Support Center > Search Results > SecureKnowledge Details
How to preserve the Compliance Blade database during the upgrade to R77 / R77.10 / R77.20 / R77.30 / R80 Technical Level
Solution

Show All information in this article

 

Table of Contents:

  • Introduction
  • Procedure for Security Management Server running on Gaia / SecurePlatform / Linux OS
  • Procedure for Security Management Server running on Windows OS
  • Procedure for Multi-Domain Security Management Server

 

Introduction

If you installed the Compliance Blade in a previous release and are upgrading to R77 / R77.10 / R77.20, you must follow the procedure below to preserve the Compliance Blade database during the upgrade to R77 / R77.10 / R77.20.

Upgrade to R80 should performed be in 3 phases:

  1. Upgrade to R77.X version
  2. Follow the relevant procedure below
  3. Upgrade to R80 per sk108623

 

Procedure for Security Management Server running on Gaia / SecurePlatform / Linux OS

Show / Hide instructions

  1. Connect to command line on Security Management Server (over SSH, or console).

  2. Log in to Expert mode.

  3. Backup the current Compliance Blade database files (grc_test_elements.sqlite and grc_controls.sqlite):

    [Expert@HostName]# mkdir /var/log/GRC_DB_BKP/ 
[Expert@HostName]# cp $FWDIR/conf/grc_test_elements.sqlite  /var/log/GRC_DB_BKP
[Expert@HostName]# cp $FWDIR/conf/grc_controls.sqlite  /var/log/GRC_DB_BKP
  4. Upgrade the Security Management Server to R77 (refer to the relevant documentation in sk92965).

  5. Connect to command line on Security Management Server (over SSH, or console).

  6. Log in to Expert mode.

  7. Stop Check Point services:

    [Expert@HostName]# cpstop

  8. Replace the current Compliance Blade database files with the backed up files:

    [Expert@HostName]# cp -f  /var/log/GRC_DB_BKP/grc_test_elements.sqlite  $FWDIR/conf/grc_test_elements.sqlite
[Expert@HostName]# cp -f  /var/log/GRC_DB_BKP/grc_controls.sqlite  $FWDIR/conf/grc_controls.sqlite
  9. Download the cpsqlite3_shell.tar utility to your computer.

  10. Transfer the cpsqlite3_shell.tar file to Security Management Server (into some directory, e.g., /var/log/).

  11. Unpack the cpsqlite3_shell.tar file:

    [Expert@HostName]# cd /var/log/
[Expert@HostName]# tar xvf cpsqlite3_shell.tar

  12. Assign the execute permissions to cpsqlite3_shell utility:

    [Expert@HostName]# chmod u+x /var/log/cpsqlite3_shell

  13. Copy the cpsqlite3_shell utility to $FWDIR/conf/ directory:

    [Expert@HostName]# cp /var/log/cpsqlite3_shell  $FWDIR/conf/

  14. Execute the cpsqlite3_shell utility:

    [Expert@HostName]# cd $FWDIR/conf/
[Expert@HostName]# rm CPMILinksMgr.db*
[Expert@HostName]# ./cpsqlite3_shell  -bail  grc_test_elements.sqlite  "update grc_test_elements set sessionId = '';"
[Expert@HostName]# ./cpsqlite3_shell  -bail  grc_controls.sqlite  "update grc_controls set sessionId = '';"

  15. Only on R77.20: Update the scheme in Check Point database:

    [Expert@HostName]# cpdb scheme_adjust

  16. Start Check Point services:

    [Expert@HostName]# cpstart

  17. Only on R77.10 / R77.20: Convert date formats:

    [Expert@HostName]# interpreter adjust_date_format

 

Procedure for Security Management Server running on Windows OS

Show / Hide instructions

  1. Open Windows Command Prompt.

  2. Backup the current Compliance Blade database files (grc_test_elements.sqlite and grc_controls.sqlite):

    C:\> mkdir C:\GRC_DB_BKP
C:\> copy /V "%FWDIR%\conf\grc_test_elements.sqlite"  "C:\GRC_DB_BKP"
C:\> copy /V "%FWDIR%\conf\grc_controls.sqlite"  "C:\GRC_DB_BKP"
  3. Upgrade the Security Management Server to R77 (refer to the relevant documentation in sk92965).

  4. Open Windows Command Prompt.

  5. Stop Check Point services:

    C:\> cpstop

  6. Replace the current Compliance Blade database files with the backed up files:

    C:\> copy /V  "C:\GRC_DB_BKP\grc_test_elements.sqlite"  "%FWDIR%\conf\grc_test_elements.sqlite"
C:\> copy /V  "C:\GRC_DB_BKP/grc_controls.sqlite"  "%FWDIR%\conf\grc_controls.sqlite"
  7. Download the cpsqlite3_shell.exe utility to your computer.

  8. Transfer the cpsqlite3_shell.exe file to Security Management Server (into some directory, e.g., C:\).

  9. Copy the cpsqlite3_shell.exe utility to %FWDIR%\conf\ directory:

    C:\> copy /V "C:\cpsqlite3_shell.exe"  "%FWDIR%\conf\"

  10. Execute the cpsqlite3_shell.exe utility:

    C:\> cd "%FWDIR%\conf\"
C:\> del CPMILinksMgr.db*
C:\> cpsqlite3_shell.exe  -bail  grc_test_elements.sqlite  "update grc_test_elements set sessionId = '';"
C:\> cpsqlite3_shell.exe  -bail  grc_controls.sqlite  "update grc_controls set sessionId = '';"

  11. Only on R77.20: Update the scheme in Check Point database:

    C:\> cpdb scheme_adjust

  12. Start Check Point services:

    C:\> cpstart

  13. Only on R77.10 / R77.20: Convert date formats:

    C:\> interpreter adjust_date_format

 

Procedure for Multi-Domain Security Management Server

Show / Hide instructions

  1. Connect to command line on Multi-Domain Security Management Server (over SSH, or console).

  2. Log in to Expert mode.

  3. Backup the current Compliance Blade database files (grc_test_elements.sqlite and grc_controls.sqlite):

    Note: perform these steps for each Domain.

    [Expert@HostName]# mkdir /var/log/GRC_DB_BKP/<Domain_Name>/
[Expert@HostName]# mdsenv <Domain_Name>
[Expert@HostName]# mcd
[Expert@HostName]# cp -f $FWDIR/conf/grc_test_elements.sqlite  /var/log/GRC_DB_BKP/<Domain_Name>/
[Expert@HostName]# cp -f $FWDIR/conf/grc_controls.sqlite  /var/log/GRC_DB_BKP/<Domain_Name>/
  4. Upgrade the Multi-Domain Security Management Server to R77 (refer to the relevant documentation in sk92965).

  5. Connect to command line on Multi-Domain Security Management Server (over SSH, or console).

  6. Log in to Expert mode.

  7. Stop the relevant Domain:

    Note: Perform this step for each Domain.

    [Expert@HostName]# mdsstop_customer <Domain_Name>

  8. Replace the current Compliance Blade database files with the backed up files:

    Note: perform these steps for each Domain.

    [Expert@HostName]# mdsenv <Domain_Name>
[Expert@HostName]# mcd
[Expert@HostName]# cp -f  /var/log/GRC_DB_BKP/<Domain_Name>/grc_test_elements.sqlite  $FWDIR/conf/grc_test_elements.sqlite
[Expert@HostName]# cp -f  /var/log/GRC_DB_BKP/<Domain_Name>/grc_controls.sqlite  $FWDIR/conf/grc_controls.sqlite
  9. Download the cpsqlite3_shell.tar utility to your computer.

  10. Transfer the cpsqlite3_shell.tar file to Multi-Domain Security Management Server (into some directory, e.g., /var/log/).

  11. Unpack the cpsqlite3_shell.tar file:

    [Expert@HostName]# cd /var/log/
[Expert@HostName]# tar xvf cpsqlite3_shell.tar

  12. Assign the necessary permissions to cpsqlite3_shell utility:

    [Expert@HostName]# chmod u+x /var/log/cpsqlite3_shell

  13. Copy the cpsqlite3_shell utility to $FWDIR/conf/ directory:

    Note: perform these steps for each Domain.

    [Expert@HostName]# mdsenv <Domain_Name>
[Expert@HostName]# mcd
[Expert@HostName]# cp /var/log/cpsqlite3_shell  $FWDIR/conf/

  14. Execute the cpsqlite3_shell utility:

    Note: perform these steps for each Domain.

    [Expert@HostName]# mdsenv <Domain_Name>
[Expert@HostName]# mcd
[Expert@HostName]# cd $FWDIR/conf/
[Expert@HostName]# rm CPMILinksMgr.db*
[Expert@HostName]# ./cpsqlite3_shell  -bail  grc_test_elements.sqlite  "update grc_test_elements set sessionId = '';"
[Expert@HostName]# ./cpsqlite3_shell  -bail  grc_controls.sqlite  "update grc_controls set sessionId = '';"

  15. Only on R77.20: Update the scheme in Check Point database:

    Note: Perform this step for each Domain.

    [Expert@HostName]# mdsenv <Domain_Name>
[Expert@HostName]# cpdb scheme_adjust

  16. Start the relevant Domain:

    Note: Perform this step for each Domain.

    [Expert@HostName]# mdsstart_customer <Domain_Name>

  17. Only on R77.10 / R77.20: Convert date formats:

    Note: Perform this step for each Domain.

    [Expert@HostName]# mdsenv <Domain_Name>
[Expert@HostName]# interpreter adjust_date_format

  18. Replace the current Compliance Blade database files with the template files in the context of the MDS server:

    1. Stop the MDS server itself:

      [Expert@HostName]# mdsstop -m

    2. Delete the SmartConsole cache:

      [Expert@HostName]# rm -i  $MDSDIR/conf/mdsdb/CPMILinksMgr*

    3. Replace the current Compliance Blade database files:

      [Expert@HostName]# cp -f  $MDS_TEMPLATE/conf/grc_test_elements.sqlite  $MDSDIR/conf/mdsdb/grc_test_elements.sqlite
[Expert@HostName]# cp -f  $MDS_TEMPLATE/conf/grc_controls.sqlite  $MDSDIR/conf/mdsdb/grc_controls.sqlite

    4. Start the MDS server itself:

      [Expert@HostName]# mdsstart -m
Applies To:
  • 01216467

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment