MDS Upgrade from R81.20 to R82

[CHIN_FW]

We are planning to upgrade our MDS infrastructure from R81.20 to R82. The setup includes a cluster of 2 nodes and 2 loggers. Could someone suggest what prechecks we need to perform and what approach we should take?

[Don_Paterson · Accepted solution]

Most important starting points/documents:

https://support.checkpoint.com/results/sk/sk181127

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_RN/Content/Topics-RN/Whats-New.htm

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_Installation_and_Upgrade_Guide/Con...

https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/R82.00/R82-List-of-all-Resolved-Issues.htm

[the_rock]

I looked at references Don mentioned and they are all related to your question.

[CHIN_FW]

I am trying to upgrade using the CPUSE and when I click on verify upgrade I get the message as below, I checked the sk174770 and as per the SK the license is bound to a physical interface ( management interface ) , this is a open server on VM.

---------------------------------------------------------------------------------------------------------------

Verification failed:The server does not have a valid license. for assistance with your license , contact checkpoint account services: 

https://help.checkpoint.com

1. It is recommended to use the latest
upgrade tools package. The latest package is installed automatically on online
environments, for upgrade of offline environments refer to sk135172.\n
2. Only latest
revision will be upgraded. It is recommended to publish important changes before upgrade.
Unpublished changes will be lost.\n
3. Run the upgrade verification on all servers in your
environment before you upgrade

[Don_Paterson]

It is all about the IP address for Open Server/VM licensing. 

Check your IP addresses and hosts file and compare them with the license file or licenses in the SmartConsoles. 

Also be aware that only one upgrade is allowed (supported) on open servers. 

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_RN/Content/Topics-RN/HW-Requiremen...

Any doubts, please check with TAC. 

[Hugo_vd_Kooij]

I would manually verify the license with the `cplic print`command.

If the license is valid there might be glitch in the verification tools. If you are compfortable to correct it if needed then it shouldn't be a show stopper.

But from a legal point if you have a license without supporrt contract then an upgrade is .... muddy water I will not stir in.