Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Andrey_Gl
Explorer
Explorer

MDS Upgrade Failed (r81.10 t0 81.20)

Hello! I am updating MDS according to the instructions - the update check is successful. The update is taking a long time but is progressing successfully. However, after the update, there is a reboot and MDS remains on the old version. There is very little information in the DA logs (which I have uploaded). Can someone please advise on how to troubleshoot this problem?

 


In the file

/opt/CPInstLog/install_Major_R81.20_ivory_main_T631_7.logDir/logsFromPreVersion/migrate-2023.10
I see
many errors like
/opt/CPupgrade-tools-R81.20/bin//update_inspect_files -mode export -path /opt/CPSFWR77CMP-R81.10/lib: No such file or directory.

0 Kudos
6 Replies
Andrey_Gl
Explorer
Explorer


In the file

/opt/CPInstLog/install_Major_R81.20_ivory_main_T631_7.logDir/logsFromPreVersion/migrate-2023.10
I see
many errors like
/opt/CPupgrade-tools-R81.20/bin//update_inspect_files -mode export -path /opt/CPSFWR77CMP-R81.10/lib: No such file or directory.

0 Kudos
the_rock
Legend
Legend

This is where it failed, but what this means exactly,not sure...

[2023-10-12 - 17:54:17][9006 9006]:Continue major upgrade process from the new partition after reboot
[2023-10-12 - 17:54:17][9006 9006]:No matching scripts to batch-id, skipping user-scripts.
[2023-10-12 - 17:58:03][9006 9006]:Management upgrade post-boot actions failed. Reverting back.
[2023-10-12 - 17:58:03][9006 9006][HIGH DALOG_NORMAL]: ===>>> action id="53" has completed <<<===
[2023-10-12 - 17:58:03][9006 9006]:Reverting installation of full image Check_Point_R81.20_T631_Fresh_Install_and_Upgrade.tgz to backup partition lv_AutoSnap121724
0 Kudos
PhoneBoy
Admin
Admin

Have you opened a TAC case? https://help.checkpoint.com 

0 Kudos
Boaz_Orshav
Employee
Employee

Hi

  The failure is MSG_MAJOR_ERROR_MDS_SETUP which probably indicates an issue with importing the DB to the new version.

  You should either contact TAC or try to look at the log "/opt/CPInstlog/install_XXX" of the relevant package and look for the call for mds setup. The mds setup call will specify also to which log the specific call is directed (probably something like /var/log/XXX_detailed_XXX)

0 Kudos
Andrey_Gl
Explorer
Explorer

Additionally, I have found all the logs and they suggest a problem with CA:
Cannot get SIC key holder.CPD will not trigger the renewal of SIC certificate
or
Running /opt/CPmds-R81.20/bin/fw kill cpca
Failed to initialize CA.

0 Kudos
PhoneBoy
Admin
Admin

That definitely suggests getting TAC involved is a good idea.
https://help.checkpoint.com 

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events