Jump to content
Kaspersky Support Forum

Installation Kaspersky Security Center unter Linux - Mangelhaft

Chris_de_

By Chris_de_
in Kaspersky Security Center

 Share

Recommended Posts

Chris_de_

Chris_de_

Posted
Posted

Habe versucht KSC 16.1 unter Debian 12 zu installieren. Dokumentation ein Witz. 
Nach stundenlangem Flirten mit ChatGPT stellte sich heraus, dass für Verwaltung die Webconsole zusätzlich installiert werden muss. 
Das hab ich nachgeholt, aktuell bekomme ich beim Aufrufen im Browser, am Linux KSC Server wie auch überall im Netz nur: "Not Found". 
Abgesehen davon, dass ich die korrekte URL für die Webconsole auch nirgends finden kann ... 

Was mus mann machen, dass man KSC zum Laufen bekommt? Wo bekommt man aktuelle, detailierte Anleitung? 
Kunde möchte die Verwaltung nicht über Cloud und nicht auf Windows Server. Da ich in Vorleistung gehen musste sitze ich jetzt auf Kaspersky Lizenzen, die vergammeln, weil der Rollout nicht stattfindet. 



image.png.12b2b3db5a8ad07d94d9b50b496569ae.pngimage.thumb.png.4c81c0c9a0953e3c0fe0eec988871d64.png

Tahmeed702

Tahmeed702

Posted
Posted

try with ip address and port number 

Example https://192.168.14.23:8080

 

Tahmeed702

Tahmeed702

Posted
Posted

is Klserver services are properly running 

Danijel Jovanovic JAPICOM

Danijel Jovanovic JAPICOM

Posted
Posted

Hi,

Try this. I made this while ago for installation of ksc and ksc web console, postgresql on linux. Just follow steps when u run it and you should be fine. I know it has some issues, but it works enough for me, and helps a lot. It configures users and database, as i remember from last ime, it configures json for web console,etc...you just need to provide a location of ksc and ksc web console packages when it asks for them.

https://we.tl/t-gkyxMtCSEU here is the linkk for script.

It is little bit acrobatic to deploy, but after that its pure magic 🙂

8080 port is web console, you should allways go through that port and then it redirects you to port 4444 where is IAM. 

If you dont manage to deploy it with this script, just ping me here, ill help you.

Chris_de_

Chris_de_

Posted
  • Author
Posted
Am 8.3.2026 um 17:56 schrieb Danijel Jovanovic JAPICOM:

Hi,

Try this. I made this while ago for installation of ksc and ksc web console, postgresql on linux. Just follow steps when u run it and you should be fine. I know it has some issues, but it works enough for me, and helps a lot. It configures users and database, as i remember from last ime, it configures json for web console,etc...you just need to provide a location of ksc and ksc web console packages when it asks for them.

https://we.tl/t-gkyxMtCSEU here is the linkk for script.

It is little bit acrobatic to deploy, but after that its pure magic 🙂

8080 port is web console, you should allways go through that port and then it redirects you to port 4444 where is IAM. 

If you dont manage to deploy it with this script, just ping me here, ill help you.

Hello Danijel, 
script exits after waiting for certificates to be generated. 
There are no certificates generated. 
Setup broke with ERROR

What I'm thinking: the script does "apt install -y ksc...."
But as I tried to setup KSC, running "dpkg -i ksc ... " the setup told me to run postinstall.pl afterwards that seems to be missed by your script ... 

Don't know how to proceed. 
 

Chris_de_

Chris_de_

Posted
  • Author
Posted

@Danijel Jovanovic JAPICOM 

[INFO] KSC installed successfully!
[INFO] Waiting for KSC services to initialize and create certificates...
[WARNING] IAM certificate not found yet, waiting longer...

[INFO] ==========================================
[INFO] STEP 10: Installing Web Console
[INFO] ==========================================

[INFO] Preparing Web Console installation...
[ERROR] IAM certificate not found at: /var/opt/kaspersky/klnagent_srv/iam/main_certificate.pem - KSC may not have initialized properly
root@KSC:/home/ksc/Downloads#

 

Chris_de_

Chris_de_

Posted
  • Author
Posted

BTW there are problems recorded with postgresql getting installed with "apt install postgresql" and not with version number attached "apt install postgresql-15" But services and certificates aren't installed either ...

 

Danijel Jovanovic JAPICOM

Danijel Jovanovic JAPICOM

Posted
Posted

Hi,

Sorry for late response. Try with theese two on clean machine i possible.

https://we.tl/t-jVRuAUEI01 . I think i have sent you wrong one.

First go with preinstall script. That one should prepare OS, database etc.

Second one is for web console part.

Im pretty much in some chaos with work theese days, but i really wanna help you with this. If you dont manage to resolve this with those scripts, ping me here again and we can make some meeting online so i can help you.

Chris_de_

Chris_de_

Posted
  • Author
Posted
Am 12.3.2026 um 07:13 schrieb Danijel Jovanovic JAPICOM:

...

Im pretty much in some chaos with work theese days, but i really wanna help you with this. If you dont manage to resolve this with those scripts, ping me here again and we can make some meeting online so i can help you.

Hello Danijel, 
I'm on site today and give the scripts an try 🙂
Kind regards, Chris 

Chris_de_

Chris_de_

Posted
  • Author
Posted

@Danijel Jovanovic JAPICOM Good Morning, tried the scripts. Negativ. 

The KSC preinstall script failed after installing postgreSQL. 
I've changed apt install postgresql ...  to apt install postgresql-15 ...
Further, the script cannot read the RAM size, so I did the value manually: shared_buffers = 2048MB

After that, script 1 works through. 
Then I manually on the shell:
export KLAUTOANSWERS=/tmp/ksc_install_answers.txt
apt instal -y l /tmp/ksc64_16.1.0-6517_amd64.deb

Here it's crashing:

Zitat

ksc64 (16.1.0.6517) wird eingerichtet ...
Post install section...
Traces off
Execute automatic installation

Fatal error: Server registration failed with code '3': 'Registering
kladminserver.
'

Fatal error: Setup script failed with code 2, signal 0.

Installation failed.
dpkg: Fehler beim Bearbeiten des Paketes ksc64 (--configure):
 »installiertes post-installation-Skript des Paketes ksc64«-Unterprozess gab den Fehlerwert 1 zurück
Fehler traten auf beim Bearbeiten von:
 ksc64
E: Sub-process /usr/bin/dpkg returned an error code (1)
root@KSC:/tmp#

 

If I do dpkg -i /tmp/ksc64...
It failes,too:

Zitat

Entpacken von ksc64 (16.1.0.6517) über (16.1.0.6517) ...
Post remove section...
ksc64 (16.1.0.6517) wird eingerichtet ...
Post install section...
Traces off
Execute automatic installation

Fatal error: Server registration failed with code '3': 'Registering
kladminserver.
'

Fatal error: Setup script failed with code 2, signal 0.

Installation failed.
dpkg: Fehler beim Bearbeiten des Paketes ksc64 (--install):
 »installiertes post-installation-Skript des Paketes ksc64«-Unterprozess gab den Fehlerwert 1 zurück
Fehler traten auf beim Bearbeiten von:
 ksc64
root@KSC:/tmp#

 


Thats the unattended answers file (passwords and ip are anonymized) : 
EULA_ACCEPTED=1
PP_ACCEPTED=1
KLSRV_UNATT_SERVERADDRESS=192.168.xxx.xxx
KLSRV_UNATT_PORT_SRV=14000
KLSRV_UNATT_PORT_SRV_SSL=13000
KLSRV_UNATT_PORT_KLOAPI=13299
KLSRV_UNATT_PORT_GUI=13291
KLSRV_UNATT_NETRANGETYPE=2
KLSRV_UNATT_KLADMINSGROUP=kladmins
KLSRV_UNATT_KLSRVUSER=ksc
KLSRV_UNATT_KLIAMUSER=ksciam
KLSRV_UNATT_KLSVCUSER=ksc
KLSRV_UNATT_DBMS_TYPE=PostgreSQL
KLSRV_UNATT_DBMS_NAME=ksc
KLSRV_UNATT_DBMS_LOGIN=ksc
KLSRV_UNATT_DBMS_PASSWORD=***
KLSRV_UNATT_DBMS_HOST=localhost
KLSRV_UNATT_DBMS_PORT=5432
KLSRV_UNATT_IAM_ADDRESS=192.168.xxx.xxx
KLSRV_UNATT_DBMS_IAM_TYPE=PostgreSQL
KLSRV_UNATT_DBMS_IAM_INSTANCE=localhost
KLSRV_UNATT_DBMS_IAM_PORT=5432
KLSRV_UNATT_DB_IAM_NAME=iam
KLSRV_UNATT_DBMS_IAM_LOGIN=ksc
KLSRV_UNATT_DBMS_IAM_PASSWORD=***

 

Journal show following Error: 

Mär 16 07:57:34 KSC systemd[1]: Started packagekit.service - PackageKit Daemon.
Mär 16 07:59:23 KSC klnagent_srv[7317]: Nagent registration succeeded    (5B4B4C4E4147454E545D2070726F647563742F6F736D702F6B73632F6465762F6E6167656E742F6E6167656E742F6E6167656E742E6370704031313233)
Mär 16 07:59:24 KSC kladminserver_srv[7334]: Der Dienst 'kladminserver' wurde wegen eines Fehlers beendet. #1182 Bad parameter "KLSRV_UNATT_DBMS_TYPE"    (4665686C657264657461696C733A20313138322F30202842616420706172616D6574657220224B4C5352565F554E4154545F44424D535F5459504522292C2070726F647563742F6F736D702F6B73632F6465762F7365727665722F7365727665722F696E7374616C6C5F696E666F2E6370702C203330312E0A3B205B4B4C5354445356435D2070726F647563742F6F736D702F6B73632F6465762F7374642F736572766963652F2E2F736572766963656175746F73746F70696D706C2E6840323634)
Mär 16 08:02:40 KSC PackageKit[7217]: daemon quit
Mär 16 08:02:40 KSC systemd[1]: packagekit.service: Deactivated successfully.

 

 

Chris_de_

Chris_de_

Posted
  • Author
Posted

Next steps 🙂

Changed value form PostgreSQL to postgres in unattended txt: 
KLSRV_UNATT_DBMS_TYPE=postgres
KLSRV_UNATT_DBMS_IAM_TYPE=postgres

Zitat

Execute automatic installation
Add service klnagent_srv...
Add service kladminserver_srv...
Add service klactprx_srv...
Add service klwebsrv_srv...
Add service kliam_srv...
Starting kladminserver_srv...
Starting klnagent_srv...
Starting klactprx_srv...
Starting klwebsrv_srv...
Starting kliam_srv...

Kaspersky Security Center is installed.
Binaries were installed in /opt/kaspersky/ksc64/sbin

 

now following the Webconsole script ...

Chris_de_

Chris_de_

Posted
  • Author
Posted

Webconsole setup finished with error, starting Web Console service. 

 

Zitat

==> Vault shutdown triggered

2026-03-16T09:02:17.443+0100 [INFO]  core: marked as sealed
2026-03-16T09:02:17.443+0100 [INFO]  core: pre-seal teardown starting
2026-03-16T09:02:17.443+0100 [INFO]  rollback: stopping rollback manager
2026-03-16T09:02:17.444+0100 [INFO]  core: pre-seal teardown complete
2026-03-16T09:02:17.444+0100 [INFO]  core: stopping cluster listeners
2026-03-16T09:02:17.444+0100 [INFO]  core.cluster-listener: forwarding rpc listeners stopped

2026-03-16T09:02:17.595+0100 [INFO]  core.cluster-listener: rpc listeners successfully shut down
2026-03-16T09:02:17.595+0100 [INFO]  core: cluster listeners successfully shut down

2026-03-16T09:02:17.595+0100 [INFO]  core: vault is sealed

Post-install script finished successfully
[INFO] Web Console package installed successfully!
[INFO] Waiting for Web Console service to initialize...
[WARNING] Web Console service not running, attempting to start...
[ERROR] Failed to start Web Console service!

Check service status:
  systemctl status klwebui
  systemctl status klwebui.service

View logs:
  journalctl -u klwebui -n 50
  journalctl -u klwebui.service -n 50

Check configuration:
  cat /etc/ksc-web-console-setup.json

 



I think the service is running: 
 

Zitat

Netid    State     Recv-Q    Send-Q        Local Address:Port          Peer Address:Port    Process
udp      UNCONN    0         0                   0.0.0.0:5353               0.0.0.0:*        users:(("avahi-daemon",pid=895,fd=12))
udp      UNCONN    0         0                   0.0.0.0:38953              0.0.0.0:*        users:(("avahi-daemon",pid=895,fd=13))
tcp      LISTEN    0         4096                0.0.0.0:9500               0.0.0.0:*        users:(("kliam",pid=7998,fd=18))
tcp      LISTEN    0         346                 0.0.0.0:5432               0.0.0.0:*        users:(("postgres",pid=3947,fd=5))
tcp      LISTEN    0         4096                0.0.0.0:9050               0.0.0.0:*        users:(("kliam",pid=7998,fd=20))
tcp      LISTEN    0         100                 0.0.0.0:13111              0.0.0.0:*        users:(("ksnproxy",pid=8157,fd=39))
tcp      LISTEN    0         2048                0.0.0.0:13299              0.0.0.0:*        users:(("klserver",pid=7959,fd=82))
tcp      LISTEN    0         2048                0.0.0.0:17000              0.0.0.0:*        users:(("klactprx",pid=7973,fd=26))
tcp      LISTEN    0         2048                0.0.0.0:13000              0.0.0.0:*        users:(("klserver",pid=7959,fd=81))
tcp      LISTEN    0         4096                0.0.0.0:4444               0.0.0.0:*        users:(("kliam",pid=7998,fd=19))
tcp      LISTEN    0         128                 0.0.0.0:22                 0.0.0.0:*        users:(("sshd",pid=951,fd=3))
tcp      LISTEN    0         2048                0.0.0.0:8061               0.0.0.0:*        users:(("klcsweb",pid=7980,fd=27))
tcp      LISTEN    0         2048                0.0.0.0:8060               0.0.0.0:*        users:(("klcsweb",pid=7980,fd=26))
tcp      LISTEN    0         511                 0.0.0.0:8080               0.0.0.0:*        users:(("node",pid=9643,fd=35))
tcp      LISTEN    0         511               127.0.0.1:1329               0.0.0.0:*        users:(("node",pid=9818,fd=23))
tcp      LISTEN    0         511               127.0.0.1:2005               0.0.0.0:*        users:(("node",pid=9610,fd=23))
tcp      LISTEN    0         511               127.0.0.1:2003               0.0.0.0:*        users:(("node",pid=9810,fd=23))
tcp      LISTEN    0         511               127.0.0.1:2001               0.0.0.0:*        users:(("node",pid=9677,fd=26))
tcp      LISTEN    0         2048              127.0.0.1:30522              0.0.0.0:*        users:(("klserver",pid=7959,fd=69))
tcp      LISTEN    0         2048                0.0.0.0:19170              0.0.0.0:*        users:(("klserver",pid=7959,fd=83))
tcp      LISTEN    0         4096              127.0.0.1:4222               0.0.0.0:*        users:(("nats-server",pid=9484,fd=3))
tcp      LISTEN    0         4096              127.0.0.1:4151               0.0.0.0:*        users:(("nsqd",pid=9432,fd=8))
tcp      LISTEN    0         4096              127.0.0.1:4150               0.0.0.0:*        users:(("nsqd",pid=9432,fd=7))
tcp      LISTEN    0         4096              127.0.0.1:4152               0.0.0.0:*        users:(("nsqd",pid=9432,fd=9))
tcp      LISTEN    0         128               127.0.0.1:631                0.0.0.0:*        users:(("cupsd",pid=4479,fd=6))

 

On which address could I see the webpage ?

Danijel Jovanovic JAPICOM

Danijel Jovanovic JAPICOM

Posted
Posted
9 minutes ago, Chris_de_ said:

Webconsole setup finished with error, starting Web Console service. 

 



I think the service is running: 
 

On which address could I see the webpage ?

Hi,

You can ignore that error at the end "Failed to start web service"

You can should be able to access web console on https://ip-address-of-ksc-server:8080

It will redirect you to IAM port 4444, but just carry on, enroll 2fa and you are good to go.

Chris_de_

Chris_de_

Posted
  • Author
Posted

Looks fine, start with testing and implementing, finaly 🙂
image.png.aa586de8687d71a3843934ac7980ee10.png

Chris_de_

Chris_de_

Posted
  • Author
Posted

... username or password incorrect 😞

tried to reinstall the web interface, still no login possible

Danijel Jovanovic JAPICOM

Danijel Jovanovic JAPICOM

Posted
Posted

User and password for web console was defined during the installation of ksc server.

Try to recall that. Username should be ksc if you didnt configure it different.

Chris_de_

Chris_de_

Posted
  • Author
Posted

tried ksc and kscadmin 
for test setup took always same passwords. No login possible. 
But at least Setup is running through from fresh Debian 12 with the modified script. 

Is there a option to trace the login problems?
This project is becomming an headache  🙂 

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
 Share
Go to topic listing


×
×
  • Create New...