Issue: Kaspersky Endpoint Security service fails to start after Ivanti Antivirus Install

Version 14

    Verified Product Versions

    Endpoint Manager 9.6Endpoint Manager 2016.xEndpoint Manager 2017.x



    After installing Ivanti Anti-Virus, the Kaspersky Endpoint Security Service fails to start.

    When trying to start the service, an error is received:


    Windows could not start the Kaspersky Endpoint Security Service service on Local Computer.

    Error 1053: The service did not respond to the respond to the start or control request in a timely fashion.     






    This is commonly caused by missing or disabled Root Certificates.




    Verify the Necessary Root Certificates are installed on the computer


    1. Open a Run command, type mmc and press OK.
    2. In the Console window, click File | Add/Remove Snap-in...
    3. In the Add or Remove Snap-ins window select Certificates, then click Add>
    4. In the Certificates snap-in window select Computer account, then click Next
    5. In the Select Computer window select Local Computer: (the computer this console is running on), then click Finish
    6. You will be returned to the Add or Remove Snap-ins window, and under Selected snap-ins, Certificates (Local Computer) will be shown.
    7. Click Ok.
    8. In the Console window, expand Certificates | Trusted Root Certification Authorities, and select Certificates.
    9. Verify the necessary Root Certificates are listed:

      GTE CyberTrust Global Root

    10. If the certificates are not installed, contact Ivanti support to request them. Reference this document in your case submission.Customer Support Portal



    If the certificates are installed, but the issue still occurs


    If the Root Certificates are installed, but the issue is still occurring, this can be caused by the certificates being outdated/expired, or being disabled by security policies.


    1. Open a Run command, type secpol.msc and press Ok.
    2. In the Local Security Policy window, select Software Restrictions Policies.
    3. In the Trusted Publishers Properties window, select Define these policy settings.
    4. In the Trusted publisher management section, select Allow all administrators and users to manage user's own Trusted Publishers, and click Ok.

    Group Policy Disabled Root Certificates


    In some instances, Root Certificates may have been disabled via Group Policy. Disabling these Root Certificates will cause the necessary services for Ivanti AntiVirus to fail on start. The certificates will need to be allowed for use by the services.


    Certificates are Installed and Enabled, but the issue persists


    In the event that the information above does not correct the issue, please open a ticket with Ivanti Support.

    In the ticket reference this Article.


    Please include screen-shots of the Root Certificates showing as installed on the Affected Machine.

    Please follow this document and include in your ticket:


    • Standard Log Files
    • TraceLog Files
    • GetSystemInfo