topic Re: Upgrading secondary logging server to R82 in Firewall and Security Management

Upgrading secondary logging server to R82

cdooer — Wed, 28 Jan 2026 13:46:17 GMT

Hey everyone. We upgraded our management server from R81.20 to R82 Take 44 several weeks back, and are now planning on doing our secondary logging server. The verify is failing with the attached error message. I'm reading that the primary management server can't have any jumbos installed, but it's got Take 44 which is why it's failing. The upgrade from R81 was done in one fell swoop (R82 with take 44), so how would one uninstall the take in order to get the secondary logging server upgraded?

Re: Upgrading secondary logging server to R82

the_rock — Tue, 27 Jan 2026 20:52:23 GMT

Did you make sure based on below screnshow you sent that primary is indeed active and secondary is standby?

Re: Upgrading secondary logging server to R82

cdooer — Tue, 27 Jan 2026 21:01:26 GMT

It is indeed. This isn't even a secondary management server, it's only purpose is for logging.

Re: Upgrading secondary logging server to R82

the_rock — Tue, 27 Jan 2026 21:03:54 GMT

Fair enough. What do you get with cpstat mg command?

[Expert@CP-MANAGEMENT:0]# cpstat mg

Product Name: Check Point Security Management Server
Major version: 6
Minor version: 0
Build number: 998000009
Is started: 1
Active status: active
ICA status: 0
Status: The Internal Certificate Authority (ICA) certificate is valid until Jan 19 03:14:07 2038 GMT

[Expert@CP-MANAGEMENT:0]#

Re: Upgrading secondary logging server to R82

the_rock — Tue, 27 Jan 2026 21:06:58 GMT

This too?

cpprod_util FwIsPrimary

Re: Upgrading secondary logging server to R82

cdooer — Tue, 27 Jan 2026 21:14:54 GMT

From the logging server, or the management server?

Re: Upgrading secondary logging server to R82

cdooer — Tue, 27 Jan 2026 21:19:07 GMT

Logging
Product Name: Check Point Security Management Server
Major version: 6
Minor version: 0
Build number: 997000016
Is started: 0
Active status: active
ICA status: 0
Status: The Internal Certificate Authority (ICA) certificate is valid until Jan 19 03:14:07 2038 GMT

Management
Product Name: Check Point Security Management Server
Major version: 6
Minor version: 0
Build number: 998000008
Is started: 1
Active status: active
ICA status: 0
Status: The Internal Certificate Authority (ICA) certificate is valid until Jan 19 03:14:07 2038 GMT

Connected clients
------------------------------------------------------

Logging
cpprod_util FwIsPrimary
0

Management
cpprod_util FwIsPrimary
1

Re: Upgrading secondary logging server to R82

the_rock — Tue, 27 Jan 2026 21:23:04 GMT

Looks right to me. I wonder if its because logging server shows active...

Re: Upgrading secondary logging server to R82

cdooer — Tue, 27 Jan 2026 21:51:41 GMT

You might be onto something. Ran the following command on logging;

cpprod_util FwSetActiveManagement 0

Now shows standby, and the verify shows it's good for clean install or upgrade. I'll proceed with the upgrade and report back.

Re: Upgrading secondary logging server to R82

the_rock — Tue, 27 Jan 2026 22:11:56 GMT

Excellent! Great job! Honestly, I just said that based on pure logic. There are lots smarter people than I on here 🙂

Re: Upgrading secondary logging server to R82

CheckPointerXL — Tue, 27 Jan 2026 22:27:14 GMT

this is something that i warned just yesterday https://community.checkpoint.com/t5/Management/Upgrade-Experience-Log-Server-amp-Management-Server-from-81-20/m-p/268639/highlight/true#M44252

check point needs to update documentation urgently, a lot of admins are failing in this

Re: Upgrading secondary logging server to R82

the_rock — Tue, 27 Jan 2026 22:27:53 GMT

I do recall you mentioning it.

Re: Upgrading secondary logging server to R82

cdooer — Wed, 28 Jan 2026 00:45:20 GMT

My upgrade completed successfully. I do appreciate the help.

Re: Upgrading secondary logging server to R82

the_rock — Wed, 28 Jan 2026 00:47:40 GMT

Excellent...very happy it worked. We always find a solution on community.