Scenario: Reverse migration from Kaspersky Security Center Cloud Console to Kaspersky Security Center

You may want to migrate the managed devices from Kaspersky Security Center Cloud Console to Kaspersky Security Center Administration Server. For example, this process can be used to roll back migration to Kaspersky Security Center Cloud Console.

Prerequisites

Before you start, make sure that the following prerequisites are met:

• Kaspersky Security Center Cloud Console is available and has managed devices connected.
• Kaspersky Security Center 14.2 (or later) Administration Server is available and has a Network Agent installation package of version 13 or later.

Reverse migration stages

Reverse migration comprises the following stages:

1. Creating a Network Agent stand-alone installation package in Kaspersky Security Center Administration Server on-premises

   In Kaspersky Security Center Administration Server running on-premises, create a Network Agent stand-alone installation package.

   During the creation process, you can select the Move unassigned devices to this group option to specify an administration group to which you want to move Network Agents after installation. If you have specified the administration group, an automatic moving rule is created that will move to the target administration group all Network Agents installed with this stand-alone installation package.

   To ensure correct reverse migration, make sure that you select the Network Agent version that is equal to or later than the version used in Kaspersky Security Center Cloud Console.

2. Creating a custom installation package in Kaspersky Security Center Cloud Console

   In Kaspersky Security Center Cloud Console, create a custom installation package based on the stand-alone installation package that you created and saved from Kaspersky Security Center Administration Server running on-premises.

   To enable package installation in silent mode, in the Executable file command line field, specify the -s key.

3. Creating a remote installation task

   In Kaspersky Security Center Cloud Console, create a remote installation task using the custom installation package that you have created.

4. Running the remote installation task

   Start the remote installation task that you created. The task initiates the re-installation of all Network Agents in the specified administration group; and it also switches the Network Agents under management of Kaspersky Security Center Administration Server running on-premises by changing the connection address and modifying other connection settings.

   If you did not specify any target administration group during creation of the stand-alone installation package, all devices are moved to the Unassigned devices group.

Results

Upon finishing with the migration, you can make sure that it was successful:

• All devices within the scope of the remote installation task that were previously managed through Kaspersky Security Center Cloud Console are now managed by Kaspersky Security Center Administration Server running on-premises.
• The devices are automatically moved to the administration group specified in the installation package settings.

The remote installation task in Kaspersky Security Center Cloud Console cannot be completed: it has no more target devices since all of them have modified connection settings. You have to stop the task manually after you make sure that the error icon () has appeared in the Visible column of the Managed Devices list for all devices from the migration scope.