- Products
- Learn
- Local User Groups
- Partners
- More
Access Control and Threat Prevention Best Practices
5 November @ 5pm CET / 11am ET
Ask Check Point Threat Intelligence Anything!
October 28th, 9am ET / 3pm CET
Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
HTTPS Inspection
Help us to understand your needs better
CheckMates Go:
Spark Management Portal and More!
Dear all,
I'd like to uninstall hcp on our SMS but it resists to go away...I have tried this command :
autoupdatercli revert-completely hcp
And log showing:
*N* %09-12 15:45:41% : Script /var/log/AutoUpdater/metadata/HealthCheck_Point/hcp/hcp_AutoUpdate/73/product_scripts/hcp_pre_revert.sh output:
[LOG] - Removing HCP rpm
[LOG] - Previous version of HCP was found [/opt/HealthCheckPoint/last_version/hcp-1-592042.rpm], installing it
*N* %09-12 15:45:41% : Revert succeeded for component hcp
*N* %09-12 15:45:41% : ----------------------------------------------------------------------
But hcp -v still showing:
[Expert@sms-checkpoint:0]# hcp -v
HCP RPM was installed manually
HCP RPM Build: hcp-1-592042.i386
SMS Version: HOTFIX_R81_20_JUMBO_HF_MAIN Take: 53
Would you please help advise?
Many thanks in advance!
BR,
Andy
Hi Andy,
Can I ask why you're trying to uninstall it?
Indeed if you remove this it could impact the progress with TAC tickets.
Most of the time engineers need a HCP report from the setup to start the ticket.
Thats indeed true.
Maybe because someone decided that HCP is running every 6 hours by default starting from HCP Update 17 - Take 70. Not saying it is causing CPU spikes which is supposed to be fixed in HCP Update 18 - Take 73.
If this is the issue, you offered the better solution to removal - installing latest take should solve the issue.
I think that the schedule is a good idea, it executed another code as part of the tests that caused the spike AFAIK so I won't put the fault on HCP itself.
Yes, I tried to update take 73, it did change but the build version stay the same. Also tried reboot SMS few times...
Please advise...
Yes, you got me, we have dozens of Spark spinning up with High Mem usage and having S2S connection issue intermittently. I tried to update HCP to Take 73 as you wrote but when check the hcp -v it's still showing the same version as before.
Issue is solved for T73 AFAIK so this might have another root cause.
You can try sk182491 , it might solve the issue if indeed it's the HCP.
If all else fail and you really want to remove you can try "autoupdatercli disable hcp". Might solve your issue of removing it
Did my suggestion solved your issue?
I would try remove all the files in /var/log/hcp dir and see if that helps.
Andy
Thanks for advice...yes I will try later today.
Have you tried to run "autoupdatercli revert-completely hcp" more times ? I can imagine that only latest version of HCP was uninstalled, not very first version. Each Jumbo can have newer version of HCP.
I ran at least 3 times and reboot the box 2 times 😞
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
User | Count |
---|---|
21 | |
15 | |
6 | |
6 | |
4 | |
3 | |
3 | |
3 | |
2 | |
2 |
Tue 28 Oct 2025 @ 11:00 AM (EDT)
Under the Hood: CloudGuard Network Security for Google Cloud Network Security Integration - OverviewTue 28 Oct 2025 @ 12:30 PM (EDT)
Check Point & AWS Virtual Immersion Day: Web App ProtectionTue 28 Oct 2025 @ 11:00 AM (EDT)
Under the Hood: CloudGuard Network Security for Google Cloud Network Security Integration - OverviewTue 28 Oct 2025 @ 12:30 PM (EDT)
Check Point & AWS Virtual Immersion Day: Web App ProtectionThu 30 Oct 2025 @ 03:00 PM (CET)
Cloud Security Under Siege: Critical Insights from the 2025 Security Landscape - EMEAAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY