Friday, November 6, 2015

Checkpoint Smartcenter -- issues with installed plugins

Sometimes you may have problems performing the Install database command to an external Management container (Log Server, ...).
the error message you may get is :

Management Database installation failed for Security Gateway xxxxxx ...
Installation failed. Reason:  Update CONF failed: The plug-ins that are installed on the Security Management Server do not match the plug-ins that are installed on the Log Server.


this message means that the Smartcenter and the other system have different plugins installed.
SK93367 explains what to do.

First check which plugins are installed:


  1. fwm ver
  2. rpm -qa | grep CPPI
if plugins are different you may need to remove them

Please note what is reported by Checkpoint:


  • When uninstalling the plugin there is a preuninstall that must be run. The syntax for the preuninstall is provided when running rpm -e <Package Name>
    For example: /opt/CPPIsfwR75-R75.40/bin/uacRunner -p PIsfwr75 -preuninstall
    After running this command and receiving the message that it is okay to uninstall the plugin, run the rpm -e command again to remove the package.

  • In the PICPmgmtredR75 package, there is a typo in the preuninstall command from the RPM.The RPM states to run the command:  /opt/CPPICPmgmtres-R75.40/bin/uacRunner -p PICPmgmtres -preuninstall
    The command should be: /opt/CPPICPmgmtres-R75.40/bin/uacRunner -p PICPmgmtrfesR75 -preuninstall

  • In the PIsfwr74 package, there is a typo in the preuninstall command from the RPM.The RPM states to run the command: /opt/CPPIsfwR75-R75.40/bin/uacRunner -p PIsfwr75-preuninstall
    The command should be: /opt/CPPIsfwR75-R75.40/bin/uacRunner -p PIsfwr75 -preuninstall

No comments:

Post a Comment