Support Center > Search Results > SecureKnowledge Details
SecurID configuration files (/var/ace/sdopts.rec and sdconf.rec) are deleted on policy installation Technical Level
Symptoms
  • SecurID configuration files (/var/ace/sdopts.rec and sdconf.rec) are deleted on policy installation.
  • SecurID is configured on the Security Gateway (not through the Security Management Server).
  • The issue occurs after the user installs R80.30.
Cause
Security Management overrides the files even though no file was uploaded to it. 


Solution
This problem was fixed. The fix is included in: Check Point recommends to always upgrade to the most recent version.

For lower versions, the following workaround is available:
- The following procedure includes inevitable downtime (refer to step # 7). 
  1. Back up the $CPDIR/tmp/.CPprofile.sh file. 
  2. Add the following line to the file: vi $CPDIR/tmp/.CPprofile.sh
  3. export VAR_ACE=/var/ace2
  4. Save
  5. Place the good securid files in /var/ace2
  6. Verify permissions.
  7. cpstop/cpstart
Note: For a VSX, this procedure has to be done on the particular VS. For a cluster environment, this procedure has to be done on each cluster member.
This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.
Applies To:
  • This article replaces sk115878.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment