Somehow stuck with FDE.

[darnitsa1]

Hello!

Have a little problem. I am an admin of an organisation, we use Checkpoint Harmony, but we don't use FDE blade and never did. Still, I somehow have around 10 client computers, which fail to update to newer versions of Checkpoint Endpoint because "removing fde during installation is not allowed". FDE is disabled, and it never was enabled. So, I would love some way to uninstall old client, with maybe some additional key to use with installation file, or some registry fix. Please help, thank you.  

[PhoneBoy · Accepted solution]

The client will have to be manually uninstalled with the uninstall password.
If you're having trouble doing that, suggest consulting with TAC: https://help.checkpoint.com 

[darnitsa1]

It never gets to password prompt. Hangs on "removing fde during installation is not allowed" and that's pretty much it.

[PhoneBoy]

TAC will have to assist with this.

[asafebelo · Accepted solution]

Hello, everyone.
Yesterday I had a same problem, and I solved with this procedures:

I noted that if agent version in software deployment was upgraded, and I too disable Full Disk Encryption for does two tasks at the same time, the messages as "Removing FDE during upgrade is not allowed" and Deployment "Retrying" are displayed. Follow below:

Removing FDE during upgrade is not allowed

Deployment Status - Retrying 
Noted the same package version for two assets, one with Deployment Status - Complete and other with Retrying.

For solved, I did:

1. Previously of update your clients, disable Full Disk Encryption blade in Software Deployment and push a "Repair Client".
2. Afterward Full Disk Encryption is disable, upgrade your client in Software Deployment

Obs: If only a little assets work with this issue, you can create a virtual group and a Software Deployment rule for only disable Full Disk Encryption. After, you can change for production software deployment and update.

If you have any questions, I'm available.
Asafe 😄