Support Center > Search Results > SecureKnowledge Details
How to upgrade CloudGuard Management version in AWS, Azure or GCP Technical Level
Solution

Table of Contents:

  • Introduction
  • Prerequisites
  • Procedure

Introduction

This guide explains how to upgrade SmartCenter Management (MGMT) server deployed in AWS, Azure or GCP.

Note: To upgrade a Management Server deployed in AWS from R77.30 to R80.10 or higher, see sk118717.

Prerequisites

    • Source Machine: MGMT server version R80.10 and higher
    • Target Machine: MGMT server version R80.20 and higher
    • If you use a BYOL license that is not related to your elastic/public IP, you will need to request a new license before proceeding with the instructions below. 

Procedure

1. Copy the Management Server migration tools to the source machine.

2. Export the source server DB.

3. Import the DB to the target server.

4. Associate the source elastic/public IP to the target server IP.

5.  Copy the CME from the source server to target server.

6. Attach the correct license to the target machine.

Note: Make sure that the target VM has connectivity to the Gateways it will manage.

    1. Copy the Management Server migration tools to the source machine.

    A. In the source machine, create a dedicated folder to extract the MGMT DB (do not extract or copy migration files to the folder /home/admin). 

    B. Go to the home page SecureKnowledge articles of the target version and download the migration tools to the source dedicated folder (created in step #1). 

    Note: You cannot copy the migration tools from the target machine.

    Below is the location of the migration tools for R80.20 in sk122485

    2. Export the source server DB

    A. Log into expert mode in the source machine. 

    B. Under the migration tools via 'tar -zxvf Check_point_XXX.tgz' export the MGMT DB without the license files by running this command in the dedicated folder:  './migrate export --exclude-licenses FULL_PATH_OF_DESTINATION.tgz'

    Notes:

    • Excluding license flags is available only from R80.20 Jumbo Hotfix Take_73.
    • If you see PUV errors, refer to the relevant MGMT documentation.

    3. Import the DB to the target server.

      A. In the target machine, create a dedicated /tmp folder for the extract DB (do not extract or copy DB files to the folder /home/admin). 

      B. Copy the exported DB files to the Target machine in your /tmp folder. 

      C. Log in to expert mode in the target machine. 

      D. In the target machine, go to: cd $FWDIR/bin/upgrade_tools

      E. Run the following command on the target machine: './migrate import FULL_PATH.tgz'

      (FULL_PATH = temp folder where you extracted the DB in the target machine)

      4. Associate the source elastic/public IP to the target server IP.

      For AWS:

      Show / Hide this section

       

      For Azure:

      Show / Hide this section

       

      For GCP:

      Show / Hide this section

       

      5. Copy the CME from the source server to target server.

        1. Follow the instruction from sk157492 to install the latest version of CME on the target Management Server.

        2. Make sure that the service is registered on the target machine 'service autoprovision status' (see that the service exists and, perhaps, is UP/DOWN.

        Note: When upgrading from R80.10 to a higher version, if the Management Server manages a scalet set/auto scaling group, scale-in to 0 instances and scale-out. When upgrading a GCP Management Server that manages a GCP AutoScaling solution with outbound inspection use-case, make sure to adjust the routes according to the new instances.

          6. Attach the correct license to the target machine.

            • PAYG: No need to attach the license.
            • BYOL:  If the license is attached to a private IP, you will need to request a new license for the new private IP in the new MGMT. Otherwise, use the license from the source machine.
          This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

          Give us Feedback
          Please rate this document
          [1=Worst,5=Best]
          Comment