GAiA 80.20 Endpoint Management server not starting

[Ilya_Avetisyan]

Hello Colleagues,

I faced with strange problem when I activated Endpoint Management blade on our Management Server. When I'm starting Endpoint Management GUI it's stuck with 'Endpoint Management Server is starting...' message and finally says 'Endpoint Management Server not started'.

uepm_start command shows that everything is OK

UEPM: Log conversion daemon has started
UEPM: Starting in Active EPS configuration...
cpwd_admin:
Process SICTUNNEL started successfully (pid=21244)
UEPM: SIC Tunnel started
UEPM: PostgreSQL9.2 is already running
UEPM: Endpoint Security Management server is starting...
cpwd_admin:
Process EPM started successfully (pid=21249)
UEPM: Endpoint Security Management Server was started successfully
UEPM: Self Help Portal isn't activated and will not need any action
UEPM: Starting Apache...
UEPM: Apache Web Server is starting...
UEPM: Apache Web Server was started successfully

I looked into $UEPMDIR/logs/server_messages.log file and found 'Could not load PAT on startup() (UsmPolicyAssignmentFacade)' and 'Server failed to start. Shutting down.. (InitServlet)' messages

I remember it was working before upgrading from 80.10.

[Kilian_Huber]

So you did an upgrade of this installation from R80.10 to R80.20? How did you upgrade (advanced upgrade or in-place upgrade)?

[Ilya_Avetisyan]

In-place upgrade

[Rabindra_Khadka]

I also have the same issue, have you solve this issue

[Kiril_Kaper]

- Please share the whole message error "Could not load PAT on startup" including "caused by" section.

- Alternatively, please open a ticket to TAC (as this should be investigated) with the following info:

1. Output of:

1.1 df -h

1.2 cpwd_admin list

1.3 ps aux | grep httpd

1.4 ps aux | grep postgres

1.5 Content of $UEPMDIR/engine/conf and $UEPMDIR/logs directories (files only)

[Tony_Graham]

Has this problem been solved? Is there an SK on it as I have the same issue.

Thanks.

[Kiril_Kaper]

The problem may have different causes.

Please open a Service Request to TAC with the information from the post above.

Thank you,

Kiril K.

[Bob_Delinsky]

Has anyone contacted TAC and gotten feedback on possible resolutions? Same scenario , same problem when installing SmartEndpoint on SMS R80.20 latest JHFA, latest console.

[Kiril_Kaper]

Please open a ticket to TAC with the following information:
1. Output of:

1.1 df -h

1.2 cpwd_admin list

1.3 ps aux | grep httpd

1.4 ps aux | grep postgres

1.5 Content of $UEPMDIR/engine/conf and $UEPMDIR/logs directories (files only)

[WarlockWizard]

Dear Check Mates,

All symptoms written here happened to my customer, why? Apparently for no reason, he was Check Point R80.20 M1, Only SMS, only to enforce port protection, suddenly I was not able to connect to the console anymore via SmartDasboard.

1.- We tried the basics:

# cprestar

# cpstop

# cpstart

2.- Installed last Jumbo Hotfix GA for the customers versión, rebooted the box, twice, anything helped.

3.- Checked the critical daemons and everything was OK everything was established (E)

4.- We even uninstalled the SmartDasboard  Software from the Windows PC of my customer and replaced with the newer version: "Check_Point_R80.20.M1_B006_SmartConsole_Windows"

What was the final solution? We made a quick snapshot of the console, and vía GAiA, went to CPUSE and I did the upgrade to R80.30 (ran the verify option first and everything OK), it took like two hours but after that and a reboot, the install of the last Jumbo now for R80.30 and the installation of: "R80.30_SmartConsole_Build_42.exe" in the machine of my customer, everything worked perfectly.

This worked in my particular escenario, maybe this could help to someone else.

Best regards,

Gerardo Guizar