E89.26 Client Requires .NET Core Windows Runtime

[J_B]

Looking to upgrade our clients from E88.60 to E89.26 and we see the following errors in the install logs.  

MSI (s) (F4!F0) [16:44:06:758]: Product: Check Point Endpoint Security -- Error 27592.The following products need to be installed in order to continue installation of selected blades: .NET Core Windows Runtime, ASP.NET Core Runtime. Installation started.

Error 27592.The following products need to be installed in order to continue installation of selected blades: .NET Core Windows Runtime, ASP.NET Core Runtime. Installation started.

We're installing it silently via SCCM and would have thought that .Net Core would have also been installed with the Checkpoint msi if it is required?

When we run it manually we get prompted that Microsoft .Net Core is required.

Is this a recent requirement in the newer clients?

Thanks

[jorgeluiznim]

Hi,

I ran into something similar, so here is what I found. Your log already gives the main clue: Error 27592 says the installer needs .NET Core Windows Runtime and ASP.NET Core Runtime for the selected blades. This is not the classic .NET Framework requirement we have had for years, it is the newer .NET runtime.

The reason it works differently when you run it by hand is the installation wizard. When you launch the package manually, the wizard detects the missing prerequisite and offers to install it (that is the "Install Prerequisites" screen you saw). A silent MSI install through SCCM does not go through the wizard, so it stops with the error instead.

Check Point describes the same behavior for .NET Framework in sk182480: with the wizard, the .NET installation and reboot are handled for you; without the wizard, the install exits with an error and has to be run again. The same sk also mentions that if the exported package does not include the .NET installer, the installation fails.

What I would try with SCCM:

1. Package the .NET Desktop Runtime and the ASP.NET Core Runtime as separate SCCM applications and add them as dependencies of the Harmony Endpoint application, so they are installed before the MSI runs.
2. Test on a pilot machine first to confirm which runtime version E89.26 expects. I could not find the exact version documented yet, so it is worth confirming with TAC or checking the install log after installing the runtime.
3. When you export the package, leave "Minimize package size" unchecked so the dependencies are bundled as much as possible.
   

If anyone from Check Point can confirm the exact runtime version required from E89.26 onwards, that would help a lot of people planning the upgrade from E88.x.

Hope this helps!