Error "You cannot activate both the Firewall and Endpoint Policy Management on the same sever"

[PavelSpiridonov]

Hi!
I'm deploying a new Endpoint Management Server R82.10.
The licenses installed successfully and haven't expired.
However, I can't launch the SmartEndpoint tool because of this error.
Even though the Firewall is disabled in the settings.

[Lesley]

You sure you picked MGMT during first time wizard? What does cpstat mg show?

f in the Installation Type window, you selected Security Gateway and/or Security Management, these options appear:

Field	Description
Security Gateway	Select this option to install: A single Security Gateway. A Cluster Lesley_0-1781379492466.gif  Member. A Standalone.
Security Management	Select this option to install: A Security Management Server, including Management High Availability. An Endpoint Security Management Server. An Endpoint Policy Server. CloudGuard Controller. A dedicated single Log Server. A dedicated single SmartEvent Server. A Standalone.

[PavelSpiridonov]

gw-77d954> cpstat mg

Product Name: Check Point Security Management Server
Major version: 6
Minor version: 0
Build number: 999000003
Is started: 1
Active status: active
ICA status: 0
Status: The Internal Certificate Authority (ICA) certificate is valid until Jan 19 03:14:07 2038 GMT

Connected clients
----------------------------------------------
|Client type|Administrator|Host|Database lock|
----------------------------------------------
----------------------------------------------

It looks like the wrong option was selected during the first wizard. Is it possible to reset the config and perform the first wizard without reinstalling?

[Tal_Paz-Fridman]

cpstat mg shows it is a Management Server but might also be a Security Gateway.

Could you run fw ver -k on the machine?

Thanks

[PavelSpiridonov]

[Expert@gw-77d954:0]# fw ver -k
This is Check Point's software version R82.10 - Build 010
kernel: R82.10 - Build 010

[Tal_Paz-Fridman]

This means this is a Standalone machine - consisting of a Security Management and a Security Gateway.

This configuration does not support SmartEndpoint.

You would need to install the machine again as a Security Management Server or follow a procedure to convert it to a Management Server.

[PavelSpiridonov]

Excellent! Could you tell me the command to start the convert procedure?

[Lesley · Accepted solution]

https://support.checkpoint.com/results/sk/sk71000

Section:

Procedure for Running the First Time Configuration Wizard Again

Or CPconfig

[Lesley]

Reinstall is more quick and more safer option