Network infrastructure


Domain ABC
Domain XYZ
A two-way trust relationship established between domain ABC and domain XYZ
Kaspersky Security Center (ABC) server deployed in domain ABC
SQL server (ABC) deployed in domain ABC


Task


to move Kaspersky Security Center from domain ABC to domain XYZ
without moving the SQL server (ABC).


Solution


To solve the task:


In domain XYZ, deploy a new Kaspersky Security Center server (XYZ) that uses a new database instance on the SQL server (ABC).


Please note that the user account of the Administration Server service should have the following permissions:

       

        dbo permissions for a new SQL engine instance;
        db_datareader and db_datawriter permissions for master and temp DB databases on the same SQL server.


A two-way trust relationship should be established between the domains.


To install Kaspersky Security Center in domain XYZ, run the installer when you are logged on with the administrator permissions for this new SQL engine instance installed for maintenance of this Administration Server.


There is two option of further domain migration:


Option 1. Reconnect managed computers to Kaspersky Security Center (XYZ)

  1. Create the policies and tasks in Kaspersky Security Center (XYZ) or import them from Kaspersky Security Center (ABC). Create installation packages on a new server.
  2. Then create the Change Administration Server task for managed computers in Kaspersky Security Center (ABC).

     
  3. Make sure that all managed computers are connected to Kaspersky Security Center (XYZ).
  4. After that, uninstall Kaspersky Security Center (ABC).
  5. Remove an old instance of KAV from the SQL server (ABC).


Option 2. Reconnect all managed computers and move all data from Kaspersky Security Center (ABC) to Kaspersky Security Center (XYZ)

  1. Create a backup of Kaspersky Security Center (ABC), configuring policies, tasks, installation packages, etc., as needed.
     To move the Network Agent installation package, change its Administration Server (XYZ) connection properties.

     
  2. Restore data from the backup on Kaspersky Security Center (XYZ). As a result, managed computers are displayed in the Administration Console but they cannot be connected or managed.
  3. Create the Change Administration Server task for managed computers in Kaspersky Security Center (ABC).
  4. Make sure that all managed computers are connected to Kaspersky Security Center (XYZ).
  5. Uninstall Kaspersky Security Center (ABC).