Step 2: Installing the SGM Image

Use one of these procedures to install an image on the Security GatewayClosed Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. Modules (SGMs):

  • Using an ISO image on a removable media (DVD or USB)

  • Using a snapshot import

Installing the SGM Image from a Removable Media

You can install an ISO image on the SGMs from a USB stick or DVD.

To copy the ISO image to a removable media:

Step

Instructions

1

Download the ISO image file from the R80.20SP Home Page.

2

Copy the file to a removable media in one of these ways:

  • Burn the ISO file to a DVD.

  • Download the Check Point ISOmorphic tool to create a bootable USB device from the ISO. See sk65205.

    Make sure that your USB device is compatible with ISOmorphic. See sk92423 for details.

3

You can install many SGMs at one time.

Copy the ISO image to many USB sticks or DVDs.

To install an ISO image on the SGMs:

Step

Instructions

1

Connect the removable media to the left-most SGM on the Scalable Platform in one of these ways:

  • Connect the USB stick to the USB port.

  • Connect an external DVD drive to the USB port. Put the DVD with the ISO file in the DVD drive.

2

Connect the supplied DB9 serial cable to the console port on the front of the left-most SGM on the Scalable Platform.

3

Connect to the left-most SGM using a terminal emulation program.

4

Reboot the SGM by partially sliding it out and immediately pushing it back in place:

  1. Loosen the thumb screws at the top and bottom of the SGM.

  2. Open the latches at the top and bottom of the SGM.

  3. Partially slide out the SGM.

  4. Pushe back the SGM.

  5. Fasten the latches.

  6. Tighten the thumb screws.

5

When the first screen appears in the terminal emulation program, select Install Gaia on the system and press Enter.

Important - If you do not press Enter within 60 seconds, SGM starts from the hard drive.

The timer countdown stops once you press Enter.

There is no time limit for the subsequent steps.

6

Press OK to continue with the installation.

After the installation, the Scalable Platform begins the boot process, and status messages appear in the terminal emulation program.

7

Install the SGM image on the other SGMs.

To install on one SGM at a time, repeat all the steps for each SGM.

To install on many SGMs at the same time:

  1. Insert all the USB sticks or DVD drives into the USB ports of the other SGMs.

  2. Follow these steps for one SGM at a time:

    1. Connect over the console port to the SGM.

    2. Reboot the SGM by partially sliding it out and immediately pushing it back in place.

    3. Select Install Gaia on the system and press Enter.

Example:

Item

Description

1

USB port

2

One of two latches for extracting and inserting the SGM

Upgrading the SGM220 BIOS Firmware

To upgrade the BIOS:

Step

Instructions

1

Copy the BIOS file (the file name contains the string "hpm1bios").

2

Connect to the SGM over the SSH or console.

3

Go to the directory with the BIOS file.

4

Upgrade the BIOS firmware:

ipmitool hpm upgrade <BIOS Firmware File> [all]

See the example below.

Note - When the firmware update modifies the device ID, the ipmitool must include the "all" parameter.

5

Load the default CMOS settings from the new BIOS image uploaded before:

ipmitool raw 0x2e 0x81 0x39 0x28 0x00

See the example below.

6

Reboot the SGM in one of these ways:

  • Sliding it out and immediately push it back in place

  • Run this command from the SGM that runs as the SMOClosed See "SMO".:

    ccutil restart_sgm sgm_number

7

Repeat the upgrade process for the backup BIOS firmware.

To see the SGM firmware file, go to this directory:

$FWDIR/conf/hw_firmware/SGM220/

Example:

# ipmitool hpm upgrade 5322H120_cp_a20_hpm1bios.img all
 
PICMG HPM.1 Upgrade Agent 1.0.2:
 
Validating firmware image integrity...OK
Performing preparation stage...
Services may be affected during upgrade. Do you wish to continue? y/n y
OK
 
Performing upgrade stage:
 
-------------------------------------------------------------------------------
|ID | Name. ....|  Versions..........   |    Upload Progress  | Upload| Image |
|   |           | Active| Backup| File  |0%     50%    100%   | Time  | Size  |
|---|-----------|-------|-------|-------||----+----+----+----||-------|-------|
|*4 |5322 BIOSS |  1.10 |  1.00 |  1.20 ||                   || 12.18 | 20001c|
-------------------------------------------------------------------------------
(*) Component requires Payload Cold Reset
 
Firmware upgrade procedure successful
 
# ipmitool raw 0x2e 0x81 0x39 0x28 0x00
 39 28 00