topic Re: Upgrade Harmony Endpoint version by downloading MSI from a shared folder in Endpoint

Upgrade Harmony Endpoint version by downloading MSI from a shared folder

Eve_Z — Thu, 22 Aug 2024 20:38:31 GMT

Hello,

We want to upgrade Harmony Endpoint from 87.52 to 88.32, but we want the endpoints to download MSI from a shared folder instead of downloading from Internet, by using local deployment options: https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Topics-HEP/Installation_and_Upgrade_Settings.htm

We configured software deployment policy with the required blades. We also generated the package at "Export Package > Endpoint Client" with the same blades and converted to MSI. This MSI file was placed in a shared folder and configured the path in Client Settings.

When we upgrade the client, cpda.log file shows that the MSI is being downloaded from shared folder as expected, but it generates error 28151: Verification of Installation Package failed. The error is also shown at the portal.

How should MSI file be generated to avoid this error?

Any help is appreciated.

Regards.

Re: Upgrade Harmony Endpoint version by downloading MSI from a shared folder

PhoneBoy — Thu, 22 Aug 2024 23:34:50 GMT

See if this applies: https://support.checkpoint.com/results/sk/sk173487

Re: Upgrade Harmony Endpoint version by downloading MSI from a shared folder

JonnyRabinowitz — Fri, 23 Aug 2024 11:25:18 GMT

There was a thread with recently updated information on this topic that may be helpful here

https://community.checkpoint.com/t5/Endpoint/How-to-get-msi-file-from-EndpointSetup-exe/m-p/143998

Re: Upgrade Harmony Endpoint version by downloading MSI from a shared folder

Eve_Z — Fri, 23 Aug 2024 21:23:13 GMT

Hello all,

After verifying that my computer has the certificates according to https://support.checkpoint.com/results/sk/sk173487 I generated MSI file with Initial Client following https://community.checkpoint.com/t5/Endpoint/How-to-get-msi-file-from-EndpointSetup-exe/m-p/143998

I'm getting a different error: Package does not suits SD. After this, my client starts downloading the package from the Internet.

EPS.msi does not suits SD

Regards.

Re: Upgrade Harmony Endpoint version by downloading MSI from a shared folder

PhoneBoy — Fri, 23 Aug 2024 22:08:49 GMT

The Initial Client can only be run to install Harmony Endpoint the first time.
For upgrading existing systems, you need to create an MSI that includes (at minimum) the same blades as installed on your existing clients.
You can see this in the logs (.e.g "Package does not support needed blades").

Re: Upgrade Harmony Endpoint version by downloading MSI from a shared folder

Eve_Z — Fri, 30 Aug 2024 21:02:52 GMT

When I create the MSI with the same blades, I get the following error: Verification of installation package failed.

The same error is shown in web portal.

Regards.

Re: Upgrade Harmony Endpoint version by downloading MSI from a shared folder

PhoneBoy — Tue, 03 Sep 2024 02:31:51 GMT

The errors suggest a license issue of some sort.
Suggest involving the TAC: https://help.checkpoint.com

Re: Upgrade Harmony Endpoint version by downloading MSI from a shared folder

G_W_Albrecht — Tue, 03 Sep 2024 07:07:14 GMT

I would rather push the update from EPSS: https://support.checkpoint.com/results/sk/sk154072