Hyper-V clocksource does not work on 64-bit kernel.

This problem was fixed. The fix is included in:

• For Security Management Server:

  • Check Point R80.40
  • Check Point R80.30
  • R80.20 Management Feature Release

• For Security Gateway:

  • Check Point R80.40
  • Check Point R80.30 with Gaia 3.10

Check Point recommends to always upgrade to the most recent version
(upgrade Security Gateway / upgrade Security Management Server / upgrade Multi-Domain Security Management).

 

For other supported versions, Check Point can supply a Hotfix. Contact Check Point Support to get a Hotfix for this issue.
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.
For faster resolution and verification, please collect CPinfo files from the Security Management Server and Security Gateways involved in the case.

 

Follow these steps:

1. Hyper-V integration services should not offer time sync.
   Uncheck this setting in the "Advanced" section of hardware properties of the Hyper-V VM.
   If this is not acceptable, then proceed to the next step.

2. Contact Check Point Support to get a Hotfix for this issue (Issue ID 02550557).
   A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.
   For faster resolution and verification, please collect CPInfo file from Gaia OS running within Hyper-V that is involved in the case.

   Hotfix installation instructions:

   1. Hotfix has to be installed on Gaia OS running within Hyper-V.

      Notes:

      • In cluster environment, this procedure must be performed on all members of the cluster.
      • In Management HA environment, this procedure must be performed on both Management Servers.

   2. Procedure:

      • Using CPUSE - On Security Gateway / Management Server running Gaia OS R75.40 and above:

        Make sure to install the latest build of the CPUSE Agent.

        Refer to sk92449: CPUSE - Gaia Software Updates (including Gaia Software Updates Agent):

        • Section "(4-A-c)" / "(4-A-d)" - refer to import instructions for Offline procedure
        • Section "(4-B-a)" - refer to installation instructions for Hotfixes

        You can also use the sk111158 - Central Deployment Tool (CDT) to install this hotfix on Security Gateways.

        Note: Reboot is required.

      • Using Legacy CLI - On VSX Gateway running Gaia OS R75.40VS - R77.30:

        Note: You must be connected either over Console, or LOM card (SSH session could be disconnected). On VSX versions R75.40VS - R77.30, the Gaia CPUSE does not support installation of hotfixes (refer to sk92449 - section "(2)" - "VSX Gateways").

        1. Transfer the hotfix package to the machine (into some directory, e.g., /some_path_to_fix/).

        2. Unpack and install the hotfix package:

           [Expert@HostName:0]# cd /some_path_to_fix/
           [Expert@HostName:0]# tar -zxvf SecurePlatform_<HOTFIX_NAME>.tgz
           [Expert@HostName:0]# ./SecurePlatform_<HOTFIX_NAME>

           Note: The script will stop all of Check Point services (cpstop) - read the output on the screen.

        3. Reboot the machine.
           
           

Related solutions:

• sk110349 - Output of "date" command shows wrong date and time on R77.30 Gaia OS deployed over Hyper-V infrastructure in Windows Server
• sk106855 - Check Point Gaia OS support for Hyper-V