Upgrade Harmony Endpoint version by downloading MSI from a shared folder

[Eve_Z]

Hello,

We want to upgrade Harmony Endpoint from 87.52 to 88.32, but we want the endpoints to download MSI from a shared folder instead of downloading from Internet, by using local deployment options: https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/...

We configured software deployment policy with the required blades. We also generated the package at "Export Package > Endpoint Client" with the same blades and converted to MSI. This MSI file was placed in a shared folder and configured the path in Client Settings.

When we upgrade the client, cpda.log file shows that the MSI is being downloaded from shared folder as expected, but it generates error 28151: Verification of Installation Package failed. The error is also shown at the portal.

How should MSI file be generated to avoid this error?

Any help is appreciated.

Regards.

[PhoneBoy]

See if this applies: https://support.checkpoint.com/results/sk/sk173487 

[JonnyRabinowitz]

There was a thread with recently updated information on this topic that may be helpful here

https://community.checkpoint.com/t5/Endpoint/How-to-get-msi-file-from-EndpointSetup-exe/m-p/143998 

[Eve_Z]

Hello all,

After verifying that my computer has the certificates according to https://support.checkpoint.com/results/sk/sk173487 I generated MSI file with Initial Client following https://community.checkpoint.com/t5/Endpoint/How-to-get-msi-file-from-EndpointSetup-exe/m-p/143998

I'm getting a different error: Package does not suits SD. After this, my client starts downloading the package from the Internet.

EPS.msi does not suits SD

Regards.

[PhoneBoy]

The Initial Client can only be run to install Harmony Endpoint the first time.
For upgrading existing systems, you need to create an MSI that includes (at minimum) the same blades as installed on your existing clients.
You can see this in the logs (.e.g "Package does not support needed blades").