Hotfix package unavailble - cannot restore

[F1uid3pawn]

I am trying to restore a backup of R81.20 management server.

It requires CheckPoint#CPUpdates#All#6.0#5#4#BUNDLE_R81_20_JUMBO_HF_MAIN_SC#26.

We have installed R81.20 JHF Take 26 but this does not satisfy the requirement. What does "_SC" mean in the bundle name and where can this bundle be found?

[Duane_Toler]

That is the SmartConsole package that is part of the Jumbo HFA that was installed.  Looks like the original server was installed directly with Jumbo HFA 26 and that included the SmartConsole web page at the time.   You can check with TAC to confirm, however. 

If you're fresh installing to a new host/VM, then you can download the Blink installer with JHF 26 and write that to a USB stick with ISOmorphic, install the server, reboot, then try to restore your backup.

[F1uid3pawn]

That is exactly what we tried - but when doing the restore it fails with the message, that the HOTFIX (CheckPoint#CPUpdates#All#6.0#5#4#BUNDLE_R81_20_JUMBO_HF_MAIN_SC#26) must be installed prior to restoring.

I'm quite sure that the "_SC" ending is what causes the misery.

[the_rock · Accepted solution]

I hope this command would fix that.

Andy

https://support.checkpoint.com/results/sk/sk105883

1. Connect to the command line on Gaia OS.

2. Log in to the Expert mode.

3. Configure the required setting in the Gaia database with this command:

   dbset backup:override_hfs t

4. Restore the Gaia backup.

[Duane_Toler]

(EDIT for JHF 26 version; the original was the JHF 54 version)

Found it.  Here's the package:

[Expert@cpmgmt01:0]# da_cli packages_info |jq -r '.packages[]|select(.packageKey|contains("BUNDLE_R81_20_JUMBO_HF_MAIN_SC"))'
{
  "availableFrom": "2024-04-07 00:00:00",
  "blocksUninstall": false,
  "broughtVersion": "6.0_5_4",
  "build": 54,
  "category": "capability",
  "description": "<p>SmartConsole R81.20 version is compatible with any R81.20 Security Management server.&nbsp;</p><p><strong>SmartConsole automatically updates to the latest Build, as long as you have an Internet connection. The update is rolled out gradually and should be completed within 1 week. It is not necessary to download and install newer builds manually</strong></p>",
  "displayName": "R81.20 SmartConsole Build 653",
  "fileSize": "436179034",
  "filename": "Check_Point_SmartConsole_R81_20_jumbo_HF_B653_Win.tgz",
  "hasMetadata": true,
  "htmlReportExists": false,
  "installCritical": false,
  "isBlinkImage": false,
  "isHfa": true,
  "isInRepository": false,
  "md5": "76e12ddf2ac8ea2657057b61647bc76a",
  "order": 0,
  "packageKey": "CheckPoint#CPUpdates#All#6.0#5#4#BUNDLE_R81_20_JUMBO_HF_MAIN_SC#54",
  "packageOrigin": "Download Center",
  "packageType": "Wrapper",
  "product": "CPUpdates",
  "requiresReboot": false,
  "state": "Available for download",
  "version": "6.0"
}

But you need the JHF 26 version which was Build 646.  You need the package named Check_Point_SmartConsole_R81_20_jumbo_HF_B646_Win.tgz and you should be ok:

From Expert mode:

da_cli add_private_package package=Check_Point_SmartConsole_R81_20_jumbo_HF_B646_Win.tgz
da_cli download package=Check_Point_SmartConsole_R81_20_jumbo_HF_B646_Win.tgz 
da_cli verify package=package=Check_Point_SmartConsole_R81_20_jumbo_HF_B646_Win.tgz 
da_cli install package=Check_Point_SmartConsole_R81_20_jumbo_HF_B646_Win.tgz  reboot_delay=60

[the_rock]

You can do search on it, but its 100% in /var/log dir, cant recall now exactly where.

[F1uid3pawn]

The files are typically in /opt/CPda/backup/CheckPoint#CPUpdates#All#6.0#5#4#BUNDLE_R81_20_JUMBO_HF_MAIN_SC#26

But as we are restoring to a clean Management Server we have to add all the hotfixes as they were installed on the original unit, where the backup was taken.

I have asked TAC for help to get the correct HOTFIX file.