Help - Search - Members
Full Version: Need help with Silent installs...
Kaspersky Lab Forum > English User Forum > Protection for Small and Medium Businesses
duomenox
Hi everyone,

I have scoured the forums and documentation and cannot find the information I need... well at least in english.

I need to be able to deploy a fully customized version of KAV without the use of the admin console.

We are using the latest KAV WKS for Win as of today. I have a saved configuration file I would like to apply to the final install, silently and automatically.

Currently we are installing by hand, and using the avp.exe import command to get the settings applied, then applying the cfg file to make sure the config is exactly the same for each computer.

I would like to automate this, sliently. During our deployment process I would like the installer to run, apply that configuration (and possibly the provided key file) and be finished with the KAV configuration.

I read about the setup.ini file in using google's language translator to translate a page in Kaspersky's Russian forums, I have a few good ideas, but I cannot get enough info to get it working.

I need to stop the installation of Anti-hacker, and keep Self Protection disabled. I have to do this becuase we use VNC to remotely administrate these terminals and Self-Protect and AH cause us issues.

I also need to apply a password to the command line functions of KAV. I have not found a way to do this in a silent install yet.

I would really appreciate a full list of options for the setup.ini file, and a list of MSI property values I can assign during install. I would also like to know how to use the installer.ini to load my CFG file when installing (if that is the correct way to do it).

Thanks in advance, I am going bald due to the handfuls of hair I am pulling out of my head trying to get this working... if only I could use the Admin Console, but due to the design of the deployment I cannot :-(

Thanks again, sorry for the long rant, just sleepy and desperate :-P
duomenox
Can anyone point me to the documentation for the setup.ini file, and the properties that you can pass to the MSI installer? It would be great to have the options with descriptions. If I have that info, I can figure the rest out myself.

Thank you.
Tybilly
Hello,

How can you deploy application without using the Administration Console ? Do you use your own application ?

About custom installation, you can put you *.cfg file next to the msi file before the installation, and then it will automatically apply settings to the configuration of the product. See this FAQ for further help : http://support.kaspersky.com/wks6/install?qid=204394596

Best Regards,
DB
duomenox

Thank you for your reply!

QUOTE(Tybilly @ 17.08.2007 00:47)
How can you deploy application without using the Administration Console ? Do you use your own application ?
[right][snapback]419859[/snapback][/right]


We upload the KAV install to the computer then use VNC to take control of the desktop and runn the install from the command line.

For new deployments, we want to automate the process by having windows setup do it from our RIS server.

Nothing too special, but it would save us lots of time on new deployments. I still want my guys manually deploying the keyfile just to make sure we are within our license, but we have so many extra KAV licenses that it's not funny. (Our purchaser bought way too many :-)

Thanks again for the reply, I will check out that FAQ.
Whizard
Hello,

If you can give me the russian document. I will see and translate in case I cant locate the english version of it smile.gif
duomenox
QUOTE(Whizard @ 17.08.2007 09:13)
Hello,

If you can give me the russian document. I will see and translate in case I cant locate the english version of it smile.gif
[right][snapback]420252[/snapback][/right]


Thanks for the offer...

I feel like a heel right now... I found the info I needed from the FAQ. I could not find that FAQ the last couple of days... Thanks to Tybilly for the link to that one article about the install.cfg.

Thanks again!
Whizard
If you need more info do post back!
duomenox
Guys,

I do need some more help :-(

When I use the Setup.ini file, the updater component is not installed. This means that the databases would have to be updated manually.

Here is my setup.ini:
CODE

[Setup]
Reboot=no
SelfProtection=no
MSExclusions=no
AddPath=no

[Components]
FileMonitor=yes
MailMonitor=no
WebMonitor=yes
ProactiveDefence=yes
AntiSpy=yes
AntiHacker=no
AntiSpam=no

[Tasks]
ScanMyComputer=yes
ScanStartup=yes
ScanCritical=no
Updater=yes


I am guessing that there is supposed to be an entry under the [Components] section for the updater, but it is not listed in the KL FAQ found here: http://support.kaspersky.com/faq?chapter=1...e&qid=203892741

Does anyone know if it is called update, updater, or something else?

Thanks for the help!
Tybilly
The update mechanism is not a component but a specific task. This would be enough to install it :
QUOTE
[Tasks]
ScanMyComputer=yes
ScanStartup=yes
ScanCritical=no
Updater=yes


I've nerver used the setup.ini file to perform silent predefined install of Anti-Virus product, perhaps you should check if there is not carriage return at the end of the file, I'm sorry I can't help you more sad.gif
duomenox
QUOTE(Tybilly @ 17.08.2007 12:13)
The update mechanism is not a component but a specific task. This would be enough to install it :
I've nerver used the setup.ini file to perform silent predefined install of Anti-Virus product, perhaps you should check if there is not carriage return at the end of the file, I'm sorry I can't help you more  sad.gif
[right][snapback]420366[/snapback][/right]


Tybilly,

Thanks for the advice. I have done some more research and it seems than when I unstall KAV silently with a supplied install.cfg, even without the setup.ini file, the updater is missing...

Basically, when you click on the option to update (in the dialog where you are warned that the databases are out of date) a message come up stating that the updates are done by the administrator. Since this computer will not be connecting to an Admin console, this poses a big problem for us.

Does anyone know how to counter this, or a better way to distribute settings instead of using the install.cfg?

In my opinion, this is a bug. If I do not specifically state to not install the updater, then the updater should be installed, why would you ever install an anti-virus product that cannot update itself?
Tybilly
QUOTE(duomenox @ 17.08.2007 20:32)
Does anyone know how to counter this, or a better way to distribute settings instead of using the install.cfg?

In my opinion, this is a bug. If I do not specifically state to not install the updater, then the updater should be installed, why would you ever install an anti-virus product that cannot update itself?
[right][snapback]420379[/snapback][/right]


You can temporarly install an Administration Server, and create your own installation package of KAV WKS with specific protection modules and you will be able to choose which tasks you need, add a license key too.

Then you just have to get this installation package stored in the \Share\Packages\ folder and to use it on your hosts to perform the installation.

In this installation package there is a file named Installer.ini which contains the following instructions :

QUOTE
[Settings]
Components=0000007f
Location=
CfgFile=


The value in bold indicates which protection components / tasks are installed with the Anti-Virus product.

In other way, the configuration file allow you to schedule the update.

Best Regards,
DB


duomenox
Tybilly,

That was exactly the issue...

CODE

Old Install.ini

[Settings]
Components=0000007f
Location=
CfgFile=Install.cfg

New Install.ini

[Settings]
Components=00000bff
Location=
CfgFile=Install.cfg


I used the admin console to make the install package as you suggested, saw the new components value and copied the new value to the install dir of my test machine. It worked perfectly.

There needs to be some official documentation as to what the values of the components entry can be.

Thanks a million for you help!
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.