Support Center > Search Results > SecureKnowledge Details
Automatic updates for SmartConsole Technical Level
Solution

Table of Contents

  • Overview
  • Build Number
  • Directory Structure
  • Administrative Permissions
  • Disabling automatic updates
  • Known Limitations
  • Troubleshooting

 

Overview

SmartConsole introduces an automatic update mechanism that keeps SmartConsole updated within the same major version (updatable SmartConsole).

When an updated version is available, it is downloaded and installed automatically in the background without interrupting the current session (except for requiring administrative permissions, see below).

The updated version will be used the next time SmartConsole is launched.

The previous version is kept to allow uninterrupted work by the currently running SmartConsole.

User settings (for example, recently connected servers and their fingerprints) are kept between updated versions.

SmartConsole configuration file (SmartConsole.exe.config) is not preserved during these updates. The previous configuration can be found in the previous version's location (see the "Directory Structure" section below).


Build Number

The build number scheme has changed from a 9-digit number (for example, 995000020) to a 4-number structure (for example, 81.0.9500.20).

The new number appears in the main login window and in the "About" window.


Directory Structure

Each update version (including the originally installed) is installed in a sub-folder in the SmartConsole installation folder (for example, C:\Program Files (x86)\CheckPoint\R81\81.0.9500.20\).

The "PROGRAM" folder (for example, C:\Program Files (x86)\CheckPoint\R81\PROGRAM\) is now a link (an NTFS directory junction) to the latest version.

Note - The two latest update versions are kept in the SmartConsole installation folder.


Administrative Permissions

If SmartConsole is installed in a system-protected folder (for example, "C:\Program Files (x86)"), administrative permissions are required to install the update.


Disabling Automatic Updates

It is possible to disable the automatic SmartConsole updates in one of these ways:

Using a kill-switch in the SmartConsole configuration file:

  1. Open the SmartConsole configuration file SmartConsole.exe.config in an advanced text editor (like Notepad++).
    Example:
    C:\Program Files (x86)\CheckPoint\SmartConsole\R81\PROGRAM\SmartConsole.exe.config
  2. In the <killSwitchSettings>...</killSwitchSettings> section, add this line:
    <add key="ApplicationAutomaticUpdates" value="True"/>
  3. Save the changes in the file.
  4. Close the file.

Using a Windows Registry key:

  1. Click the Start menu (or press the Windows+R keys).
  2. Enter regedit and click that application (in the Run window, click OK).
  3. In the Registry Editor, in the top field, delete the current path and paste this path:
    Computer\HKEY_CURRENT_USER\Software\CheckPoint\ClientUpdate
  4. In the left pane, click this key:
    SmartConsole <Rxx>
    where <Rxx> is a major version.
    Example: SmartConsole R81
  5. In the right pane, right-click an empty space > click New > click DWORD (32-bit) Value.
  6. Enter the name AutomaticUpdateEnabled and press Enter.
  7. Double-click the new key.
  8. In the Value data field, enter 0 and click OK.
  9. Close the Registry Editor.


Known Limitations

SmartConsole must be installed on a local NTFS volume.

When you start a legacy application directly from the SmartConsole installation folder C:\Program Files (x86)\CheckPoint\SmartConsole\, you must start the application from the version folder (for example: C:\Program Files (x86)\CheckPoint\SmartConsole\R81\81.0.9500.5\) and not from the "PROGRAM" folder (for example: C:\Program Files (x86)\CheckPoint\SmartConsole\R81\PROGRAM\).

This prevents a possible unexpected exit of legacy applications while SmartConsole updates itself (Issue ID CIS-3291).


Troubleshooting

  • Problem: Update is not starting long after it has been published

    Possible cause 1: The required "PROGRAM" folder is missing.

    Details: The "PROGRAM" folder (junction) is an essential part of the update mechanism. If it does not exist, the update mechanism cannot work.

    Solution:

    1. Open an elevated Windows Command Prompt (as administrator).

    2. Run this command to create the required symbolic link:

      Important - Enter the path to the actual installation directory and the latest update version on your computer.

      mklink /J "<DISK>:\<INSTALLATION_FOLDER>\PROGRAM" "<DISK>:\<INSTALLATION_FOLDER>\<BUILD>"

      Example for the version R81 and the build 81.0.9500.549:

      mklink /J "C:\Program Files (x86)\CheckPoint\SmartConsole\R81\PROGRAM" "C:\Program Files (x86)\CheckPoint\SmartConsole\R81\81.0.9500.549"
Possible cause 2: 3rd party HTTPS inspection interferes with the connection to DownloadCenter (updates.checkpoint.com).

Details: SmartConsole refuses to create a connection to DownloadCenter (updates.checkpoint.com) if the TLS certificate is different from the expected one.

Symptom: In the file UpdateCheck_*.xml (file name my vary) at C:\ProgramData\Check Point\SmartConsole [version]\ where “State” is “NoInfo” and “UpdateCheckError” is “FDT_COULD_NOT_CONNECT” or “FDT_LOCAL_CERT_PROBLEM”, e.g.

Solution: Disable HTTPS Inspection for traffic to updates.checkpoint.com

  • Problem: "Failure while deserializing object of type" error in Updatable SmartConsole when trying to connect to a Management Server

    Solution: Follow sk123152.

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment