Enabling SmartProvisioning

Activating SmartProvisioning on the Security Management Server

Before you can use SmartProvisioning, you must enable it on the Security Management Server.

To enable SmartProvisioning on the Security Management Server:

1. Obtain a SmartProvisioning license. This license is required to activate SmartProvisioning functionality.
2. Add the license to the Security Management Server or Domain Management Server, with cpconfig or SmartUpdate.

   You can also use the cplic command to add the license.

For Multi-Domain Server, perform these steps also:

1. Enable the Provisioning Blade on the Multi-Domain Server object:
   1. Connect with SmartConsole to the Security Management Server or the applicable Domain Management Server.
   2. In the Gateways & Servers view, double-click the Multi-Domain Server object.
   3. In the General Properties page, go to the Management tab, and select Provisioning.
   4. Click OK.
2. Enable SmartProvisioning on the Multi-Domain Server CLI:
   1. Log in to Expert mode
   2. Go to the context of the applicable Domain Management Server. Run mdsenv <Domain IP address or name>.
   3. Run LSMenabler on

   This message is displayed: Check Point services should be restarted. Restart now (y/n) [y] ?

   Enter y to restart the Check Point services.

Activating SmartProvisioning on a Security Gateway

To manage a gateway with SmartProvisioning, you must first activate SmartProvisioning on the gateway.

To activate SmartProvisioning on a Security Gateway:

1. From the CLI, run these commands in Expert mode:

   LSMenabler -r on

   cpstop

   cpstart

2. Run cpconfig
3. Go to the ROBO Interfaces page and define an External interface.

Note - Small Office Appliance gateways do not require activation of provisioning. This section is relevant for all other gateway types.

Activating SmartProvisioning on CO Gateways

A Corporate Office (CO) gateway represents the center of a Star VPN Community. The satellites can be SmartLSM Security Gateways or Security Profiles.

To enable SmartProvisioning on a CO gateway:

On the Check Point Security Gateway, execute the command in Expert mode:
LSMenabler on