Подскажите кто сталкивался с ошибкой обновления с 15 на  16 сборку  KSC на linux - Fatal error: Security center upgrade failed with code '3': 'Upgrading
kladminserver.

База - marydb

Всё требования по обновлению из статьи соблюдал - https://support.kaspersky.com/help/KSCLinux/16.1/ru-RU/240816.htm

Ошибка всё таже.

ТП пока ничего не говорит.

9:50:00     Проверка путей...OK (13 ч 43 мин 33 сек 203 мсек)
9:50:00     Открытие SCM...OK (58 сек 969 мсек)
9:50:59     Восстановление параметров Сервера администрирования...
    Копирование 'SSP_TASKS-1093.dat'... 0.02 MB: OK (78 мсек)
    Копирование 'SSP_TASKS-1103.dat'... 0.01 MB: OK (31 мсек)
    Копирование 'Packages'... 1686.11 MB: OK (41 сек 781 мсек)
    Копирование 'OsImages'... 0.00 MB: OK (0 мсек)
    Копирование 'Uninstall'... 0.00 MB: OK (0 мсек)
    Копирование 'MST'... 0.00 MB: OK (16 мсек)
    Копирование 'dat'... 3.31 MB: OK (6 сек 922 мсек)
    Копирование 'gsyn'... 0.07 MB: OK (140 мсек)
    Копирование 'Updates'... 0.00 MB: OK (0 мсек)
    Копирование 'GsynSuper'... 0.00 MB: OK (0 мсек)
9:51:49     Восстановление базы данных...Ошибка - 1198 ('Assertion "!wstrLogDir.empty()" failed')

Note that the windows machine not in the domain and the service of the agent uses Local System account.

Resolution: We discovered that the Kav database had become corrupted, and KSC was unable to access KAV, maybe owing to an abrupt power cutoff or power loss. We installed SMSS from this link: https://learn.microsoft.com/en-us/ssms/release-notes-20#202

We login to the Database Engine and discover that Kav database is suspected or corrupted state. 

Go to Run Query and Execute below command 

-- 1. Put the database in Emergency Mode to bypass startup checks

ALTER DATABASE KAV SET EMERGENCY;

GO

-- 2. Set to Single User Mode to prevent interference

ALTER DATABASE KAV SET SINGLE_USER WITH ROLLBACK IMMEDIATE;

GO

-- 3. Run the Repair (This step may take a few minutes)

DBCC CHECKDB (KAV, REPAIR_ALLOW_DATA_LOSS);

GO

-- 4. Return to Multi-User Mode once finished

ALTER DATABASE KAV SET MULTI_USER;

GO

Executing the command we may following result 

Now KSC started and Database is working fine but still we cannot create backup by KSC task or Backup utility , screenshot attached

Run the Final Repair in SSMS

Open SQL Server Management Studio (SSMS) and open a New Query window.

Ensure the database dropdown at the top says master.

Paste and execute the following script:

USE master;

GO

-- 1. Lock the database so ONLY this script can access it

ALTER DATABASE KAV SET SINGLE_USER WITH ROLLBACK IMMEDIATE;

GO

-- 2. Run the repair to delete the orphaned LOB data node (Object ID 1362103893)

DBCC CHECKDB ('KAV', REPAIR_ALLOW_DATA_LOSS);

GO

-- 3. Return the database to normal operation

ALTER DATABASE KAV SET MULTI_USER;

GO

After running this command, the KSC SERVER communicates properly with KAV, and backup works flawlessly. 

Has anyone successfully tested and upgraded from Windows 10 to 11 using KSC and also Windows Deployment through PXE? What is the right procedure to follow, and which versions of Windows ADK and PE are supported for KSC 15.1 installed on Windows Servers 2016 and 2019?

DHCP is installed on a Windows Server.

Thanks.

We have 8000 workstations, 4000 of which are expired, and we have submitted the license (Next EDR Optimum) to KSC and configured it for automated distribution. & the other 4000 workstations will expire in two years, thus I'd want to make a device selection on those 4000 workstations that are activated by an EDR Optimum license and set a task "Change Component Task" to install the EDR Optimum protection component; please advise on how to do so.

Regards

Ahnaf Tahmeed

Windows Server 2022 : Version 21H2

Kaspersky Security Center : Version 14.2.0.26967

KSC : Event Malicious object detected (Email Notifications)

Event Malicious object detected happened on computer xxxx and IP Address xx.xx.xx.xx in the domain xxxx on Tuesday, 7 April, 2026 5:50:05 PM (GMT+08:00) Event type: Malicious object detected
Name: chrome.exe
Application path: C:\Program Files\Google\Chrome\Application Process ID: 10368 Result description: Detected
Type: Trojan
Name: HEUR:Trojan-PSW.Script.Generic
User: xxxx (Initiator)
Object: https://lf16-scmcdn.oecstatic.com/obj/oec-magellan-sg/i18n/ecom/finance_overview/js\gecAddress.jrs7ym18.js
Reason: Expert analysis
Database release date: 7/4/2026 6:13:00 AM
SHA256: C665FC506E6839A009EBD8DDCCF407A6EB77B95C69CFE812E397BFF9ACEBACB7
MD5: EF43207A2BD37B1B93B95AB5DBF65FDF

We wants to deploy Netagent package of KSC Cloud Console remotely via AD GPO on all of the 2000 endpoints in our network, these workstations are domain joined  how can we do that efficiently . 

Regards

Ahnaf Tahmeed

I am experiencing an issue when running an administration task to restart endpoints from the console.

When I launch the restart task, it works correctly for some endpoints. However, certain machines do not restart at all, without any apparent error in the console.

Here are some details:

• The task is properly deployed and visible on all targeted endpoints
• The machines are online and reachable
• The administration agent appears to be functioning correctly
• No explicit error messages are reported

I would like to know:

• What could be the possible causes of this behavior?
• Are there specific logs to check on the endpoint side or on the server side?
• Are there any prerequisites or restrictions (permissions, GPO, system state, etc.) that could prevent the restart from occurring?

Thank you in advance for your help and feedback.

I would like to know whether the product can detect and remediate vulnerabilities on Linux endpoints, or if vulnerability detection is currently supported only for Windows endpoints (based on the following documentation):

https://support.kaspersky.com/ksc-linux/15.4/183975
https://support.kaspersky.com/ksc/15.1/183975?page=help

I'm having trouble installing Kaspersky Network Agent for Linux deb (15.4.0.8952) on a Linux Ubuntu 24.04.4 LTS server.

I configure the installation via the console, but I get the error "Operating System version is not supported."

I've configured the user in sudoers to not require a sudo password, and configured SSH.

I've left an audit.log running to see if there's any interaction when I try to run the installation via the console, and it doesn't show any alerts.

I have no idea how to resolve this configuration issue...

We are unable to connect to the secondary servers from the main Kaspersky console unless we restart the Kaspersky Security Center – Administration Server (kladminserver) service on the secondary servers.

However, after a few hours, the issue reoccurs again.

How can we resolve this problem? As you can see, below is the error we are receiving.

can you share minimal ksc-web-console-setup.json file.

The manual says: response file must contain the parameters for interacting with the IAM component, even if you do not use single sign-on (SSO).

Well, i do now want to use it (in that case admin server and web soncole are on the same host), i think that reason to unsuccessfull websonsole access can be that file. 

Thank You! 

We are facing an issue on our workstations where RustDesk is installed , Netagent is showing transport level error and cannot communicate with KSC and when we uninstall RustDesk and then reinstall Net-agent it start working properly.  Does anyone faced this issue , How to solve it. 

After switching our endpoints from Kaspersky Total Security for Business to Kaspersky Next EDR Foundations, we can no longer use Windows Desktop Sharing (RDP) from Kaspersky Security Center.

Eventhough the Kaspersky Security Center license is installed and active, When we try to start a desktop sharing session, we get this error:

"Failed to connect to the remote desktop. This operation requires a license for Windows Desktop Sharing."

Is Windows Desktop Sharing / RDP supported in Next EDR Foundations?

We have an issue with scheduled reports in Kaspersky Security Center.

We created a report task for Web Control and Application Control and configured it to be sent by email on weekdays at 18:00.

• When we run the task manually, the report contains data as expected.

• When the same task runs by schedule, the email is sent but the report is empty.

• The task settings, scope, and report type are identical; only the execution method differs (manual vs scheduled).

What could be the problem?

Reproduction Steps:

Step 1: We turn off KSC-01 Server and failover switches to KSC-02 successfully.

Step 2: After that, we turn on KSC-01, then turn off KSC-02 to test failover again, an error appears during server (KSC-01) startup.

Step 3: We've to manually start the Klfoc service via services.msc, after that, the system returns to normal operation.

I would like to know whether this issue is related to the OS or the Kaspersky service itself.

Environment:

• Kaspersky Security Center: 15.1.0.22239

• Network Agent: 15.1.0.22239

• OS: Windows Server 2025

• Database: MSSQL 2022 / SQL Server 16.0

• Klfoc Service Log On: Local System

• Account running KSC core services: ksc

• Account running services like Web, Proxy,..: rightless

It shows Notepad++ on my Application Registry, with affected versions, is there a way to force this show and patch it at scale like with other softwares (Chrome/Java...) that have this option on Software Vulnerabilities menu?

We have deployed Kaspersky Infrastructure on an air gapped system where our Administration Server is located in a secure zone (it cannot connect to the Internet directly or via a proxy server). We are planning to connect it to the Internet using a data diode system and a filtering device that only allows requests to approved destinations, specifically KSN servers for update repositories and vulnerability scanning.

However, we are not sure whether Kaspersky uses its KSN servers to store security patches for applications and operating systems, or whether it retrieves updates directly from vendor sources (such as Microsoft, Google Chrome, etc.).

I would like to know if there is any documentation that explains the vulnerability scanning workflow in detail, or if someone could provide an overview of how it works.

Thank you, and have a great day!