topic MDS Upgrade Failed (r81.10 t0 81.20) in General Topics

MDS Upgrade Failed (r81.10 t0 81.20)

Andrey_Gl — Tue, 31 Oct 2023 15:03:10 GMT

Hello! I am updating MDS according to the instructions - the update check is successful. The update is taking a long time but is progressing successfully. However, after the update, there is a reboot and MDS remains on the old version. There is very little information in the DA logs (which I have uploaded). Can someone please advise on how to troubleshoot this problem?

In the file

/opt/CPInstLog/install_Major_R81.20_ivory_main_T631_7.logDir/logsFromPreVersion/migrate-2023.10
I see
many errors like
/opt/CPupgrade-tools-R81.20/bin//update_inspect_files -mode export -path /opt/CPSFWR77CMP-R81.10/lib: No such file or directory.

Re: MDS Upgrade Failed (r81.10 t0 81.20)

Andrey_Gl — Tue, 31 Oct 2023 15:02:58 GMT

In the file

Re: MDS Upgrade Failed (r81.10 t0 81.20)

PhoneBoy — Wed, 01 Nov 2023 00:38:58 GMT

Have you opened a TAC case? https://help.checkpoint.com

Re: MDS Upgrade Failed (r81.10 t0 81.20)

the_rock — Wed, 01 Nov 2023 02:13:07 GMT

This is where it failed, but what this means exactly,not sure...

[2023-10-12 - 17:54:17][9006 9006]:Continue major upgrade process from the new partition after reboot
[2023-10-12 - 17:54:17][9006 9006]:No matching scripts to batch-id, skipping user-scripts.
[2023-10-12 - 17:58:03][9006 9006]:Management upgrade post-boot actions failed. Reverting back.
[2023-10-12 - 17:58:03][9006 9006][HIGH DALOG_NORMAL]: ===>>> action id="53" has completed <<<===
[2023-10-12 - 17:58:03][9006 9006]:Reverting installation of full image Check_Point_R81.20_T631_Fresh_Install_and_Upgrade.tgz to backup partition lv_AutoSnap121724

Re: MDS Upgrade Failed (r81.10 t0 81.20)

Boaz_Orshav — Wed, 01 Nov 2023 05:30:49 GMT

The failure is MSG_MAJOR_ERROR_MDS_SETUP which probably indicates an issue with importing the DB to the new version.

You should either contact TAC or try to look at the log "/opt/CPInstlog/install_XXX" of the relevant package and look for the call for mds setup. The mds setup call will specify also to which log the specific call is directed (probably something like /var/log/XXX_detailed_XXX)

Re: MDS Upgrade Failed (r81.10 t0 81.20)

Andrey_Gl — Wed, 01 Nov 2023 08:56:38 GMT

Additionally, I have found all the logs and they suggest a problem with CA:
Cannot get SIC key holder.CPD will not trigger the renewal of SIC certificate
or
Running /opt/CPmds-R81.20/bin/fw kill cpca
Failed to initialize CA.

Re: MDS Upgrade Failed (r81.10 t0 81.20)

PhoneBoy — Wed, 01 Nov 2023 18:00:44 GMT

That definitely suggests getting TAC involved is a good idea.
https://help.checkpoint.com