In R80 how do you create a new domain but do not start it? So far the GUI and the API automatically starts the new Domain after creation.
Currently in R80 this is not supported. We do plan to support it on future releases.
May I ask what is your use-case in which you don't want to start the new Domain automatically?
In all the past versions we can export a Domain/CMA and import into a new MDS. However the only way to do this is to build a new Domain on the new MDS and then do not start it. We would then take the export from the old Domain, then take this export and import it into the new domain and then start it afterwards. If you start the Domain before the import, the import will fail. So this feature is a must for migrating Domains on at a time. We also use this feature to move a Domain from one MDS to another. When you try and run a cma_migrate it will tell you in the output to not start the domain. Without this feature Check Point is going to make our migration to R80 impossible in the near future. I can't believe Check Point would even consider releasing R80 without this working. You will probably find we are not the only customer that uses this feature.
In the current R77.x environments the process to import a CMA one at a time has improved so it is not necessary to create the domain without first starting it.
If you look at the windows carefully you should see at the bottom of one an "Import Options" section which allows you to enter the full path to an export file.
Doing this correctly will import your CMA without having to create it without starting it.
While I'm not 100% sure this feature will be in R80 I doubt they would have removed it in a future release.
How To Migrate from Security Management Server to Domain Management Server
To be more accurate -
It's not supported using the SmartConsole but it is supported using the APIs.
This is from the user manual -
That helps out a lot. I did not see the option for "skip-start-domain-server". I was using the directions from the "CP_R80_Multi-DomainSecurityManagement_AdminGuide.pdf" and it did not show this part. I will give it a try.
From the "CP_R80_Multi-DomainSecurityManagement_AdminGuide.pdf"
To create a new Domain (add domain):
# mgmt_cli add domain name "<domain>" servers.ip-address "<ip_address>" servers.name "<domain_server>" servers.multi-domain-server "<multi_domain_server>"
Retrieving data ...