MDS Upgrade Failed (r81.10 t0 81.20)

[Andrey_Gl]

Hello! I am updating MDS according to the instructions - the update check is successful. The update is taking a long time but is progressing successfully. However, after the update, there is a reboot and MDS remains on the old version. There is very little information in the DA logs (which I have uploaded). Can someone please advise on how to troubleshoot this problem?

In the file

/opt/CPInstLog/install_Major_R81.20_ivory_main_T631_7.logDir/logsFromPreVersion/migrate-2023.10
I see
many errors like
/opt/CPupgrade-tools-R81.20/bin//update_inspect_files -mode export -path /opt/CPSFWR77CMP-R81.10/lib: No such file or directory.

[Andrey_Gl]

In the file

/opt/CPInstLog/install_Major_R81.20_ivory_main_T631_7.logDir/logsFromPreVersion/migrate-2023.10
I see
many errors like
/opt/CPupgrade-tools-R81.20/bin//update_inspect_files -mode export -path /opt/CPSFWR77CMP-R81.10/lib: No such file or directory.

[the_rock]

This is where it failed, but what this means exactly,not sure...

[2023-10-12 - 17:54:17][9006 9006]:Continue major upgrade process from the new partition after reboot
[2023-10-12 - 17:54:17][9006 9006]:No matching scripts to batch-id, skipping user-scripts.
[2023-10-12 - 17:58:03][9006 9006]:Management upgrade post-boot actions failed. Reverting back.
[2023-10-12 - 17:58:03][9006 9006][HIGH DALOG_NORMAL]: ===>>> action id="53" has completed <<<===
[2023-10-12 - 17:58:03][9006 9006]:Reverting installation of full image Check_Point_R81.20_T631_Fresh_Install_and_Upgrade.tgz to backup partition lv_AutoSnap121724

[PhoneBoy]

Have you opened a TAC case? https://help.checkpoint.com 

[Boaz_Orshav]

Hi

  The failure is MSG_MAJOR_ERROR_MDS_SETUP which probably indicates an issue with importing the DB to the new version.

  You should either contact TAC or try to look at the log "/opt/CPInstlog/install_XXX" of the relevant package and look for the call for mds setup. The mds setup call will specify also to which log the specific call is directed (probably something like /var/log/XXX_detailed_XXX)

[Andrey_Gl]

Additionally, I have found all the logs and they suggest a problem with CA:
Cannot get SIC key holder.CPD will not trigger the renewal of SIC certificate
or
Running /opt/CPmds-R81.20/bin/fw kill cpca
Failed to initialize CA.

[PhoneBoy]

That definitely suggests getting TAC involved is a good idea.
https://help.checkpoint.com