topic Re: NEW CLUSTER VSX - MDS 81.10 in General Topics

NEW CLUSTER VSX - MDS 81.10

FabioLima1 — Fri, 09 Feb 2024 00:54:11 GMT

Hello! Good night everybody.

I need to upload a new vsx cluster in a production environment that has several domains, in one of these domains I need to upload a new cluster. However, the customer does not remember the password they used for the SIC on the gateways that are in production. It will be possible to reset this SIC without impacting the environment. I would be very grateful if anyone could send me a procedure for this. Thanks.

Re: NEW CLUSTER VSX - MDS 81.10

the_rock — Fri, 09 Feb 2024 03:18:54 GMT

https://support.checkpoint.com/results/sk/sk86521

There is link at the bottom how to do this on vsx with little downtime, but nothing comes up when I try open it : - (

Andy

Re: NEW CLUSTER VSX - MDS 81.10

the_rock — Fri, 09 Feb 2024 03:20:07 GMT

This also may help

https://support.checkpoint.com/results/sk/sk34098

Re: NEW CLUSTER VSX - MDS 81.10

emmap — Fri, 09 Feb 2024 06:25:07 GMT

The SIC keys are one-time-use keys that are discarded when the gateways are connected to the management servers. It doesn't matter what any existing gateways used as a SIC key, if they are connected up that key is meaningless. New SIC keys are required every time you connect a new gateway to the management server, you configure it on the gateway when doing the first time wizard (or afterwards in the cpconfig menu) and you input the same key in SmartConsole when connecting up that gateway.

Re: NEW CLUSTER VSX - MDS 81.10

the_rock — Fri, 09 Feb 2024 12:17:13 GMT

@FabioLima1 Btw, I think I totally misunderstood your query and @emmap is absolutely correct. SIC key is one time encrypted key that never gets stored anywhere, so you can use even 1234 or abcd, its totally fine. I thought you were more wondering if there is a way to reset SIC without having to do cpstop: cpstart. If that was your question, then I suppose my SKs would be relevant.

Best,

Andy

Re: NEW CLUSTER VSX - MDS 81.10

FabioLima1 — Fri, 09 Feb 2024 18:47:01 GMT

thanks.