enter regedit in command line to open Registry Editor -> HKEY_LOCAL_MACHINE -> Software -> Policies -> Microsoft -> WindowsFirewall -> DomainProfile -> EnableFirewall (REG_DWORD) = 0 (if disabled) 3. Or by entering netsh advfirewall monitor show firewall. In Domain Profile Settings table State will be OFF if firewall is disabled 4. Make sure that it s possible to connect to MS SQL using telnet on 1433 port if default port is used Note: SQL Server is usually installed with a default port 1433, but not listening on it. Sometimes, you have to manually enable SQL Server service to listen on port It is easy to do by running compmgmt.msc command on SQL Server and selecting Services and Applications -> SQL Server Configuration -> SQL Server Network Configuration ->Protocols for MSSQL Server

3 Click TCP/IP and select Enabled. On IP Addresses tab under IP1 select Active and Enabled. Choose Yes in both fields 5. After firewall is disabled and SQL is up and running you can start installing Kaspersky Security Center 10. First, login to win2012.vlab.local as a domain administrator account (VLAB\Administrator).Create a shared drive on Domain Controller. Upload KSC10 installation files to this shared drive.

4 On win2012.vlab.local map a DC shared folder using net use command and use pushd command to change drive. Give a new drive a name, i.e. F:\. This drive will point to KSC 10 installation files. And launch the installer after this, running setup.exe (this file is now located on a mapped drive) 6. Click Next on the Welcome page 7. Accept the terms of License Agreement

5 8. On Installation Type page select Custom 9. On Kaspersky Security Center Administration Server page select Administration Server only

6 10. On Network Size page select Less than 100 computers in the Network 11. On Account page select User Account and type in VLAB\Administrator account. Click Next

7 12. On Database server page select Microsoft SQL Server. Click Next 13. On Connection settings page select Choose existing and type SQL Server name: sql-server and Database name: KAV On SQL Authentication Mode screen select Microsoft Windows Authentication Mode

8 15. On Shared folder page select Create a shared folder 16. On Connection Settings page leave default settings for ports.

9 17. On Administration Server address page specify KSC10 server address. 18. On Plug-ins page select the desired plug-ins to be installed. 19. Click Next and start the installation process

10 20. Wait while it completes and click Finish 21 Log on to win2012 under local account and launch KSC 10 console. Connect to KSC 10 server locally and remotely (from winxpkes.vlab.local) to be sure that everything is OK. Switching Windows Server 2012 to Full mode: If you installed Kaspersky Security Center 10 on Windows Server in Core mode and decide to switch back to Full mode, then no re-configuration is required, the product remains functioning as it is expected.