In a CPUSE upgrade scenario, you perform the upgrade procedure on the same Multi-Domain Servers.
Notes:
Important - Before you upgrade:
Step |
Description |
---|---|
1 |
|
2 |
See the Upgrade Options and Prerequisites. |
3 |
In R80 and above, examine the SmartConsole sessions:
|
4 |
In Multi-Domain Server R80 or R80.10 with enabled vSEC Controller:
|
5 |
You must close all GUI clients (SmartConsole applications) connected to the source Multi-Domain Servers. |
Workflow:
Step 1 of 9: If the Primary Multi-Domain Server is not available, promote the Secondary Multi-Domain Server to be the Primary
For instructions, see the R80.20 Multi-Domain Security Management Administration Guide - Chapter Working with High Availability - Section Failure Recovery - Subsection Promoting the Secondary Multi-Domain Server to Primary.
Step 2 of 9: Upgrade the Primary Multi-Domain Server with CPUSE
See Installing Software Packages on Gaia and follow the applicable action plan for the local installation.
Step 3 of 9: Install the R80.20 SmartConsole
Step 4 of 9: On the Primary Multi-Domain Server, install the management database
Step |
Description |
---|---|
1 |
Connect with SmartConsole to each Domain Management Server. |
2 |
In the top left corner, click Menu > Install database. |
3 |
Select all objects. |
4 |
Click Install. |
5 |
Click OK. |
Step 5 of 9: Upgrade the Secondary Multi-Domain Server with CPUSE
See Installing Software Packages on Gaia and follow the applicable action plan for the local installation.
Step 6 of 9: On the Secondary Multi-Domain Server, install the management database
Step |
Description |
---|---|
1 |
Connect with SmartConsole to each Domain Management Server. |
2 |
In the top left corner, click Menu > Install database. |
3 |
Select all objects. |
4 |
Click Install. |
5 |
Click OK. |
Step 7 of 9: Upgrade the Multi-Domain Log Server, dedicated Log Servers, and dedicated SmartEvent Servers
If your Multi-Domain Servers manage Multi-Domain Log Servers, dedicated Log Servers, or dedicated SmartEvent Servers, you must upgrade these dedicated servers to the same version as the Multi-Domain Servers:
Step 8 of 9: On every Multi-Domain Server with Active Domain Management Servers, upgrade the attributes of all managed objects in all Domain Management Servers
To determine which Multi-Domain Servers run Active Domain Management Servers:
The table shows Domains and Multi-Domain Servers:
Procedure:
Step |
Description |
---|---|
1 |
Connect to the command line every Multi-Domain Server that has at least one Active Domain Management Server. |
2 |
Log in with the superuser credentials. |
3 |
Log in to the Expert mode. |
4 |
Make sure that on all Domain Management Servers, none of the required daemons (FWM, FWD, CPD, and CPCA) are in the state "
If some of the required daemons on a Domain Management Server are in the state "
|
5 |
Go to the main MDS context:
|
6 |
Upgrade the attributes of all managed objects in all Domain Management Servers at once:
Notes:
|
7 |
Allow the database synchronization to run:
Restart the Check Point services:
For more information, see sk121718. |
8 |
Make sure that on all Domain Management Servers, none of the required daemons (FWM, FWD, CPD, and CPCA) are in the state "
If some of the required daemons on a Domain Management Server are in the state "
|
Step 9 of 9: Test the functionality
Step |
Description |
---|---|
1 |
Connect with the SmartConsole to the Primary R80.20 Multi-Domain Server. |
2 |
Make sure the management database and configuration were upgraded correctly. |
3 |
Test the Management High Availability functionality. |