CDT generating candidates list issue and cluster upgrade

[cem82]

Hi

I am using R81.20 JHF 76 MDM and running into issues generating the candidates (upgraded to version 2.0 via CPUSE).  I have tried using the example deployment file even and only putting the blink filename we want to upgrade with but getting the below.  I see the entry saying to reinstall the tool but doesn't allow that, do I really need to restore snapshot?

installer reinstall 1
Interactive mode is enabled. Press CTRL + C to exit (this will not stop the operation)
Result: Package is already installed and can not be re-installed.

Also is there a way for the tool to only upgrade the standby and failover rather than having to use filter files?  In Smartconsole upgrade I see this option where it checks which is the standby but can't work out how to do that with CLI?  I'm needing to do this as required to do the other side of the cluster the following day.

mdsenv <CMA>

$CDTDIR/CentralDeploymentTool -generate -candidates=/var/log/candidates.csv -deploymentplan=/opt/CPcdt/CentralDeploymentTool.xml -server=<CMA IP>

Sun Aug 18 13:19:56 2024 *E* [Main]:
************************************************
Configuration error has occurred:

Error code 22 - Error loading configurations from the configurations file.
Make sure that the configurations file is valid. Try to reinstall the tool and use a clean configurations file.

Details:
--------
Failed to retrieve the CentralDeploymentTool element from the configuration file.
************************************************

cat /opt/CPcdt/CentralDeploymentTool.xml
<?xml version="1.0" encoding="UTF-8"?>
<CDT_Deployment_Plan>
<plan_settings>
<name value="Example Deployment Plan file - update, send, import, and verify the package" />
<description value="Update , import and verify the package on the remote machines" />
<update_cpuse value="true" />
</plan_settings>

<!-- Use the CDT import and verify actions -->
<import_package path="/home/admin/blink_image_1.1_Check_Point_R81.20_T631_SecurityGateway.tgz" />
<verify_package path="/home/admin/blink_image_1.1_Check_Point_R81.20_T631_SecurityGateway.tgz" />
</CDT_Deployment_Plan>

[the_rock]

I think thats normal behavior if its saying tool is already installed. Maybe you can try installer uninstall first?

Andy

[cem82]

Tried installer uninstall before trying "reinstall" but package doesn't appear.  Does the XML and command look good in case that's the problem?  I tried to keep it as simple as possible to begin with anyway

[the_rock]

I see what @_Val_ is saying about scenario from the sk. I have R81.20 jumbo 76 lab, so can always provide that file if needed.

Andy

https://support.checkpoint.com/results/sk/sk111158

[_Val_]

Quoting from the CDT SK:

Scenario 17: "Error code 22 - Error loading configurations from the configurations file" message from CDT.
(ommited example)
************************************************

How to resolve: Make sure that the configuration file is in a valid XML syntax.

I would say, try recreating XML file once again. It is not exactly obvious what's wrong with the one you pasted in the post, but it might be some hidden extra character somewhere. 

If the issue remains, please raise a TAC case.

[Ronny_F]

Hi @cem82, 

As Val said, there might be a problem with the XML.

You can use the backup deployment file that CDT creates when you upgrade its build (you should have a CentralDeploymentTool.xml.backup file in the CDT repository).

Also, regarding the cluster upgrade - you can omit one of the cluster members from the upgrade, I've added an example.

Also, please read the admin guide here: https://sc1.checkpoint.com/documents/CDT/Unified/Topics/Candidates-List.htm and here: https://sc1.checkpoint.com/documents/CDT/Unified/Topics/Package-Installation-in-Clusters.htm?tocpath... to learn more about your options with CDT.

If you have further questions, feel free to ask.