topic Somehow stuck with FDE. in Endpoint

Somehow stuck with FDE.

darnitsa1 — Wed, 04 Sep 2024 09:55:53 GMT

Hello!

Have a little problem. I am an admin of an organisation, we use Checkpoint Harmony, but we don't use FDE blade and never did. Still, I somehow have around 10 client computers, which fail to update to newer versions of Checkpoint Endpoint because "removing fde during installation is not allowed". FDE is disabled, and it never was enabled. So, I would love some way to uninstall old client, with maybe some additional key to use with installation file, or some registry fix. Please help, thank you.

Re: Somehow stuck with FDE.

PhoneBoy — Wed, 04 Sep 2024 17:22:08 GMT

The client will have to be manually uninstalled with the uninstall password.
If you're having trouble doing that, suggest consulting with TAC: https://help.checkpoint.com

Re: Somehow stuck with FDE.

darnitsa1 — Thu, 05 Sep 2024 06:56:28 GMT

It never gets to password prompt. Hangs on "removing fde during installation is not allowed" and that's pretty much it.

Re: Somehow stuck with FDE.

PhoneBoy — Thu, 05 Sep 2024 21:30:50 GMT

TAC will have to assist with this.

Re: Somehow stuck with FDE.

asafebelo — Wed, 11 Feb 2026 18:46:51 GMT

Hello, everyone.
Yesterday I had a same problem, and I solved with this procedures:

I noted that if agent version in software deployment was upgraded, and I too disable Full Disk Encryption for does two tasks at the same time, the messages as "Removing FDE during upgrade is not allowed" and Deployment "Retrying" are displayed. Follow below:

Removing FDE during upgrade is not allowed

Deployment Status - Retrying
Noted the same package version for two assets, one with Deployment Status - Complete and other with Retrying.

For solved, I did:

Previously of update your clients, disable Full Disk Encryption blade in Software Deployment and push a "Repair Client".
Afterward Full Disk Encryption is disable, upgrade your client in Software Deployment

Obs: If only a little assets work with this issue, you can create a virtual group and a Software Deployment rule for only disable Full Disk Encryption. After, you can change for production software deployment and update.

If you have any questions, I'm available.
Asafe 😄