Show All information in this article
Table of Contents:
-
Introduction
-
Procedure for Security Management Server running on Gaia / SecurePlatform / Linux OS
-
Procedure for Security Management Server running on Windows OS
-
Procedure for Multi-Domain Security Management Server
Introduction
If you installed the Compliance Blade in a previous release and are upgrading to R77 / R77.10 / R77.20, you must follow the procedure below to preserve the Compliance Blade database during the upgrade to R77 / R77.10 / R77.20.
Upgrade to R80 should performed be in 3 phases:
- Upgrade to R77.X version
- Follow the relevant procedure below
- Upgrade to R80 per sk108623
Procedure for Security Management Server running on Gaia / SecurePlatform / Linux OS
Show / Hide instructions
- Connect to command line on Security Management Server (over SSH, or console).
- Log in to Expert mode.
-
Backup the current Compliance Blade database files (grc_test_elements.sqlite
and grc_controls.sqlite
):
[Expert@HostName]# mkdir /var/log/GRC_DB_BKP/
[Expert@HostName]# cp $FWDIR/conf/grc_test_elements.sqlite /var/log/GRC_DB_BKP
[Expert@HostName]# cp $FWDIR/conf/grc_controls.sqlite /var/log/GRC_DB_BKP
- Upgrade the Security Management Server to R77 (refer to the relevant documentation in sk92965).
- Connect to command line on Security Management Server (over SSH, or console).
- Log in to Expert mode.
-
Stop Check Point services:
[Expert@HostName]# cpstop
-
Replace the current Compliance Blade database files with the backed up files:
[Expert@HostName]# cp -f /var/log/GRC_DB_BKP/grc_test_elements.sqlite $FWDIR/conf/grc_test_elements.sqlite
[Expert@HostName]# cp -f /var/log/GRC_DB_BKP/grc_controls.sqlite $FWDIR/conf/grc_controls.sqlite
- Download the
cpsqlite3_shell.tar
utility to your computer.
- Transfer the
cpsqlite3_shell.tar
file to Security Management Server (into some directory, e.g., /var/log/
).
-
Unpack the cpsqlite3_shell.tar
file:
[Expert@HostName]# cd /var/log/
[Expert@HostName]# tar xvf cpsqlite3_shell.tar
-
Assign the execute permissions to cpsqlite3_shell
utility:
[Expert@HostName]# chmod u+x /var/log/cpsqlite3_shell
-
Copy the cpsqlite3_shell
utility to $FWDIR/conf/
directory:
[Expert@HostName]# cp /var/log/cpsqlite3_shell $FWDIR/conf/
-
Execute the cpsqlite3_shell
utility:
[Expert@HostName]# cd $FWDIR/conf/
[Expert@HostName]# rm CPMILinksMgr.db*
[Expert@HostName]# ./cpsqlite3_shell -bail grc_test_elements.sqlite "update grc_test_elements set sessionId = '';"
[Expert@HostName]# ./cpsqlite3_shell -bail grc_controls.sqlite "update grc_controls set sessionId = '';"
-
Only on R77.20: Update the scheme in Check Point database:
[Expert@HostName]# cpdb scheme_adjust
-
Start Check Point services:
[Expert@HostName]# cpstart
-
Only on R77.10 / R77.20: Convert date formats:
[Expert@HostName]# interpreter adjust_date_format
Procedure for Security Management Server running on Windows OS
Show / Hide instructions
- Open Windows Command Prompt.
-
Backup the current Compliance Blade database files (grc_test_elements.sqlite
and grc_controls.sqlite
):
C:\> mkdir C:\GRC_DB_BKP
C:\> copy /V "%FWDIR%\conf\grc_test_elements.sqlite" "C:\GRC_DB_BKP"
C:\> copy /V "%FWDIR%\conf\grc_controls.sqlite" "C:\GRC_DB_BKP"
- Upgrade the Security Management Server to R77 (refer to the relevant documentation in sk92965).
- Open Windows Command Prompt.
-
Stop Check Point services:
C:\> cpstop
-
Replace the current Compliance Blade database files with the backed up files:
C:\> copy /V "C:\GRC_DB_BKP\grc_test_elements.sqlite" "%FWDIR%\conf\grc_test_elements.sqlite"
C:\> copy /V "C:\GRC_DB_BKP/grc_controls.sqlite" "%FWDIR%\conf\grc_controls.sqlite"
- Download the
cpsqlite3_shell.exe
utility to your computer.
- Transfer the
cpsqlite3_shell.exe
file to Security Management Server (into some directory, e.g., C:\
).
-
Copy the cpsqlite3_shell.exe
utility to %FWDIR%\conf\
directory:
C:\> copy /V "C:\cpsqlite3_shell.exe" "%FWDIR%\conf\"
-
Execute the cpsqlite3_shell.exe
utility:
C:\> cd "%FWDIR%\conf\"
C:\> del CPMILinksMgr.db*
C:\> cpsqlite3_shell.exe -bail grc_test_elements.sqlite "update grc_test_elements set sessionId = '';"
C:\> cpsqlite3_shell.exe -bail grc_controls.sqlite "update grc_controls set sessionId = '';"
-
Only on R77.20: Update the scheme in Check Point database:
C:\> cpdb scheme_adjust
-
Start Check Point services:
C:\> cpstart
-
Only on R77.10 / R77.20: Convert date formats:
C:\> interpreter adjust_date_format
Procedure for Multi-Domain Security Management Server
Show / Hide instructions
- Connect to command line on Multi-Domain Security Management Server (over SSH, or console).
- Log in to Expert mode.
-
Backup the current Compliance Blade database files (grc_test_elements.sqlite
and grc_controls.sqlite
):
Note: perform these steps for each Domain.
[Expert@HostName]# mkdir /var/log/GRC_DB_BKP/<Domain_Name>/
[Expert@HostName]# mdsenv <Domain_Name>
[Expert@HostName]# mcd
[Expert@HostName]# cp -f $FWDIR/conf/grc_test_elements.sqlite /var/log/GRC_DB_BKP/<Domain_Name>/
[Expert@HostName]# cp -f $FWDIR/conf/grc_controls.sqlite /var/log/GRC_DB_BKP/<Domain_Name>/
- Upgrade the Multi-Domain Security Management Server to R77 (refer to the relevant documentation in sk92965).
- Connect to command line on Multi-Domain Security Management Server (over SSH, or console).
- Log in to Expert mode.
-
Stop the relevant Domain:
Note: Perform this step for each Domain.
[Expert@HostName]# mdsstop_customer <Domain_Name>
-
Replace the current Compliance Blade database files with the backed up files:
Note: perform these steps for each Domain.
[Expert@HostName]# mdsenv <Domain_Name>
[Expert@HostName]# mcd
[Expert@HostName]# cp -f /var/log/GRC_DB_BKP/<Domain_Name>/grc_test_elements.sqlite $FWDIR/conf/grc_test_elements.sqlite
[Expert@HostName]# cp -f /var/log/GRC_DB_BKP/<Domain_Name>/grc_controls.sqlite $FWDIR/conf/grc_controls.sqlite
- Download the
cpsqlite3_shell.tar
utility to your computer.
- Transfer the
cpsqlite3_shell.tar
file to Multi-Domain Security Management Server (into some directory, e.g., /var/log/
).
-
Unpack the cpsqlite3_shell.tar
file:
[Expert@HostName]# cd /var/log/
[Expert@HostName]# tar xvf cpsqlite3_shell.tar
-
Assign the necessary permissions to cpsqlite3_shell
utility:
[Expert@HostName]# chmod u+x /var/log/cpsqlite3_shell
-
Copy the cpsqlite3_shell
utility to $FWDIR/conf/
directory:
Note: perform these steps for each Domain.
[Expert@HostName]# mdsenv <Domain_Name>
[Expert@HostName]# mcd
[Expert@HostName]# cp /var/log/cpsqlite3_shell $FWDIR/conf/
-
Execute the cpsqlite3_shell
utility:
Note: perform these steps for each Domain.
[Expert@HostName]# mdsenv <Domain_Name>
[Expert@HostName]# mcd
[Expert@HostName]# cd $FWDIR/conf/
[Expert@HostName]# rm CPMILinksMgr.db*
[Expert@HostName]# ./cpsqlite3_shell -bail grc_test_elements.sqlite "update grc_test_elements set sessionId = '';"
[Expert@HostName]# ./cpsqlite3_shell -bail grc_controls.sqlite "update grc_controls set sessionId = '';"
-
Only on R77.20: Update the scheme in Check Point database:
Note: Perform this step for each Domain.
[Expert@HostName]# mdsenv <Domain_Name>
[Expert@HostName]# cpdb scheme_adjust
-
Start the relevant Domain:
Note: Perform this step for each Domain.
[Expert@HostName]# mdsstart_customer <Domain_Name>
-
Only on R77.10 / R77.20: Convert date formats:
Note: Perform this step for each Domain.
[Expert@HostName]# mdsenv <Domain_Name>
[Expert@HostName]# interpreter adjust_date_format
-
Replace the current Compliance Blade database files with the template files in the context of the MDS server:
-
Stop the MDS server itself:
[Expert@HostName]# mdsstop -m
-
Delete the SmartConsole cache:
[Expert@HostName]# rm -i $MDSDIR/conf/mdsdb/CPMILinksMgr*
-
Replace the current Compliance Blade database files:
[Expert@HostName]# cp -f $MDS_TEMPLATE/conf/grc_test_elements.sqlite $MDSDIR/conf/mdsdb/grc_test_elements.sqlite
[Expert@HostName]# cp -f $MDS_TEMPLATE/conf/grc_controls.sqlite $MDSDIR/conf/mdsdb/grc_controls.sqlite
-
Start the MDS server itself:
[Expert@HostName]# mdsstart -m
Applies To: