Download as txt, pdf, or txt
Download as txt, pdf, or txt
You are on page 1of 4

//========================================== UKAIP USAGE TUTORIAL

==============================================//

FIRST STEPS:
If you use UKAIP to patch your brand fresh IceWarp Merak server block SMTP access
to icewarp.com and fully block access
to licenseprocessor.icewarp.com with your firewall/router before you continue with
this guide.

1)Copy UKAIP executable to your KWR/KMS/KCN/Merak installation folder.


2W)[Windows Only]
Open cmd.exe(Command prompt) and perform:
cd "Your-KMS_OR_KWR_installation_folder"
3)Generate license for your product this way:
[KWR]
ukaip86.exe winroute.exe -l license.key
/ukaip_i686 winroute.exe -l ./license.key
[KMS/KCN]
ukaip86.exe mailserver.exe -l license.key
/ukaip_i686 ./mailserver -l ./license.key
[ICEWARP MERAK]
ukaip86.exe {ONE_OF_SERVICE_PROGS,CONFIG_APP,SETUP} -l license.key
./ukaip_i686 {ONE_OF_SERVICE_PROGS,TOOL_APP} -l license.key

ukaip64.exe winroute.exe -l license.key


/ukaip_amd64 winroute.exe -l ./license.key
[KMS/KCN]
ukaip64.exe mailserver.exe -l license.key
/ukaip_i686 ./mailserver -l ./license.key
[ICEWARP MERAK]
ukaip64.exe {ONE_OF_SERVICE_PROGS,CONFIG_APP,SETUP} -l license.key
./ukaip_amd64 {ONE_OF_SERVICE_PROGS,TOOL_APP} -l license.key

Example: ukaip86.exe smtp.exe -l license.key


ukaip86.exe setup.exe -l license.key(See below for installer notes).
./ukaip_i686.exe ./pop3 -l license.key
./ukaip_i686.exe ./tool -l license.key
[ICEWARP CLIENT]
ukaip86.exe IceWarpServerInterfacePlugin.dll -cl license.key
4)Run UKAIP as following to patch KMS/KCN/Merak/KWR:
NOTE: If your operating system supports it you can use native 64-bit binaries as
well(i.e ukaip64.exe instead of ukaip86.exe
and ./ukaip_amd64 instead of ./ukaip_i686)
Windows:
[KWR]: ukaip86.exe winroute.exe
NOTE: If you want to use KWR with KWF with license file(Semi-Trial mode) then
run as following:
ukaip86.exe winroute.exe -force-trial-kwf-with-lic
[KMS/KCN] ukaip86.exe mailserver.exe
[ICEWARP MERAK] ukaip86.exe cal.exe config.exe control.exe fastisapi.exe im.exe
pop3.exe smtp.exe sendmail.exe api.dll db.dll php\ext\icewarpphp.dll
[ICEWARP MERAK 10.4+] ukaip86.exe kasperskyupdater.exe
[ICEWARP CLIENT] ukaip86.exe IceWarpServerInterfacePlugin.dll
NOTE: To use the license during installation/accept license during upgrade you
should patch the installer.
Open icewarp-%version%-%date_and_build_in_nightlies%.exe installer(size ~
70-200 MB) with 7-zip and extract [0] file
out of it. Now extract the contents of [0] with 7-zip to folder %MERSETUP
%. Patch the %MERSETUP%\setup.exe(About 4-5 Mb in size) file with UKAIP:
ukaip86.exe %MERSETUP%\setup.exe
For 10.3+ extract the .exe directly(There is no [0] file - all files
directly packaged)
Linux:
[KMS/KCN] ./ukaip_i686 ./mailserver
[KWR] ./ukaip_i686 ./winroute
NOTE: If you want to use KWR with KWF with license file(Semi-Trial mode)
then run as following:
./ukaip_i686 winroute.exe --force-trial-for-plugins-with-license
NOTE2: If you want to activate KWF directly with E-Soft key then patch like
this:
./ukaip_i686 winroute.exe --force-trial-for-plugins-with-license
--enable-kerio-to-esoft-redirect

[ICEWARP MERAK] ./ukaip_i686 ./cal ./control ./icewarpd ./im ./pop3 ./smtp


./sendmail ./tool ./lib/libapi.so ./php/ext/libicewarpphp.so
[ICEWARP MERAK 10.4+] ./ukaip_i686 ./kasperskyupdater

SKiP Step 5 and 6 for IceWarp UCS 10.X.


SKiP Step 5 if you are patching Kerio Connect/Control 7.X - Jump to Step 6.
5) Run UKAIP as following to patch McAfee(ONLY APPLICABLE FOR Kerio 6.7X Series):
Windows:
ukaip86.exe "%Relative_Path_From_Installation_Folder_To_AV_Plugins_Folder
%\avir_mcafee.dll"

Example for KWR:


ukaip86.exe avirplugins\avir_mcafee.dll
Linux:
ukaip_i686 ./rel_path_to_avplugs/avir_mcafee.so

NOTE:
If you have your own local(LAN) mirror for mcafee you can use the following to
enable use of it:
Windows:
ukaip86.exe "%Relative_Path_From_Installation_Folder_To_AV_Plugins_Folder
%\avir_mcafee.dll" --enable-custom-update-mirror-for-mcafee
Linux:
./ukaip_i686 "%Relative_Path_From_Installation_Folder_To_AV_Plugins_Folder
%/avir_mcafee.so" --enable-custom-update-mirror-for-mcafee
UKP will ask you for your mirror's DNS name and relative path to folder
holding McAfee updates.

This step is only applicable for Kerio Control/Connect 7.X


6)
Requirements for this step(If you cant fullfill the requirements then skip to
step 7 and disable AntiVirus auto-updates):
HTTP Web Server running on standard port 80.

Run UKAIP as following to patch Sophos(ONLY APPLICABLE FOR Kerio 7.X Series and
Newer):
Windows:
ukaip86.exe "%Relative_Path_From_Installation_Folder_To_AV_Plugins_Folder
%\avir_sophos.dll" -Ss %IP_OR_DNS_NAME_OF_YOUR_HTTP_SERVER%

Example for KCNTRL:


ukaip86.exe avirplugins\avir_sophos.dll -Ss
%IP_OR_DNS_NAME_OF_YOUR_HTTP_SERVER%
Linux:
ukaip_i686 ./rel_path_to_avplugs/avir_sophos.so -Ss
%IP_OR_DNS_NAME_OF_YOUR_HTTP_SERVER%

Create a local folder for Sophos mirror on your server.


Install Kerio Sophos Update Kit(ViTYAN) package into this folder.
Run the script sync_mirror.bat(Windows)/sync_mirror_lin.sh(Linux - perform "chmod
0555 ./sync_mirror_lin.sh" before excuting) and wait for mirror to become fully
synced.
Create file ukerav.php on the root of your Web server(Not the root of hosting
server isteslf) with the following content(Preferably with UNIX style line endings
- LF):
IDEdir=kersophos/ides
VDBdir=kersophos/vdbs
APIdir=kersophos/apis
Create a Virtual Folder "kersophos" on your WebServer which should point to
physical location of mirror folder created above.
Execute sync_mirror scripts from time to time to update your local mirror(Via
Cron on Linux or Task Sheduler on Windows - Dont forget to set working folder to
mirror folder for the task).
Kerio will update it's Sophos automatically and you don't even need to touch it.

7) If you attempt to install WinRoute and you need functional WebFilter then:
5a)Stop WinRoute service.
5b)Patch winroute.exe/winroute using UKAIP with --force-trial-for-plugins-with-
license --enable-kerio-to-esoft-redirect parameters.
5b3)In patching stage [12] you'll be asked to fullfill the E-Soft serial number.
You can find this number in KWR topic of Warez section in Ru-Board forum.
Please note that this number constantly changes due to bans coming from
Kerio on them.
5b4)UKAIP will continue with patching and will generate getkey.php file in it's
own folder.
NOTE: Use --use-specific-path-to-store-php-files=PATH parameter to specify
custom path to store getkey.php file in.
5b5)Put this file on your local Web server(With PHP enabled) in /kwfp0wnz/
virtual folder(Virtual folder of Web Server).
NOTE: You can change the URL(default http://localhost/kwfp0wnz/) using
--enable-advanced-mode or direct --enable-custom-license-server-for-webfilter=URL
switch with UKAIP
If you want to use HTTPS(SSL) server then YOU must use CA signed
certificate on it(You've been warned).
5c)Patch avir_mcafee.dll/avir_mcafee.so with UKAIP.
5d)Start WinRoute service.
5e)If you've enter correct E-Soft license data then your WebFilter will be active
stright after service starting.
5f)Give Kerio WebFilter extension a try :)

8)License installation.
Kerio: Put license.key file to \license\ subfolder in Kerio's installation
directory
IceWarp: Put license.key to \config\ subfolder in Kerio's installation directory
NOTE to Linux users:
LI1)Stop IceWarp daemon -> /etc/rc.d/init.d/icewarp stop
LI2)Put generated license file to %install_folder%/config/ named as
license.key
By default this path will be: /opt/icewarp/config/
LI3)Start IceWarp daemon -> /etc/rc.d/init.d/icewarp start
To test succesfull license installation do the following:
LI4)In IceWarps installation folder execute: ./tool display system
c_license_xml
If you see: c_license_xml=
then license has NOT been propertly recognized
If you see c_license_xml= A_LOOOOOT_OF_TEXT
then you've done it babee :)

9) Yo are done babee :)

NOTES:

Use -o option to prevent UKP from changing "source" file(All changes will be stored
to a new file):

ukaip86 winroute.exe.ORG -o winroute.exe


File winroute.exe.ORG will be used as R/O Source while the changes will be saved to
a new winroute.exe file.

MULTI-FILE Patching:
Cmd:
ukaip86 winroute.exe avirplugins\avir_mcafee.dll
Will patch both files during one execution :)

More complicated (Using -o):


ukaip86 winroute.ORG -o winroute.exe avira_backup\makaka.dll -o
avirplugins\avir_mcafee.dll

And yet one another thing:

Special --enable-quit-without-waiting option can be added if you wanna make some


UKAIP automation(Exam: Creating a batch file) so UKAIP will not wait for your
Keypress before terminating.

Cheerz ,ViTYAN :)

You might also like