Reset SIC Log Server

[sushantjoshi]

How can we reset SIC for CP Log Servers ? I have tried cpconfig and I simply cannot find the option as well as tried it using cli

Any idea ? 

[796570686578]

Hmm, are you talking about the Smart Event Server? I just checked on a Smart Event Server R81.20 and there I have the option to change SIC in cpconfig. It's named "Secure Internal Communication".

Best regards

[sushantjoshi]

Nope , I am talking about a dedicate log server not an Smart Event

[PhoneBoy]

The command looks like it's cp_conf init sicpassword.
Whether it works from a log server or not is a different question
Reference: https://support.checkpoint.com/results/sk/sk86521

[sushantjoshi]

@PhoneBoy  I have tried that doesn't work sadly.

@the_rock  @PhoneBoy  any more ideas ? 

[emmap]

I don't have access to one to check but I'm pretty sure that if you have built the server in the FTW as a log server then it should be an option in cpconfig. Are you sure the server was built as a log server and not a primary management server?

[the_rock]

I see the point @emmap brought up, makes total sense.

[PhoneBoy]

I suspect @emmap is correct that the system was not initially installed as a Log Server.
Can you provide what it says in $CPDIR/register/HKLM_registry.data for the lines LogServer and Management?

[sushantjoshi]

HKLM_registry.data is not present in both of my LogServer and Management Server.

This is in production and all of my VS were forwarding traffic to these log servers. 

There is one more active backup log server which doesn't have option to reset SIC as well and also does not have HKLM_registry.data file

[PhoneBoy]

Your best bet here is a TAC case: https://help.checkpoint.com 

[sushantjoshi · Accepted solution]

@PhoneBoy  Sorry for the trouble. 

I raised a case and all we did was a halt to the machine and started it and could see the cpconfig after that.

Thank You !

[the_rock]

Good job!