topic Re: R77.30 Management Console cannot install Jumbo Hotfix Accumulator in General Topics

R77.30 Management Console cannot install Jumbo Hotfix Accumulator

whoa — Wed, 01 Mar 2023 15:20:12 GMT

I have an old Checkpoint implementation that for years I have on again/off again tried to upgrade to R80. This is more of a lab situation but there are production aspects that make this desirable for upgrade.

I cannot use CPUSE (due network architecture) and can only do this locally. I have downloaded the R77.30 jumbo hotfix accumulator and was able to successfully upgrade the firewall (that is also running R77.30). The issues with the SMS is that the installer does not have the import function:

mgmt> installer
download - Download a selected package
install - Install a selected package
restore_policy - Restore the default update policy
start - Start the installer service
stop - Stop the installer service
uninstall - Uninstall a selected package
upgrade - Upgrade a selected package

and when I try to upload the package to SmartUpdate I receive this:

File was successfully transferred to the Security Management Server Mar 01, 2023 08:29:27
Adding package to the repository Mar 01, 2023 08:29:27
Getting the package type... Mar 01, 2023 08:30:32
Extracting the package files... Mar 01, 2023 08:30:32
Unable to detect the type of the package. Check that the file is a valid package. Mar 01, 2023 08:30:32

So Im not sure why the Firewall had the import functionality but it did and the update was not an issue. Any ideas would be greatly appreciated.

Re: R77.30 Management Console cannot install Jumbo Hotfix Accumulator

whoa — Wed, 01 Mar 2023 18:29:16 GMT

The R77.30 Jumbo HotFix Accumulator is located here:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162

Re: R77.30 Management Console cannot install Jumbo Hotfix Accumulator

PhoneBoy — Wed, 01 Mar 2023 18:42:32 GMT

SmartUpdate cannot be used to install CPUSE packages.

Try updating the Deployment Agent manually from: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92449&partition=Basic&product=Multi-Domain
See if the "installer import" command comes back after that.

Re: R77.30 Management Console cannot install Jumbo Hotfix Accumulator

whoa — Wed, 01 Mar 2023 20:05:04 GMT

I have been reluctant to do that since it says the versions are for r80.10+, but since you are saying give it a go - I will give it a go!

Re: R77.30 Management Console cannot install Jumbo Hotfix Accumulator

the_rock — Wed, 01 Mar 2023 20:09:32 GMT

I hate to say this, but I dont think you have too many other options : - )

Re: R77.30 Management Console cannot install Jumbo Hotfix Accumulator

whoa — Wed, 01 Mar 2023 20:55:05 GMT

Indeed. The summary of what I had to do is it did work. The longer story is I had to SCP the file onto the box; untar it (which gave me an .rpm file); installed the rpm by forcing the installation (several conflicts); and then reboot the box. After all of that, I now have the import option!

I have SCP'd the R77.30 Jumbo HF Accumulator to the box, imported it and its now installing it. Every other attempt through any other means has failed. With that said I am very optimistic this will work because it worked on the Firewall.

Re: R77.30 Management Console cannot install Jumbo Hotfix Accumulator

PhoneBoy — Wed, 01 Mar 2023 21:22:11 GMT

Thanks for confirming.

Just to make a succinct answer, any version upgrade requires the latest version of Deployment Agent to be installed beforehand (see sk92449).
If the version you're upgrading from is particularly old (and especially if "installer import" isn't a valid command), the Deployment Agent needs to be manually installed the following way:

Unpack the *.tgz until you have the CPda-00-00.i386.rpm
Transfer the CPda-00-00.i386.rpm to the Gaia machine
Install the updated CPUSE Agent from the Expert mode:
[Expert@Host]# rpm -Uhv --force CPda-00-00.i386.rpm
Kill all running Clish daemons (they will be restarted automatically):
[Expert@Host]# killall -v clish clishd
Restart the ConfD daemon:
[Expert@Host]# tellpm process:confd
[Expert@Host]# tellpm process:confd t
Start the CPUSE Agent manually:
[Expert@Host]# $DADIR/bin/dastart

This should not require a reboot.

Re: R77.30 Management Console cannot install Jumbo Hotfix Accumulator

whoa — Wed, 01 Mar 2023 21:25:57 GMT

It did work and its now installed and rebooted. I did a 'show installer packages all' and I see the Jumbo HF Accumulator installed.

So with all of that said I now want to upgrade to R80.40. According to my research I should be able to do that upgrade. My intention is to do a fresh installation. So I have through GAIA done a system backup and downloaded that file. I should be able to install the R80.40 GAIA installation and then restore the backup file through GAIA, reboot and I should be at R80.40 correct?

Re: R77.30 Management Console cannot install Jumbo Hotfix Accumulator

PhoneBoy — Thu, 02 Mar 2023 00:17:39 GMT

Gaia backup and restore only works to the same version/JHF level.
If you try it, you may get something like this: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk105883

The correct method is to do an Advanced Upgrade.
This requires downloading the R80.40 migration tools and performing a migrate export from the management station.
You will then use the migrate import command to import this configuration to the freshly installed R80.40 system (should be done from ISO).
If you intend to use the same hardware as your existing R77.30 management, I recommend testing this process in a virtual machine first to ensure there are no issues.

Note this does not migrate Gaia OS settings, this can be done using the output of "show configuration" or similar.