Bootable USB from ISO for open servers

[Duane_Toler]

So be honest... has anyone ever REALLY gotten a bootable USB stick to work on an open server, such as an HP DL60 or DL380, using ISOmorphic and an ISO image (R81.20, R82, or whatever)?  No matter what I do, what sticks I try, what options I pick, even on the server BIOS itself, it never ever ever ever works.  It always fails in some spectacular way.

I'm convinced that the whole process doesn't work and it's just there as a clever illusion.  I'd love to be proven wrong and have someone point me to the One True Way of making it work.  USB boot would be so much faster than spinning plastic on a USB-connected DVD reader (which always works, btw; it never fails, and I'll never give it up).

Appliances don't count, because I've seen that work (even then, tho, it was still dicey and I've also seen it fail.. but it can work).

Thanks!

[Lesley]

seen the open server part here i assume? https://support.checkpoint.com/results/sk/sk65205

can you explain at what point you get stuck, error or?

the USB stick you use, does it work on normal appliances?

Check known issues here: https://support.checkpoint.com/results/sk/sk168335 for example usb 3.0 will not work

For HP servers check also -> https://support.checkpoint.com/results/sk/sk108200

[JozkoMrkvicka]

Faced the same issue circa 7 years ago with IBM devices. We ended up using USB DVD reader which worked all the time. USB sticks never worked. 

[the_rock]

I am always honest, so here you go...I tried this many times, NEVER worked. Did what @JozkoMrkvicka said, that was fine.

[Blason_R]

Absolutely it never worked with USB stick but external DVD drive has worked for me always

[Lesley]

Was not aware so many people have issues with USB. All my co-workers only use USB. What the trick for we was finding the correct USB and guard them with your life 😉 

Here some tips:

I always have 2-3 USB's sticks only for installing CP gateways and they have not failed yet. 

Here 2 amazon links of USB sticks that work (note they are 2.0, what is very important)

https://www.amazon.nl/-/en/dp/B002U1ZBG0?th=1

https://www.amazon.nl/-/en/dp/B01FSJBXRG?th=1

Feel free to remove the links if it is not allowed.

Second option, is an IODD device. This device host many ISO images from Linux to Windows but can also have Check Point images. Would only recommended to use this if you doing daily clean installs or big projects. Also I see now that they do not run 2.0 usb so I cannot be sure the latest IODD device will work. My last IODD experience was 10 years ago so a lot of stuff has changed. Would still go for the USB-stick so you are sure you always download the latest ISO from Check Point 

[the_rock]

Guess kind of usb stick definitely matters.

[Bob_Zimmerman]

The particular stick definitely does not matter. Every problem I've ever seen is the controller on the server side. ISOmorphic's installation environment has long had a really old kernel which predates USB3. Since R80.40, it should be able to drive older USB3 controllers, but may still have trouble with USB3.1 or USB3.2.

The server's boot ROM can drive its built-in ports. It probes for storage and tries to find a boot block. Once it does, it hands execution over to that boot block. In ISOmorphic's case, this then uses the firmware's drivers to load the second stage of the bootloader, which then fetches the kernel RAMdisk image, starts the RAMdisk, and hands execution over to the kernel in RAM. That kernel then tries to mount the storage using its own drivers, but it doesn't have a driver for a USB3 controller.

Some USB controllers present themselves as a single device which can do USB2 or USB3. If it's only a USB3 controller, the kernel can't talk to it, so it can't see the storage, and all it has is whatever is included in the RAMdisk image. Others present USB2 functionality as a separate PCIe endpoint. If the server's USB controller presents itself as multiple devices, the USB2 controller may work. This sometimes requires the drive also be only USB2, but any USB2 stick would work.

For open servers, I've used ISOmorphic in the past, but I usually just use the LOM. It's slower, but always works. No dependency on hardware implementation details I can't control.

[the_rock]

Ah, okay. I know while back, 10+ years ago, kind of usb stick actually did make a difference.

[Henrik_Noerr1]

We have the exact same experience like @Lesley  - Find a stick that works and buy 5 of these.

[the_rock]

I know there was an sk with supported types, cant find it now.

[the_rock]

Here is what AI gave...

🔍 Summary for your situation

If you are looking for a supported USB stick specifically for booting a Check Point appliance, here is what you should aim for:

• A reliable USB 2.0 flash drive, preferably from a known brand (Kingston, SanDisk, etc).

• Capacity sufficient for your ISO (8 GB is usually more than enough).

• Format it to FAT32 (unless your model/spec says otherwise).

• Use the Check Point recommended tool to make the USB bootable.

• Ensure your appliance model supports USB boot (check the model-specific admin guide/SK).

• If possible, check the model’s SK article for “Which USB flash keys work with ISOMorphic Tool” or similar (older SKs mention e.g. Kingston Traveller G3 8 GB).

[Wolfgang]

We often used an external HDD drive which can simulate a DVD drive. Like this https://www.zalman.com/EN/Product/ProductDetail.do?productSeq=914 or https://www.iodd.shop/all-products

You can store your ISO-files on the HDD and choose which one will be the bootable DVD when simulate a DVD drive.

[the_rock]

Those work, agree!

[emmap]

I used to use a Zalman a lot for appliances, but the main one I was using died and I had some issues with the newer Smart-1s not liking it, so I switched back to ISOMorphic. I've never deployed an open server down here though, they're not used much anymore it seems. 

I have another Zalman that I put an SSD in (the first one had an HDD, but it was also like 12+ years ago when I got them). Due to the blazing speed of the SSD I felt it best to paint some red racing stripes on it. It's still going strong!

[Alex-]

I tried my Zalman VE500 I had for years on the newest 9000 series a couple of time and they din't kick in, while I used them on plenty of prior series. Only the 3100/3200 didn't seem to work with them. I didn't have much time checking that out extensively but with new deployments piling in, I really want it to keep working and not carry USB sticks around. Smart-1 of the 6x series never liked them, I used the LOM there or factory images.