Web Console Problem

[HelloWorld]

Hello Community,

I need some help, please. I encountered a problem accessing my Kaspersky web console. I was working on migrating Kaspersky, and everything went smoothly without any issues. However, I am facing a problem when trying to authenticate to the web console. It keeps giving me an "authentication failed" error, stating that the username or password is incorrect. I'm 100% sure that the credentials are correct. I even removed and reinstalled the console, but the problem persists.

Any assistance would be appreciated.

Thank you!

 

[KarDip]

Hello @HelloWorld

It sounds frustrating, especially when you're sure that the credentials are correct. Here are a few steps and troubleshooting methods to resolve the issue:

1. Clear Browser Cache and Cookies

Sometimes, old session data can cause login issues.

• Try clearing your browser's cache and cookies.
• Alternatively, try logging in using a different browser or private/incognito mode.

2. Ensure Correct User Authentication Source

When using Kaspersky’s web console (Kaspersky Security Center Web Console), the system might be using Active Directory credentials or local server credentials, depending on how it's set up.

• If you're using Active Directory credentials, ensure the domain is being specified correctly (e.g., DOMAIN\Username).
• If it's local, make sure you're using the correct local server login.

3. Account Lockout or Password Reset

Kaspersky Security Center may lock the account temporarily after a certain number of failed login attempts.

• Wait a few minutes and try again.
• If there’s an option to reset your password, attempt a password reset and see if that works.

4. Check Console Logs

Kaspersky Security Center creates logs that might indicate the reason for the failed authentication.

• Check C:\ProgramData\KasperskyLab\adminkit\1093\Logs (or the corresponding folder depending on your version) for any errors or issues related to authentication.
• Look for lines that might hint at an authentication failure cause (e.g., wrong password).

5. Reinstall with Different Credentials

Since you’ve already tried reinstalling the console, I suggest:

• Try setting up a new admin account during the installation process.
• Make sure there’s no conflict with older credentials or accounts stored in your system.

6. SSL Certificate Issue

If you're using an SSL certificate for the web console, and it’s outdated or incorrectly configured, it might cause authentication issues. You may want to:

• Verify the SSL certificate’s validity.
• Temporarily disable SSL to see if the issue persists (you can re-enable it later if that was not the cause).

7. Firewall or Network Configuration

Network policies, firewall rules, or security software can sometimes interfere with authentication.

• Ensure that the necessary ports (default is 13299) are open for Kaspersky Web Console.
• Make sure no security software (including Kaspersky itself) is blocking the console's connections.

8. Service Restarts

Restart the Kaspersky Security Center services:

• Open the Services Manager (services.msc).
• Locate services related to Kaspersky Security Center (like Kaspersky Security Center Administration Server).
• Restart these services and try logging in again.

9. Database Issues

If the database Kaspersky uses to store console data (PostgreSQL, Microsoft SQL, etc.) has issues, this could affect authentication.

• Make sure the database service is running.
• Check the database logs for any errors related to authentication or data access.

10. Check Permissions

Make sure that the user account you're logging in with has the proper permissions set in the Kaspersky Security Center.

11. Contact Kaspersky Support

If the problem still persists after these steps, it may be worth contacting Kaspersky support for assistance, as there might be a deeper issue with the configuration.

By following these steps, you should be able to identify the issue and hopefully regain access to your Kaspersky web console. Let me know how it goes or if you need further clarification on any of the steps!

Thank you

 

[KAVabunga]

This is a generic error that usually indicates some connection problems between KSC and the Web Console, or general malfunction.

First of all, ensure that your KSC is running at all and can be accessed through the MMC console. Also make sure that it's listening on port 13299. If all seems to be correct, try to reinstall the Web Console - this is usually the fastest and easiest fix.

[maurosandes]

I'm facing the same problem, I tested version 15 of the Web console and it doesn't authenticate the user, I installed version 14 of the Web console and it works perfectly with the same credentials. The administration console version is 15, and it works perfectly. I migrated KSC 13 to KSC 15, I noticed that when I installed the web console and administration server to the new server without any data, I was able to authenticate on the web console normally, when I restored the backup, then I was no longer able to authenticate, but if I downgrade just the web console to version 14 or 13, it works normally. I hope this information can help identify the problem and provide a possible solution.

[KarDip]

9 hours ago, maurosandes said:

I'm facing the same problem, I tested version 15 of the Web console and it doesn't authenticate the user, I installed version 14 of the Web console and it works perfectly with the same credentials. The administration console version is 15, and it works perfectly. I migrated KSC 13 to KSC 15, I noticed that when I installed the web console and administration server to the new server without any data, I was able to authenticate on the web console normally, when I restored the backup, then I was no longer able to authenticate, but if I downgrade just the web console to version 14 or 13, it works normally. I hope this information can help identify the problem and provide a possible solution.

Hello @maurosandes

It sounds like you're experiencing an issue related to Kaspersky Security Center (KSC) versions 13, 14, and 15 during an upgrade process, particularly with the Web Console authentication after migrating from KSC 13 to KSC 15. Here’s a breakdown and possible troubleshooting steps to address the issue:

Problem Summary:

• Authentication fails in Web Console version 15 after restoring a backup from KSC 13.
• Web Console version 14 works fine with the same credentials after downgrading, but version 15 does not.
• The administration server version 15 works properly.
• Authentication works with a clean installation of KSC 15 Web Console but fails after restoring the backup.

Likely Causes:

1. Data Structure or Configuration Conflict:

   • The backup from KSC 13 might contain settings or structures incompatible with version 15’s Web Console, leading to a mismatch that prevents proper authentication.

2. Version Compatibility Issues:

   • Web Console version 15 might have stricter security or authentication mechanisms that conflict with settings from an older KSC 13 backup.

3. Changes in Web Console Authentication Mechanism:

   • The Web Console’s authentication system may have undergone changes from version 14 to 15, which could be causing compatibility problems with older backup data.

Steps to Troubleshoot:

1. Check Web Console Logs:

• Review the logs for the Web Console (version 15). They are usually located in:
  • Linux: /var/opt/kaspersky/kc4web/logs/
  • Windows: C:\ProgramData\KasperskyLab\kc4web\logs\
• Look for any errors or warnings related to authentication or connection issues after restoring the backup. This may give clues about what specifically is failing.

2. Compare Authentication Methods:

• Check the type of authentication being used (e.g., local accounts, domain authentication, etc.) in both KSC 13 and KSC 15 setups.
• KSC 15 might have stricter policies or might require updated security protocols that differ from KSC 13. Ensure the backup is updated to the correct method supported in version 15.

3. Review Backup Content:

• Before restoring the backup from KSC 13 to KSC 15, check if there are any deprecated settings or configurations related to authentication.
• It may be worth re-examining user roles, policies, and permissions to ensure they align with the requirements of KSC 15.

4. Reconfigure Authentication Post-Restoration:

• After restoring the backup, re-check the authentication settings under the KSC 15 Administration Console and ensure that the user authentication mechanism is properly configured.
• You may need to re-apply authentication policies or reset credentials for KSC 15’s Web Console, especially if encryption or security protocols have changed.

5. Patch or Update:

• Check if Kaspersky has released any patches or hotfixes for KSC 15 or the Web Console. Sometimes known issues are addressed through updates post-release, and upgrading to the latest available patch might resolve the issue.

6. Database Integrity Check:

• Run a database integrity check to ensure the database from KSC 13 was properly migrated to KSC 15 and no corruption occurred. This can be done from the KSC 15 Administration Console under Maintenance tasks.

7. Consider Fresh Installation with Manual Migration:

• If the issue persists, you could consider manually migrating important settings and policies from KSC 13 to KSC 15 rather than restoring a full backup. This way, you can avoid potential conflicts caused by incompatible configurations.

---

Conclusion:

Since the issue arises only after restoring the backup, it’s likely a conflict between old configurations and the new Web Console version. Reviewing the logs and authentication settings is key to identifying what’s failing in version 15. In the meantime, downgrading the Web Console seems like a viable workaround, but a long-term fix may require further troubleshooting or patching.

Thank you

[HelloWorld]

@maurosandes Thank you so much! It works correctly, but I found another problem.

 

When I try to display the incident map through the Kaspersky Center web interface, I get the error message, "The required plug-in is not installed. Please install the EDR Lite plug-in to open an incident."

[KarDip]

Hello @HelloWorld

Your welcome

The error message you encountered—“The required plug-in is not installed. Please install the EDR Lite plug-in to open an incident”—indicates that the Kaspersky Security Center (KSC) web interface is missing the necessary plug-in for managing incidents, specifically the EDR (Endpoint Detection and Response) Lite plug-in.

Let's see how you can resolve the issue:

---

Solution Steps:

1. Verify EDR Lite Availability in Your License:

• Check if your Kaspersky license includes the EDR Lite component.
• Not all KSC editions support EDR Lite by default. If you don’t have it in your current license, you might need to contact Kaspersky Technical support or your reseller to obtain the correct license.

2. Download and Install the EDR Lite Plug-in:

• Download the Plug-in:

  1. Go to the Kaspersky Security Center download page or Kaspersky Company Account.
  2. Download the appropriate version of the EDR Lite plug-in that matches your KSC version.

• Install the Plug-in:

  1. On the Kaspersky Administration Console (or the web server hosting the KSC web console), run the installer for the EDR Lite plug-in.
  2. Restart the Kaspersky Security Center services if needed.

3. Enable the EDR Lite Component in KSC:

• After installing the plug-in, go to the Kaspersky Security Center Administration Console and verify if the EDR Lite feature is enabled:
  1. Open the Settings panel in KSC.
  2. Navigate to Application Plugins and ensure that EDR Lite is visible and correctly installed.

4. Browser Compatibility Check:

• If the issue persists after installing the plug-in, ensure that your browser supports the Kaspersky web interface.
  • Clear the browser cache and reload the interface.
  • Some features may require specific browsers or the installation of additional browser plug-ins or certificates.

5. Verify Permissions:

• Make sure the user account you are using has the necessary permissions to view incidents.
  • In the KSC Administration Console, go to Users and Roles and confirm that the account is assigned a role with access to incident maps.

---

Additional Troubleshooting:

• Check Logs:

  • Review the KSC server logs to see if there are any errors related to plug-in installation or missing dependencies.

• Update Kaspersky Security Center:

  • Ensure both your KSC server and web console are up to date with the latest patches. Sometimes, compatibility issues arise if the plug-in version and KSC version don’t align perfectly.

• Firewall and Proxy Settings:

  • If you’re accessing the KSC web console remotely, make sure that firewall or proxy configurations aren’t blocking access to plug-ins or the EDR Lite interface.

---

Conclusion:

The issue should be resolved by installing the EDR Lite plug-in and ensuring all components are aligned with your KSC version. If the problem persists, updating the KSC version or contacting Kaspersky support might be necessary to address any underlying issues.

Thank you

[Danijel Jovanovic JAPICOM]

After upgrade to KSC 15.1 for windows, access rights are stripped. Not every time, but in last 10 days i upgraded 10-15 KSC servers and on 70% of them that was the case. Esspecialy if you are using domain accounts to manage KSC.

You need to login as local administrator account and add access rights for KSC and Kaspersky applications for other accounts that you want to use to manage KSC and other Kaspersky applications.

After that you can update plugins from new web console which works amazing in comparation with 14.2 version.

[KarDip]

Hey Guys

Searched 3 sites

To cross-verify compatibility for Kaspersky Security Center (KSC) 15.1, Kaspersky provides a compatibility matrix and documentation that detail supported versions and configurations for various Kaspersky components. This matrix confirms which versions of the Kaspersky Web Console, Network Agent, and other modules are compatible with KSC 15.1, allowing you to confirm any potential compatibility-related issues impacting domain permissions or functionality.

You can find the detailed compatibility information for KSC 15.1 on Kaspersky's official support page here: Kaspersky Compatibility Matrix for KSC 15.1

Kaspersky Support

Kaspersky Support

 

If you have any questions on interpreting specific parts of the documentation or need further assistance, feel free to reach out!

Thank you

Edited 6 hours ago by KarDip