- CheckMates
- :
- Products
- :
- CloudMates Products
- :
- Cloud Network Security
- :
- Discussion
- :
- Why Autoprov-cfg is failing.
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Why Autoprov-cfg is failing.
Hi Team,
I am trying to run the check point VMSS however I am getting below error on all version of Check point MGMT server. I started testing with R80.10 i faced the issue hence I tried R80.20 too however I am still facing same issue.
[Expert@mgmtserver:0]# autoprov-cfg -h
failed to run /opt/CPsuite-R80.20/fw1/scripts/protect.sh: 1
/opt/CPsuite-R80.20/fw1/scripts/protect.sh: failed to find '__MDS_FIX__'
[Expert@mgmtserver:0]#
Also let me know about the """-tn "<Configuration-Template-Name>" """. I am not sure where would i get this template name? Is it some sort of template which i need to create or we have a predefined ARM template which we need to use. If it is a ARM then please let me know where should i find it.
autoprov-cfg init Azure -mn "<Management-Name>" -tn "<Configuration-Template-Name>" -otp "<SIC-key>" -ver <Version> -po "<Policy-Name>" -cn "<Controller-Name>" -sb "<Azure-Subscription>" -at "<Active-Directory-Tenant-ID>" -aci "<Client-ID>" -acs "<Client-Secret>"
Example:
Regards,
Ashutosh Chauhan
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi
See here: CloudGuard Network for Azure VMSS R80.10 and Higher Administration Guide (This link was edited by Check Point on 19 Dec 2021)
This guide has a section "Downloading and Installing the Latest Auto Provisioning Version" where you can find a link to download a new version of the autoprovision package (autoprovision-addon.tgz). If you install that one, it runs just fine.
Grtz
Philip
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yah I already tried that several times. It fails. They write don't change syntax and it does not work with that syntex.
[Expert@servermanager:0]# chmod 777 autoprovision-addon.tgz
[Expert@servermanager:0]#
[Expert@servermanager:0]#
[Expert@servermanager:0]# tar -zxfC autoprovision-addon.tgz /
tar: C: Cannot open: No such file or directory
tar: Error is not recoverable: exiting now
tar: Child returned status 2
tar: autoprovision-addon.tgz: Not found in archive
tar: /: Not found in archive
tar: Error exit delayed from previous errors
[Expert@servermanager:0]#
This is what I get end of the day
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Well this syntax did not work for me. i tried below one and it started working.
[Expert@servermanager:0]#
[Expert@servermanager:0]# tar C /etc/audit -zxf autoprovision-addon.tgz
[Expert@servermanager:0]#
[Expert@servermanager:0]#
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
However still I am confused about the Template where would I get that part.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
when you buy your VMSS in the marketplace, you have to define a name for the template. This name has to be the same name that you are using later in ... -tn "template_name" ...
You can call it "my_template" or "what_a_sunny_day", the value only needs to match on both sides.
FYI, you'll find the template name later in the Azure tags from this VMSS.
Carsten
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
There is a small typo in the documentation. Do it without the dash and it will work, like this:
tar zxfC autoprovision-addon.tgz /
-mn "<
Management-Name>" -tn "<
Configuration-Template-Name>" -otp "<
SIC-key>"
must match what is used when you deploy(ed) the Check Point VMSS. This is documented in CloudGuard Network for Azure VMSS R80.10 and Higher Administration Guide(This link was edited by Check Point on 19 Dec 2021) - step 3 and 4.
Arnfinn
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
also , we don't use that installation of CME anymore. use the one in this SK:
this will have the latest version.
![](/skins/images/A53DAF99EDBAFE11A1FC6E62F510C235/responsive_peak/images/icon_anonymous_message.png)