Support Center > Search Results > SecureKnowledge Details
Recommended fix for CPUSE Agent builds lower than 342 (on R75.40, R75.40VS, R75.45, R75.46, and R76)
Symptoms
  • This solution describes an important fix related to Gaia CLI Legacy installation and to CPUSE Agent.

  • This solution applies to any version of Gaia OS with CPUSE Agent builds lower than 342 (R75.40, R75.40VS, R75.45, R75.46, R76).

  • The machine fails to boot after installing any Check Point Hotfix package and rebooting.
    The following message is displayed from Check Point Process Manager:

    Initializing CP Process Manager.
    No response from 'pm' after a few seconds, it may have problems. FAILED

  • "CLINFR0819  USER: admin denied access via CLI" error is displayed when trying to log in (over SSH, or console) after installing a hotfix and rebooting.

Solution

Table of Contents:

  • Background
  • Known scenarios
  • To prevent a potential boot problem after installing any Check Point Hotfix package and rebooting
  • To resolve the boot problem after installing any Check Point Hotfix package and rebooting
  • Notes

 

Background

 

Known scenarios

  1. Installing, uninstalling and then installing the same hotfix again (using either Gaia Software Updates, or Gaia CLI Legacy installation).

  2. A rare case: Installing a hotfix that changes some files, and then installing another hotfix that changes some of those files, but another hotfix does not add a new file (will only happen when using Gaia CLI Legacy installation).

 

To prevent a potential boot problem after installing any Check Point Hotfix package and rebooting

Important: The improved build of Gaia Software Updates Agent build 342 is integrated in R75.47.

Install updated version of Gaia Software Updates Agent - build 502 or higher.

An updated version of Gaia Software Updates Agent can be installed in two ways:

  • Download and install via Gaia Portal (requires Internet connection):

    1. Connect with your web browser to Gaia Portal.
      Supported browsers are listed in sk92668.

    2. In Gaia Portal, go to 'Software Updates' pane - click on 'Status and Actions'.


    3. The updated version of Gaia Software Updates Agent should appear in the table as:

      Package Status Size Available From
      DeploymentAgent_<version>.tgz Available for Download <size> MB <date time>
      where <version> should be 000000502 or higher.

      1. In order to be able to perform operations on 'Status and Actions' page, it is necessary to obtain lock over the configuration database in Gaia Portal (by clicking on the lock icon at the top - near 'Sign Out').

      2. Click on the DeploymentAgent_<version>.tgz package - click on Download button.

      3. When the download is complete - click on Install button.


    4. Verify that the Gaia Software Updates Agent was updated by running the following command in Expert mode:

      [Expert@HostName]# cpvinfo /opt/CPda/bin/DAService | grep 'Build'

      Output should show 502 or higher.


  • Download and install manually:

    1. Download the package with updated version of Gaia Software Updates Agent from sk92449  Check Point Upgrade Service Engine (CPUSE) - Gaia Deployment Agent - section "(3) Latest build of CPUSE and What's New".

    2. Transfer the updated Gaia Software Updates Agent package (DeploymentAgent_<version>.tgz) to Gaia machine into /some_path_to_updated_DA/ directory.

    3. UnPack the Gaia Software Updates Agent package:

      [Expert@HostName]# cd /some_path_to_updated_DA/
      [Expert@HostName]# tar -xvfz DeploymentAgent_<version>.tgz

    4. Stop the Gaia Software Updates Agent service:

      [Expert@HostName]# $DADIR/bin/dastop
      [Expert@HostName]# dbget installer:stop

    5. Install the updated Gaia Software Updates Agent RPM:

      [Expert@HostName]# rpm -Uhv --force CPda-00-00.i386.rpm

    6. Start the Gaia Software Updates Agent:

      [Expert@HostName]# $DADIR/bin/dastart

    7. Verify that the Gaia Software Updates Agent was updated:

      [Expert@HostName]# cpvinfo /opt/CPda/bin/DAService | grep 'Build'

      Output should show 502 or higher.

 

To resolve the boot problem after installing any Check Point Hotfix package and rebooting

Follow these steps:

  1. Reboot the machine (power cycle).

  2. During the boot, press any key to get into Boot Menu.

    Note: By default, user has only 5 seconds to press any key.

  3. Select the 'Start in maintenance mode' and press Enter.

  4. Type the Admin password and press Enter.

  5. When the shell loads, run the following commands to create the /tmp directory and assign the relevant permissions to it:

    sh-3.1# mkdir -v /tmp
    sh-3.1# (ls -l / | grep 'tmp') || (echo 'No such directory')
    sh-3.1# chmod -v a=rwx /tmp
    sh-3.1# ls -l / | grep 'tmp'

    Manual pages:
    • sh - Bourne shell
    • mkdir - create directory
    • ls - list directory contents / list files
    • grep - print lines matching a pattern
    • echo - display a line of text
    • chmod - change file mode bits


  6. Reboot the machine:

    sh-3.1# reboot

  7. Let the machine boot normally ('Start in normal mode').

  8. Install updated version of Gaia Software Updates Agent - build 342 or higher, as described above.

 

Notes

  • If you upgrade to R75.46 using CPUSE, then you do not need to re-install the updated version of Gaia Software Updates Agent.

  • If you upgrade to R75.46 / R76 via Legacy CLI, then you must re-install the updated version of Gaia Software Updates.

  • The updated version of CPUSE Agent (which contain the fix for this issue) was integrated into Check Point R75.47.

This solution is about products that are no longer supported and it will not be updated

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment