R81 Jumbo Hotfix Accumulator General Availability (Take 65) Installation is not allowed.

[Jerry]

any ideas how to overcome this guys?

ps. my client has nothing in mentioned folder, just empty folder "after" little clean up latelly 🙂

He desperately need this TAKE to be installed but cannot do that with this error either on clish or gaia portal.

any help highly appreciated 

Yours

[Boaz_Orshav]

Hi

  When the Deployment Agent (CPUSE) installs a package it creates backup files in order to allow uninstall

  When installing a new package the older backup files are used as a base for creating the newer backup files.

  If the backup files are deleted the Deployment Agent won't be able to install and this is the error message you see.

  There is no work around - only very delicate work of editing things like registry, Gaia DB and some more.

  Please open a support case 

[Jerry]

Thanks Boaz, that all makes sense and I was thinking very same way however the whole point is to how to "fake" that the old backup files are present and make the TAKE 65 installation continue.

I don't believe that opening support case makes huge sense here I think editing DB does not require any special skills if you work with this for years 🙂

Is there any way you could send me a way of doing it by PM or email so I can help my customer and rectify missing files by some sort of "work around" and progressing the install of the TAKE65 despite missing previous TAKE in backups?

Jerry

[G_W_Albrecht]

As you did not write if this is a GW or SMS, i can only point to the solution: Fresh install of R81 followed by GA Jumbo install. If the customer has deleted files from CPUSE folder on purpose please break his fingers 😉 Contrary to your believes, this is not a trivial issue at all to resolve, so either contact TAC or do a fresh install !

[Jerry]

Thanks! This is Standalone R81 Appliance.

I think fresh R81 install would be the most appropiate but the question is about the effort in order to make it happen and do the DB export, DB import etc. upgrade_export won't be that big but time wise it will cost the Customer whole weekend operation I presume. Good money though but I agree it isn't trivial but I was thinking it is really "fixable" thing without a need of "reinstall" the whole estate really. I just don't believe we cannot install T65 on the top of the current Deployment Agent build: 2176  |  R81 take 392.

[G_W_Albrecht]

This should be finished in about two hours ! I would suggest to also upgrade to R81.10 as that is currently the best version. 

[Jerry]

not possible, that appliance does not support R81.10 so R81 TAKE 65 it is then.

I'll quote for it but I still wannat know if there is really no workaround to make that TAKE65 on the top of the previous one.

[G_W_Albrecht]

This issue is fixable, at least if there is no corruption in registry or data - but fiddling about in the CP registry that is no longer in sync with the repository and backup folders can do more harm than good. I really have a lot of experience but never was able to resolve this on my own without reinstall...

[Jerry]

Agree - reinstall is always the BEST approach but not every Customer would take it for granted without exploring other options. In this case we found that this Customer has appliance AutoSnap's every week. By 18th of April this package was 8GB bigger which means we know what to restore. I will let you all know how it ended up but just to summarize there are 2 options on the table.:

1. Resintall

2. Restore of the previous Snapshoot.

Option 2 goes first, if failed with TAKE 65 - Option 1 will be consdered. Hope you agree with me all 🙂

[G_W_Albrecht]

What model is that appliance ? Afaik all units that support R81 also support R81.10...

[Jerry]

you're wrong here mate 🙂

13500 32CORE's and 64G of RAM does not support R81.10 - check the docs and prove me wrong. I'd be over the moon if this customer could upgrade to .10 really 🙂

[G_W_Albrecht]

Not according to CP support life cycle policy - 13500 officially only supports R80.40 and it is End of Support in 2 months... So i would have replaced it after Engineering Support ended in June 2020...

[Jerry]

yes but R81 works just fine should you have more CORE's and that Appliance has 32 CORE's hence it works perfectly fine on R81 but R81.10 isn't supported at all and it won't even install so my Customer knows it is EOS/EOL soon.

[G_W_Albrecht]

Maybe R81 works fine for him, still it is not supported by CheckPoint. But as Engineering support ended 2 years ago this makes no difference...

[Jerry]

Good news guys is that most likely Customer will take the approach of "Snapshoot Restore" rather than reinstall.

by 18th of april 2022 the snapshoot had 28 GB, now (yesterday!) snapshoot have had only 20G which most likely means that some cleaning took place within the last week or so.

Restore of the snapshoot seems the quickest way though and afterwards TAKE 65 should work just fine 🙂

Will update you how it went this upcoming weekend.

Cheers boyZ and girlZ 🙂

[the_rock]

Please update us, but I believe you got all valid responses so far. As a matter of fact, I had this happened to me in my lab (in R81 as well, but different jumbo) after little "clean up" as well and deleting the wrong files. Luckily, was able to fix it, since I had another system with needed file, so just ended up copying the file over and that fixed the problem. 

[Jerry]

I will definitely update you how it all ended up however, it seems we've got no "similar setup" anywhere whithin the network so we could copy exactly the same files across and progress the update.

Should any of you have such files which seems to be simply "missing" from their respective locations I'd be happy to take them from you and without the restore make it all TAKE 65.

Agree LAB would be good place to start unfortunately this is the production beafy device which has 24/7 requirement for them.

Regardless I believe that Restore the snap from week ago would fix it and then files would come back. Unless those files are not included with Snapshoots ... we should be fine with it. No?

[the_rock]

I will check to see if I have that file anywhere in my lab. Now, if you have snapshot, yes, that would fix the problem...backup would NOT, as it does not contain the hotfixes.

Andy

[Jerry]

Thanks, I'd appreciate it Mr. Rock 😛 

Reg. Snap vs. Backup - I'm well aware yes hence I've mentioned 2 options on the table. 1 - Reinstall, 2 - Restore of Snap.

Option 2 goes live tonight. Let's see how it goes, It's pretty powerful device so all should be just fine afterwards.

Reinstall would take really longer but Restore from the previous Snap should be 15 min. of downtime hence they claim it is acceptable with emergency RFC so all good.

reg. files - should you find files exaclty in this folder:

/opt/CPda/backup/CheckPoint#CPUpdates#All#6.0#5#2#BUNDLE_R81_JUMBO_HF_MAIN#58

I'd definitely be ever grateful 🙂

Cheers!

[the_rock]

Mr Rock...hm, never been called that before, but I like it : - )). Anyway, I will update you either way if I find the file and if I do, can transfer it over via secure method. However, if I dont find it, then as I mentioned. restore of snapshot is definitely the best in my opinion.

Mr Rock

[Jerry]

well what would you expect if I see you as "The_Rock" 😛 Happy to be the 1st, at least today and here 😄

Cheers and thanks for your support.

[the_rock]

Hehe, all good Jerry : -). I will let you know later on if I get the file.

Cheers.

[the_rock]

Sorry to disappoint you, but I dont have the file : (. I did have R81 at some point, but its all on R81.10 now and I dont have any snapshots either, apologies.

[Jerry]

all good Mr. Rock. No harm made. I will restore the snap tonight to see how it goes. should go just fine with another restore when files preserved so the plan is to just restore missing folder then restore back to "today's" state of play (current DB setup_).

will update you due course not to worry. thanks anyway!

[the_rock]

Yes, sounds like a good plan, let us know how it goes!

[Jerry]

Installing TAKE 65 - restore to the previous snap was brill idea (mine btw.) - now TAKE 65 and let's see if all goes well.

more updates to come

[Jerry]

[the_rock]

good idea 😉

[Jerry]

all done. TAKE 65 installed and Standalone 13500 Beast is up&running.

thanks folks for heads up and hints!

[the_rock]

Glad it worked, because I just looked at link @G_W_Albrecht was referring to and indeed, R81 does not even show for that appliance, so lets hope there are no issues, otherwise, TAC might not be so willing to help...but, dont worry, community is here to assist : - )

Mr Rock