topic Re: Hotfix package unavailble - cannot restore in Firewall and Security Management

Hotfix package unavailble - cannot restore

F1uid3pawn — Sat, 01 Jun 2024 04:51:02 GMT

I am trying to restore a backup of R81.20 management server.

It requires CheckPoint#CPUpdates#All#6.0#5#4#BUNDLE_R81_20_JUMBO_HF_MAIN_SC#26.

We have installed R81.20 JHF Take 26 but this does not satisfy the requirement. What does "_SC" mean in the bundle name and where can this bundle be found?

Re: Hotfix package unavailble - cannot restore

Duane_Toler — Sun, 02 Jun 2024 14:48:56 GMT

That is the SmartConsole package that is part of the Jumbo HFA that was installed. Looks like the original server was installed directly with Jumbo HFA 26 and that included the SmartConsole web page at the time. You can check with TAC to confirm, however.

If you're fresh installing to a new host/VM, then you can download the Blink installer with JHF 26 and write that to a USB stick with ISOmorphic, install the server, reboot, then try to restore your backup.

Re: Hotfix package unavailble - cannot restore

the_rock — Sun, 02 Jun 2024 19:32:27 GMT

You can do search on it, but its 100% in /var/log dir, cant recall now exactly where.

Re: Hotfix package unavailble - cannot restore

F1uid3pawn — Wed, 05 Jun 2024 14:26:32 GMT

The files are typically in /opt/CPda/backup/CheckPoint#CPUpdates#All#6.0#5#4#BUNDLE_R81_20_JUMBO_HF_MAIN_SC#26

But as we are restoring to a clean Management Server we have to add all the hotfixes as they were installed on the original unit, where the backup was taken.

I have asked TAC for help to get the correct HOTFIX file.

Re: Hotfix package unavailble - cannot restore

F1uid3pawn — Wed, 05 Jun 2024 14:28:48 GMT

That is exactly what we tried - but when doing the restore it fails with the message, that the HOTFIX (CheckPoint#CPUpdates#All#6.0#5#4#BUNDLE_R81_20_JUMBO_HF_MAIN_SC#26) must be installed prior to restoring.

I'm quite sure that the "_SC" ending is what causes the misery.

Re: Hotfix package unavailble - cannot restore

the_rock — Wed, 05 Jun 2024 14:31:17 GMT

I hope this command would fix that.

Andy

https://support.checkpoint.com/results/sk/sk105883

Connect to the command line on Gaia OS.
Log in to the Expert mode.
Configure the required setting in the Gaia database with this command:

dbset backup:override_hfs t
Restore the Gaia backup.

Re: Hotfix package unavailble - cannot restore

Duane_Toler — Wed, 05 Jun 2024 14:39:04 GMT

(EDIT for JHF 26 version; the original was the JHF 54 version)

Found it. Here's the package:

[Expert@cpmgmt01:0]# da_cli packages_info |jq -r '.packages[]|select(.packageKey|contains("BUNDLE_R81_20_JUMBO_HF_MAIN_SC"))' { "availableFrom": "2024-04-07 00:00:00", "blocksUninstall": false, "broughtVersion": "6.0_5_4", "build": 54, "category": "capability", "description": "SmartConsole R81.20 version is compatible with any R81.20 Security Management server. SmartConsole automatically updates to the latest Build, as long as you have an Internet connection. The update is rolled out gradually and should be completed within 1 week. It is not necessary to download and install newer builds manually", "displayName": "R81.20 SmartConsole Build 653", "fileSize": "436179034", "filename": "Check_Point_SmartConsole_R81_20_jumbo_HF_B653_Win.tgz", "hasMetadata": true, "htmlReportExists": false, "installCritical": false, "isBlinkImage": false, "isHfa": true, "isInRepository": false, "md5": "76e12ddf2ac8ea2657057b61647bc76a", "order": 0, "packageKey": "CheckPoint#CPUpdates#All#6.0#5#4#BUNDLE_R81_20_JUMBO_HF_MAIN_SC#54", "packageOrigin": "Download Center", "packageType": "Wrapper", "product": "CPUpdates", "requiresReboot": false, "state": "Available for download", "version": "6.0" }

But you need the JHF 26 version which was Build 646. You need the package named Check_Point_SmartConsole_R81_20_jumbo_HF_B646_Win.tgz and you should be ok:

From Expert mode:

da_cli add_private_package package=Check_Point_SmartConsole_R81_20_jumbo_HF_B646_Win.tgz da_cli download package=Check_Point_SmartConsole_R81_20_jumbo_HF_B646_Win.tgz da_cli verify package=package=Check_Point_SmartConsole_R81_20_jumbo_HF_B646_Win.tgz da_cli install package=Check_Point_SmartConsole_R81_20_jumbo_HF_B646_Win.tgz reboot_delay=60