• Adding or removing a Security Gateway / VSX Gateway / VSX Virtual System / Cluster object.
• Enabling or disabling a Software Blade in a Security Gateway / VSX Gateway / VSX Virtual System / Cluster object.
• Activating or deactivating Best Practice tests on 'Compliance' tab.

1. Switch to the context of MDS:
   
   [Expert@HostName]# mdsenv
[Expert@HostName]# mcd
   
   
2. Copy the license file cp.macro
   from the $CPDIR/conf/ directory in the context of MDS
   to the $CPDIR/conf/ directory in the context of Domain:
   
   [Expert@HostName]# cp  /opt/CPshrd-R75.40/conf/cp.macro  /opt/CPmds-R75.40/customers/<Domain_Name>/CPshrd-R75.40/conf/cp.macro
   
   
3. Restart all Check Point services on Multi-Domain Security Management Server:
   
   [Expert@HostName]# mdsstop
[Expert@HostName]# mdsstart

Note: The following shell script can be used to automate this process:

#!/bin/sh
mdsenv
mcd
for DOMAIN in $($MDSVERUTIL AllCMAs)
    do
        echo "Copying license file into - ${DOMAIN} :"
        cp -v  $CPDIR/conf/cp.macro  $MDSDIR/customers/${DOMAIN}/conf/cp.macro
done
echo "Going to restart the Multi-Domain Security Management Server..."
sleep 3
mdsstop
mdsstart

Relevant only for R75.45:

Refer to sk98651 (Upgrade from R75.45 to a later version fails after R75.45 Compliance Blade hotfix was uninstalled).

Relevant only for R75.47:

Compliance Blade is not able to start the initial scan if the hotfix was installed, uninstalled and then re-installed again (see the steps below):

1. Installed Compliance Blade hotfix for R75.47.
2. Enabled Compliance Blade.
3. Uninstalled Compliance Blade hotfix for R75.47.
4. Re-installed Compliance Blade hotfix for R75.47.
5. Enabled Compliance Blade.
6. Compliance Blade is not able to start the initial scan.

Workaround:

If you uninstalled the Compliance Blade hotfix for R75.47, then you must follow these steps after re-installing the hotfix and before enabling the Compliance Blade.

1. Connect to command line on the Security Management Server / Multi-Domain Security Management Server (over SSH, or console).
2. Log in to Expert mode.
3. Navigate to '$CPDIR/database/downloads/' directory:
   [Expert@HostName]# cd  $CPDIR/database/downloads/
4. Delete the 'GRC' directory:
   [Expert@HostName]# rm -rf  GRC
5. Connect with SmartDashboard to Security Management Server / Domain Management Server.
6. Enable Compliance Blade in the Management Server object.