topic Re: Reset SIC Log Server in General Topics

Reset SIC Log Server

sushantjoshi — Thu, 20 Jun 2024 14:17:05 GMT

How can we reset SIC for CP Log Servers ? I have tried cpconfig and I simply cannot find the option as well as tried it using cli

Any idea ?

Re: Reset SIC Log Server

796570686578 — Thu, 20 Jun 2024 14:22:43 GMT

Hmm, are you talking about the Smart Event Server? I just checked on a Smart Event Server R81.20 and there I have the option to change SIC in cpconfig. It's named "Secure Internal Communication".

Best regards

Re: Reset SIC Log Server

sushantjoshi — Thu, 20 Jun 2024 14:44:11 GMT

Nope , I am talking about a dedicate log server not an Smart Event

Re: Reset SIC Log Server

PhoneBoy — Thu, 20 Jun 2024 19:55:48 GMT

The command looks like it's cp_conf init sicpassword.
Whether it works from a log server or not is a different question
Reference: https://support.checkpoint.com/results/sk/sk86521

Re: Reset SIC Log Server

sushantjoshi — Fri, 21 Jun 2024 02:56:24 GMT

@PhoneBoy I have tried that doesn't work sadly.

@the_rock @PhoneBoy any more ideas ?

Re: Reset SIC Log Server

emmap — Fri, 21 Jun 2024 03:29:45 GMT

I don't have access to one to check but I'm pretty sure that if you have built the server in the FTW as a log server then it should be an option in cpconfig. Are you sure the server was built as a log server and not a primary management server?

Re: Reset SIC Log Server

the_rock — Fri, 21 Jun 2024 08:10:42 GMT

I see the point @emmap brought up, makes total sense.

Re: Reset SIC Log Server

PhoneBoy — Fri, 21 Jun 2024 15:39:51 GMT

I suspect @emmap is correct that the system was not initially installed as a Log Server.
Can you provide what it says in $CPDIR/register/HKLM_registry.data for the lines LogServer and Management?

Re: Reset SIC Log Server

sushantjoshi — Sun, 23 Jun 2024 05:22:09 GMT

HKLM_registry.data is not present in both of my LogServer and Management Server.

This is in production and all of my VS were forwarding traffic to these log servers.

There is one more active backup log server which doesn't have option to reset SIC as well and also does not have HKLM_registry.data file

Re: Reset SIC Log Server

PhoneBoy — Mon, 24 Jun 2024 15:24:53 GMT

Your best bet here is a TAC case: https://help.checkpoint.com

Re: Reset SIC Log Server

sushantjoshi — Thu, 27 Jun 2024 02:01:02 GMT

@PhoneBoy Sorry for the trouble.

I raised a case and all we did was a halt to the machine and started it and could see the cpconfig after that.

Thank You !

Re: Reset SIC Log Server

the_rock — Thu, 27 Jun 2024 03:08:25 GMT

Good job!