Jump to content
george.h

Upgrade/Migrate KSC 9.3.75 to KSC10 [Solved]

Recommended Posts

Hi,

 

I'm trying to migrate our Kaspersky Admin Server from KSC 9.3.75 (the current version) to the current version of KSC10 (KSC10.2.434en.exe).

 

Before trying this I read KB ID 9315 so followed the procedure in that to do an "in place migration/upgrade". Everything seemed to go OK and it started to do the install. The first task on it's list was something about removing the old version (I didn't take a close note of exactly what it said). After a while it gave that item a green tick and moved onto the second, Upgrading Administration Server. After a while that stopped and said it could not complete as it had encountered an error. No indication of what the error was.

 

So I tried again (as it recommended). I got to the same point, although it didn't list the first task and went straight on to installing/upgrading the Administration Server. This time there was only a very short delay before it bombed with the same problem. I've tried it four times in total and all end the same way. The third and fourth were done with KES8 on the server shutdown. No difference.

 

I went though the event logs but couldn't find anything. I did eventually find some logs in the Windows\Temp which I've attached.

 

I've also attached some screen shots of the process I've been through - I missed the screen shot of backing up the current Admin server.

 

The Admin Server itself is running Windows Server 2003 STD 32 Bit SP2 with all current updates applied. Other than acting as a low usage file server it's main roles are as a secondary DC, WINS and internal DNS server and being the Kaspersky Admin Server. Yes I know 2003 is almost dead (brand new Windows Server 2012 R2 STD box arriving this week), but until the new server is ready to replace our primary SBS 2003 server AND this one, this box is going to have to remain our Kaspersky Admin Server for a little while.

 

Anyway any help/suggestions would be much appreciated!

 

 

George

 

P.S. Could someone fix the dreadful topic entry/edit? The lack of auto-wrap when entering text is dreadful and trying to edit the text of a single 3KM long line (with NO horizontal scroll bar!) is a REAL pain. Come on guys, surely your forum can do auto line wrap when entering the text of a post?

post-376085-1436692174_thumb.jpg

post-376085-1436692179_thumb.jpg

post-376085-1436692185_thumb.jpg

post-376085-1436692196_thumb.jpg

KSC10_Setup_Install_Errors.zip

Share this post


Link to post

Do you have a backup?

 

If yes, uninstall KSC 9.3.75 and install KSC10SP1.

Then install Patch C at first.

Then restore the data base.

Share this post


Link to post
Do you have a backup?

 

If yes, uninstall KSC 9.3.75 and install KSC10SP1.

Then install Patch C at first.

Then restore the data base.

 

Hi Helmut,

 

Will that migrate my existing policies and groups in the process?

 

Regards

George

 

Share this post


Link to post

Yes, but you should not used converted policies and tasks.

Share this post


Link to post
Yes, but you should not used converted policies and tasks.

 

Hi Helmut,

 

So what you are saying, basically, is don't bother trying to do an in-place upgrade - rip out KSC 9 and install KSC 10 from scratch. Re-create all the policies and tasks from scratch. Then rip out KES 8 and install KES 10 from scratch. Is that correct?

 

If so then, what you are really saying, is there is NO migration path to KSC 10. Rip everything out and start again?

 

Then I think KB ID 9315 should be removed and replaced by the truth.....

 

Share this post


Link to post

No this is not correct.

 

I said: create a backup from the old SC and then uninstall KSC.

Then install KSC10 SP1 from scratch and install patch C first.

Then restore the backup to get the old struktur, policies and tasks.

Don´t use converted policies and tasks from version 9 for KES10 SP1. This is my personel opinion.

Share this post


Link to post
No this is not correct.

 

I said: create a backup from the old SC and then uninstall KSC.

Then install KSC10 SP1 from scratch and install patch C first.

Then restore the backup to get the old struktur, policies and tasks.

Don´t use converted policies and tasks from version 9 for KES10 SP1. This is my personel opinion.

 

Thanks Helumt I appreciate your views.

 

However as we are only a small company with relatively few workstations (<20) I really see nothing of any value in the existing databases to preserve. The ONLY thing that may have been of value are the policies which you are advising not to use.

 

That sounds to me like there IS NO migration path from KSC 9 to KSC 10 and the cleanest and simplest solution is to rip everything out and start again. I just wish Kaspersky would grasp the nettle and be honesty about it! That and STOP this stupid patch naming convention of Patch A, Patch B etc. It really is archaic and meaningless. Every patch should have a UNIQUE identifier. How many Patch C's have there been??? Do Microsoft (for all their sins) issue 14 different updates all with the same name (KB134546 for example)? No they don't......

 

I'm going down the rip it out and start again..... Luckily our licenses are due for renewal mid August and so far Kaspersky isn't looking favourite....

 

Share this post


Link to post
Hi,

 

I'm trying to migrate our Kaspersky Admin Server from KSC 9.3.75 (the current version) to the current version of KSC10 (KSC10.2.434en.exe).

 

Before trying this I read KB ID 9315 so followed the procedure in that to do an "in place migration/upgrade". Everything seemed to go OK and it started to do the install. The first task on it's list was something about removing the old version (I didn't take a close note of exactly what it said). After a while it gave that item a green tick and moved onto the second, Upgrading Administration Server. After a while that stopped and said it could not complete as it had encountered an error. No indication of what the error was.

 

So I tried again (as it recommended). I got to the same point, although it didn't list the first task and went straight on to installing/upgrading the Administration Server. This time there was only a very short delay before it bombed with the same problem. I've tried it four times in total and all end the same way. The third and fourth were done with KES8 on the server shutdown. No difference.

 

I went though the event logs but couldn't find anything. I did eventually find some logs in the Windows\Temp which I've attached.

 

I've also attached some screen shots of the process I've been through - I missed the screen shot of backing up the current Admin server.

 

The Admin Server itself is running Windows Server 2003 STD 32 Bit SP2 with all current updates applied. Other than acting as a low usage file server it's main roles are as a secondary DC, WINS and internal DNS server and being the Kaspersky Admin Server. Yes I know 2003 is almost dead (brand new Windows Server 2012 R2 STD box arriving this week), but until the new server is ready to replace our primary SBS 2003 server AND this one, this box is going to have to remain our Kaspersky Admin Server for a little while.

 

Anyway any help/suggestions would be much appreciated!

George

 

P.S. Could someone fix the dreadful topic entry/edit? The lack of auto-wrap when entering text is dreadful and trying to edit the text of a single 3KM long line (with NO horizontal scroll bar!) is a REAL pain. Come on guys, surely your forum can do auto line wrap when entering the text of a post?

 

Hello,

analyzing klserver-install log we see :

 

MSI (s) (F0:54) [09:26:13:810]: Windows Installer reconfigured the product. Product Name: Kaspersky Security Center Administration Server. Product Version: 10.2.434. Product Language: 1033. Reconfiguration success or error status: 1638.

 

MSI (s) (F0:54) [09:26:13:825]: MainEngineThread is returning 1638

Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel.

{54B5AE91-463A-4142-8892-307BCF28343F}

 

OS probably recognizes KSC10 SP1.

Please attach GSI utility report from KSC. (see my sign)

What is version of SQL server ?

Thank you.

Share this post


Link to post
Hello,

analyzing klserver-install log we see :

 

MSI (s) (F0:54) [09:26:13:810]: Windows Installer reconfigured the product. Product Name: Kaspersky Security Center Administration Server. Product Version: 10.2.434. Product Language: 1033. Reconfiguration success or error status: 1638.

 

MSI (s) (F0:54) [09:26:13:825]: MainEngineThread is returning 1638

Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing version of this product, use Add/Remove Programs on the Control Panel.

{54B5AE91-463A-4142-8892-307BCF28343F}

 

OS probably recognizes KSC10 SP1.

Please attach GSI utility report from KSC. (see my sign)

What is version of SQL server ?

Thank you.

 

Hi Helmut/Dmitry,

 

I've now got it all up and running. It was less hassle, as I mentioned earlier, to just rip out KSC 9 completely and install KSC 10 from scratch. I've now completed that and rolled out KLNA 10 and KES 10 to all of the endpoints successfully. It will probably take a little while for things to settle down and for me to be sure it is all running smoothly with updates running and that all the outstanding patches are installed (please see my previous point about patch naming - I'd appreciate some official feedback on that).

 

I've tried looking for Patch C for KSC 10 and all I could find is Patch_10_1_249_server_c.zip. Is that the correct one? If so I tried running it on the admin server and it bombed with "Incompatible version".

 

Any suggestions?

 

Much appreciated.

George

 

Share this post


Link to post
Hi Helmut/Dmitry,

 

I've now got it all up and running. It was less hassle, as I mentioned earlier, to just rip out KSC 9 completely and install KSC 10 from scratch. I've now completed that and rolled out KLNA 10 and KES 10 to all of the endpoints successfully. It will probably take a little while for things to settle down and for me to be sure it is all running smoothly with updates running and that all the outstanding patches are installed (please see my previous point about patch naming - I'd appreciate some official feedback on that).

 

I've tried looking for Patch C for KSC 10 and all I could find is Patch_10_1_249_server_c.zip. Is that the correct one? If so I tried running it on the admin server and it bombed with "Incompatible version".

 

Any suggestions?

 

Much appreciated.

George

 

No, it is for MR1.

Please install this patch.

Thank you.

Share this post


Link to post
No, it is for MR1.

Please install this patch.

Thank you.

 

Thanks Dmirtry. That one installed OK.

 

However, when I tried to start the Kaspersky Security Centre application it consistently failed to connect to the admin server using the original settings of "localhost". I had to change it to the actual server name for it to connect. Is this an intended change?

 

I think you can understand my frustration with the patch naming convention when that is already TWO "patch C"'s for the same product which is rather ridiculous.

 

EDIT:

 

After installing the patch the server was asking to be restarted to complete the update of KES to 10.2.2.10535 MR1 so the last thing I did was initiate a restart and now the server isn't responding at all, not even to PINGs. There is nothing I can do now until I get into the office tomorrow to see what has happened. I just hope this hasn't caused it to Blue Screen. I've a nagging suspicion that on of the old XP workstations has done the same with KES 10.2.2.10535 MR1, but agian I won't know until I get in tomorrow.

Edited by george.h

Share this post


Link to post
Hi,

 

Please keep us updated!

 

Thank you!

 

Well something associated with either Patch C, or the update from KES to 10.2.2.10535 MR1 to KES to 10.2.2.10535 SP1 MR1 (which was the last task I performed on all of the endpoints including the management server using the task already created during installation of KSC 10) has broken the admin server, and possibly one XP workstation.

 

I'm not in the office for another 2 hours so I can't say exactly what has happened, but I've now also used the Dell BMC IPMI Tool to remotely power cycle the server and it is still completely unresponsive. I've also remotely powered it off, left it for a while, then remotely powered it back on and no change.

 

So that leaves one of three things:

1. It's Blue Screened or hung in some other way while starting up following the restart for the KES update or Patch C

2. It HAS started up but for some reason isn't talking to the network - the network hardware and connection is working as the same NIC is used for the BMC (baseboard management controller) that I used to remote power cycle it. This MIGHT also have a bearing on the strange behaviour after installing Patch C, but before restarting for the KES update, where the KSC application couldn't connect to the admin server (on the same server) using "localhost".

3. Some purely co-incidental hardware failure preventing it from starting up.

 

I'll do an update when I know more.

 

However I would appreciate some feedback on this "localhost" issue. I.e. any ideas why after installing Patch C KSC couldn't connect to the admin server via "localhost"?

 

George

 

P.S. At least someone seems to have fixed the line-wrap issue when entering/editing new posts! Thanks!

Share this post


Link to post
Well something associated with either Patch C, or the update from KES to 10.2.2.10535 MR1 to KES to 10.2.2.10535 SP1 MR1 (which was the last task I performed on all of the endpoints including the management server using the task already created during installation of KSC 10) has broken the admin server, and possibly one XP workstation.

 

I'm not in the office for another 2 hours so I can't say exactly what has happened, but I've now also used the Dell BMC IPMI Tool to remotely power cycle the server and it is still completely unresponsive. I've also remotely powered it off, left it for a while, then remotely powered it back on and no change.

 

So that leaves one of three things:

1. It's Blue Screened or hung in some other way while starting up following the restart for the KES update or Patch C

2. It HAS started up but for some reason isn't talking to the network - the network hardware and connection is working as the same NIC is used for the BMC (baseboard management controller) that I used to remote power cycle it. This MIGHT also have a bearing on the strange behaviour after installing Patch C, but before restarting for the KES update, where the KSC application couldn't connect to the admin server (on the same server) using "localhost".

3. Some purely co-incidental hardware failure preventing it from starting up.

 

I'll do an update when I know more.

 

However I would appreciate some feedback on this "localhost" issue. I.e. any ideas why after installing Patch C KSC couldn't connect to the admin server via "localhost"?

 

George

 

P.S. At least someone seems to have fixed the line-wrap issue when entering/editing new posts! Thanks!

 

Hi,

 

We are waiting for further feedback. Regarding localhost connection please check whether KSC service is running.

 

Thank You!

Share this post


Link to post
Hi,

 

We are waiting for further feedback. Regarding localhost connection please check whether KSC service is running.

 

Thank You!

 

Hi,

 

Well what I found when I was physically in front of the server was that it was up and running! W2K3 was running although I had to do a restart to get the keyboard and mouse to work (I notice line-wrap has stopped working on here again!) - but that is a well known issues with Dell machines when using Belkin Omnicube KVMs. If the machine isn't the selected one when it starts up the BIOS fails to recognise the keyboard and mouse via the KVM.

 

Anyway once I logged in I found the problem! KES has installed two NIC drivers in additional to the normal NetXtreme Gigabit NIC. The original one looked OK in device manager, but the two Kaspersky ones both had yellow warnings saying they were not working. Bottom line is that they had completely cut the server off from the network in the OS. Network connectivity was fine to the BMC using the same NIC!

 

Going into a command prompt IPCONFIG should NO ADAPTORS at all and NO NETWORK information.

 

I uninstalled KES 10.2.2.10535 mr1 then restarted. Normal network connectivity returned and the two Kaspersky NIC drivers had gone.

 

After running the update task on all the endpoints to bring them up to date, I'm now reinstalling KES on the admin server. I'll post another update once that has finished.

 

Does anyone have any ideas why line-wrap when entering posts on here works sometimes (which is fine) but doesn't at others, which is a ROYAL PAIN!

 

George

 

Share this post


Link to post

KES 10.2.2.10535 MR1 has now been successfully installed and updated on the admin server WIHTOUT cutting it off from the network. This time NO ADDITIONAL NIC drivers appeared and everything seems to be running properly.

 

One thing I did notice. Immediately after installing KSC 10 a Microsoft update appeared - Security Update for Microsoft XML Core Services 6.0 Service Pack 2 (KB2957482). I did not install that before attempting the first installation of KES although that seemed to work OK until the server was restarted. Second time round I applied the Microsoft update BEFORE attempting to re-install KES. I've no idea if that might have any bearing on why the first installation tried to install two duff NIC drivers and killed all network services on it.

 

Anyway I'll be monitoring things closely over the next few days.

 

George

 

Share this post


Link to post
KES 10.2.2.10535 MR1 has now been successfully installed and updated on the admin server WIHTOUT cutting it off from the network. This time NO ADDITIONAL NIC drivers appeared and everything seems to be running properly.

 

One thing I did notice. Immediately after installing KSC 10 a Microsoft update appeared - Security Update for Microsoft XML Core Services 6.0 Service Pack 2 (KB2957482). I did not install that before attempting the first installation of KES although that seemed to work OK until the server was restarted. Second time round I applied the Microsoft update BEFORE attempting to re-install KES. I've no idea if that might have any bearing on why the first installation tried to install two duff NIC drivers and killed all network services on it.

 

Anyway I'll be monitoring things closely over the next few days.

 

George

 

Hi,

 

Thank You for the information provided! We will wait for further updates.

Share this post


Link to post
Hi,

 

Thank You for the information provided! We will wait for further updates.

 

Well so far everything is now working fine.

 

Now I just need to wait for my first crop of "unprocessed objects" to find out if the promises of that issue being fixed in KSC/KES 10 are true. From what I've read elsewhere on here I'm NOT looking forward to finding out.

 

P.S. Will Kaspersky PLEASE fix the stupid lack of line-wrap when entering posts! Trying to edit a 3KM long line with NO HORIZONTAL SCROLL BAR because the text doesn't line wrap is a ROYAL PAIN!

Share this post


Link to post

Hello.

 

Thank You for the information provided.

 

Could You please specify, can we mark the topic as solved?

 

Thank You.

Share this post


Link to post
Hello.

 

Thank You for the information provided.

 

Could You please specify, can we mark the topic as solved?

 

Thank You.

 

Hi,

 

I've been monitoring things for 7 days now and I'm happy that it all appears to be working. It will take a while for me to get used to the differences between KSC9 and KSC10 though.

 

This incident can now be closed.

 

Many thanks for you help.

 

Best regards

George

Share this post


Link to post
Hi,

 

I've been monitoring things for 7 days now and I'm happy that it all appears to be working. It will take a while for me to get used to the differences between KSC9 and KSC10 though.

 

This incident can now be closed.

 

Many thanks for you help.

 

Best regards

George

 

Hello,

please evaluate support help by using "Rating" option!

Thank you.

Share this post


Link to post

×
×
  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.