License installation only works through SmartConsole but not SmartUpdate

[kamilazat]

Hello all!

The problem started with the error message "The selected file is in the wrong format." in SmartUpdate. First we thought that it may be a corrupted license file, redownloaded it and tried again, to no avail.

When we install the license files on SmartConsole, everything works perfectly fine.

We did a cpm debug using this command (pretty much activating almost all the topics that looked somewhat relevant):

[Expert@SMS:0]# /opt/CPsuite-R81.20/fw1/scripts/cpm_debug.sh -t Assign_Global_Policy BackupRestore CDS Cloud Compliance CPDiagDumperSvc crud Default_Values Deployment Diff Install_Policy_Settings LicenseManagement Locks_All Login LSM_API Notifications Online_Services Permissions Protocol_Applications publish Revisions rulebase Saml_Login Scripts Search Sessions SmartTasks Solr Statuses sunset Permissions Topology Validations webservices -s DEBUG

I attached the debug logs for your eyes as well. I utterly failed to find anything useful.

Where else can we look at to troubleshoot this?

As always, thank you very much!

[Tal_Paz-Fridman]

Please see if https://support.checkpoint.com/results/sk/sk106393 helps:

"The selected file is in the wrong format" error when importing a license file into SmartUpdate

If it does not try debugging the FWM process (with TDERROR_ALL_ALL=5) and send the output.

BTW what was the motivation for using SmartUpdate, a legacy application, if it was successful through SmartConsole?

[G_W_Albrecht]

sk106393 is only for EOL versions with the latest being R77.30 - and SmartConsole would not accept it if it was not properly generated, or was corrupted.

[Tal_Paz-Fridman]

Yes R77.30 is EOL but SmartUpdate as a product is still a legacy "R77.30" product.

[kamilazat]

It's just a habit of people. I agree with you that if there is an easier and faster way, do it. But it's kind of concerning that SmartUpdate has issues with this and will create problems in the future.

[G_W_Albrecht]

What is the product you tried to license ?

[kamilazat]

Hi @G_W_Albrecht 

Here is the contents of the lic file.

Sign {
LICENSE x.x.x.x never CPSM-C-5 CPSM-NGSM CPSB-WKFL-5 CPSB-NPM CPSB-EPM CPSB-LOGS CPSB-MNTR CPSB-MPTL CPSB-UDIR CPSB-PRVS CPSB-COMP-5 CPSB-COMP-5 CPSB-SME-5 CPSB-RPRT-N-C1000 CK-2F02A00BE26E
}= 8aVZN2zM-HMbKWCAhz-2Si2DtsGy-2Cj7P5Rbh Index=0 Version=0

Hope it helps.

Can you think of any repercussions of leaving SmartUpdate as it is?

[G_W_Albrecht]

SmartUpdate is leaving us soon, i think - so be glad that all works with SmartDashboard 😉 I know that e.g. Azure and other Cloud based products are not compatible with SmartUpdate anymore. Also, you have the additional option to use the GAiA WebGUI to install licenses...

[kamilazat]

@the_rock Here's the screenshot.

I managed to get the same error in my lab by manually messing with the content of the .lic file and trying to install that. I could see the same error message in the cpm logs. But on the production environment none of the files are touched and even though the error message was seen in the GUI and we enabled all the topics on cpmdebug.sh, there were no such messages. In fact, the only log entries that had the keyword 'license' was the enabling and disabling of the debug flags. 

@G_W_Albrecht Please forgive my question, but how do you even open the licence and contract repository on SmartDashboard?

[G_W_Albrecht]

[kamilazat]

@G_W_Albrecht Thank you for the screenshot. This is pretty useful. But it doesn't allow me to 'manage' contracts here, correct?

[the_rock]

Can you do me a small favor please? Message me directly and indicate whether this is mgmt or gw or standalone device, send the IP and I can generate eval for you and give it a go.

Andy

[kamilazat]

Hi @the_rock Thank you for the offer. We already have tried several eval licenses and still got the same issue. I wouldn't waste your time unless you have something specific in your mind.

[the_rock]

No problem. Its not waste of my time, but anyway..

Andy

[the_rock]

Hm, I never had an issue like that in smart update at all. Can you send a screenshot of what you see?

Andy

[PhoneBoy]

This SK talks about debugging SmartUpdate: https://support.checkpoint.com/results/sk/sk41793
Having said that, the only reason one should use SmartUpdate at this point is to update contracts in an offline environment.