KEA 3.9 -> 3.1x: Upgrade procedure [Kaspersky Endpoint Agent]

[Antipova Anna]

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials.

OS restart will be requested If you upgrading KEA above 3.11 version.

About

This article contains the best way of upgrading KEA 3.9 to the last KEA version avoiding possible known issues.

Procedure

• Disable Password-protection and Self-Defense in KEA policy, lock the settings. Ensure that policy is applied on all devices.
• Upgrade KEA plug-in on the KSC side. Recreate KEA policy.
• Prepare installation package:
   - copy KEA distributive to KSC;
   - copy KEA Core-patch into the same folder;
   - copy KEA3.9_upgrade_script.zip into the same folder;
  
   - modify the last part of the script specifying the correct patch name (optional). Uncomment the last string if you want to install the patch right after KEA installation:
  
• Create an installation package on KSC
    →  → 
• Create and start "Install Application Remotely" task from KSC;
• Wait for successful completion;
• Enable Password-protection and Self-Defense in KEA policy after the upgrade is done.

Upgrade Script:KEA3.9_upgrade_script.zip

This scenario helps to avoid possible known issues with KEA 3.9 upgrade.

Rarely, even the script doesn't work.
The cause of it - KEA 3.9 Self-Defense. The files and services are marked for deletion but can't be deleted.
So, if the script doesn't help you - the only possible way to complete the upgrade, unfortunately, is the reboot.