Kaspersky Administration Kit 6.0 MP1/MP2

	Useful links
	What is Administration Agent? System requirements to install a Network Agent

In the logical network to connect the Administration Server and the Antivirus installed on a client's computer, a Network Agent should be installed on the same computer. Network Agent can be installed either remotely or locally.

To install Network Agent locally, do the following:

1. Make sure the device where the Agent is going to be installed meets system requirements.

2. The Administration Agent distributive resides in the NetAgent folder; this folder is a part of the Kaspersky Administration Kit distributive. To get access to the folder, unpack the archive kasp6.0.XXXX_adminkit*.exe by an archivator (e.g. WinRAR) in a separate folder.

If the Administration Server is already installed, you can use the Agent distributive: it resides in the folder Program Files\Kaspersky Lab\Kaspersky Administration Kit\Share\Packages\NetAgent 1.0.

Copy this distributive on a local computer or a CD.

3. Run the setup.exe file from the Network Agent distributive on a client computer.

Remember, it is impossible to install Network Agent on a device where the Administration Server is already installed!

4. Define the folder to install the Administration Agent. The default folder is Program Files\Kaspersky Lab\NetworkAgent. If the folder is missing it will be created automatically. To change the setup folder, click the Browse button.

5. In the next window of the setup wizard set connection parameters of Administration Agent and Administration Server.

To set the connection parameters, define: 

• computer address where the Administration Server is installed or will be installed. IP-address (if it will not be changed often) or computer name in the MS Windows network (NetBIOS name) can be used as a computer name. 

• the port number, by which the Administration Agent will connect with the Administration Server. The default port is 14000. If this port is already in use, you can change it. Use only multiples of ten. 

	Useful links
	Secure connection with the Administration Server What is an Administration Server certificate?

• the port number used to connect to the Administration Server through SSL. The default port is 13000. If this port is already in use, you can change it. Use only multiples of ten in this field. To enable the secure connection using the SSL protocol, check the Use SSL to connect to server checkbox.

6. If you are going to connect to the Administration Server via a proxy, then in the next window define its parameters and the account to authorize.

7. Define the folder in the Network group into which the client will be added by the Administration Server during Windows-network scan.

Select the option: 

• Default group name – The client will be added to a folder that corresponds to its current location on the Windows network – domain or user group (this option is enabled by default). 

• Define group name – The client will be added to the specified folder. Enter the name of the folder in the field below. If the Network group has no folder with this name, it will be created (you can also specify the name of the existing folder from the Network group).

8. In the Server Certificate window specify how the Administration Server certificate will be obtained:

• Default certificate file – The Administration Server certificate will be sent when the Network Agent connects to the Administration Server for the first time (default value). 

• Select certificate file – The Administration Server will be authenticated using a certificate selected by the administrator. If you select this variant, specify the necessary file of the Administration Server certificate. The file of the certificate is klserver.cer and is stored in the folder Program Files\Kaspersky Lab\Kaspersky Administration Kit\Cert on the computer, where the Administration Server is installed. You can copy the file of the Administration Server certificate on a disc (or on this computer).

9. In the InstallShield Wizard Complete window to run the Administration Agent to finish installation click Finish. If you want to postpone the start of the Agent, uncheck Launch Kaspersky Network Agent.

If you are gong to use a hard drive of the computer on which the Administration Agent is installed to create an image of the disc and to implement the application on other computers, uncheck the Launch Kaspersky Network Agent checkbox.

	Useful links
	Why does the Administration Agent fail to connect the Administration Server?

To check if the Agent has been installed correctly open the Administration Console after it has been launched, add this client computer to any group – icon of a client computer in the detail's panel of the Administration Console will become bright. Brightness of the computer icon indicates if a client computer has connected to the Administration Server within a set period. If the icon is not bright, it means the Agent has never connected to the Server within the set period. The default period is 60 minutes. To change the value, right-click Administration Server > Properties > the Settings tab > in the Host visibility time-out, min field set the necessary value.