{"id":246,"date":"2009-06-11T15:59:41","date_gmt":"2009-06-11T15:59:41","guid":{"rendered":"https:\/\/fir3netwp.gmsrrpobkbd.com\/2009\/06\/11\/migrate-a-provider-1-cma-to-a-smart-centre-server\/"},"modified":"2023-02-24T13:09:25","modified_gmt":"2023-02-24T13:09:25","slug":"migrate-a-provider-1-cma-to-a-smart-centre-server","status":"publish","type":"post","link":"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html","title":{"rendered":"Check Point: Migrate Provider-1 R55 CMA to R65 Smart Centre Server"},"content":{"rendered":"
\n
Below are the steps required to migrate a Provider-1 CMA to a Smart Centre Server. This tutorial was based on exporting and migrating from R55 to R65 and will involve the following steps,
\n<\/span><\/div>\n
\u00a0<\/span><\/div>\n
1.\u00a0Export the CMA on the Provider-1
\n2.\u00a0Import the CMA into Smart Centre
\n3.\u00a0Export and detach license
\n4.\u00a0Update the Smart Centre Object (IP, Name, and Topology)
\n5.\u00a0Via the CLI reinitialise the Certificate Authority
\n6.\u00a0Import and attach License
\n7.\u00a0Update Package details
\n<\/span><\/div>\n
\u00a0<\/span><\/div>\n
Export the CMA
\n<\/strong><\/span><\/div>\n
<\/div>\n
Note: <\/em>The upgrade_export command is run from the $FWDIR\/bin\/upgrade_tools <\/strong>directory of the CMA.<\/span><\/div>\n
\n

Log into the Provider-1 via SSH and remove the following Links, <\/span>
\n<\/span><\/p>\n

#mdsenv [cma]
\n#rm $FWDIR\/conf\/cp-admins
\n#rm $FWDIR\/conf\/cp-gui-clients
\n#rm $FWDIR\/conf\/packages.c\u00a0<\/span><\/p>\n<\/div>\n

\n

\u00a0Delete the links, (you can find the CMA name\/IP using mdsstat) and then run:<\/span>
\n<\/span><\/p>\n

#mdsenv
\n#mdsstop_customer [cma]
\n#mdsenv [cma]
\n#mcd bin (note the path)
\n#cd upgrade_tools
\n#.\/upgrade_export \/var\/tmp<\/span><\/p>\n<\/div>\n

\n

\u00a0If you want to continue to use the CMA you will need to restore the links. Here are the steps to restore your CMA,<\/span>
\n<\/span><\/p>\n

#mdsstop_customer [cma]
\n#mdsenv [cma]
\n#mcd conf
\n#ln -s \/opt\/CPmds-R55\/conf\/mdsdb\/cp-admins.C cp-admins
\n#ln -s \/opt\/CPmds-R55\/conf\/mdsdb\/cp-gui-clients.C cp-gui-clients
\n#ln -s \/opt\/CPmds-R55\/conf\/mdsdb\/packages.c packages.c
\n#mdsenv
\n#mdsstart_customer [cma]\u00a0<\/span><\/p>\n<\/div>\n

\u00a0\u00a0 <\/span><\/div>\n
Import the CMA in Smart Centre Server<\/strong><\/span><\/div>\n
\u00a0<\/span><\/div>\n
1. Copy the exported CMA to your Smart Centre Server.
\n2. Import the config by using <\/span>$FWDIR\/bin\/upgrade_tools\/upgrade_import [exported_cma].tgz<\/strong>
\n<\/span>3. When asked about the licensing select \u201cNo\u201d.
\n4. Once the import is complete you will find that you receive an error when trying to run cpconfig.
\n5. Run the command <\/span>cd<\/strong> $CPDIR\/conf ; mv inst.conf inst.conf.bak<\/strong><\/span>
\n6. Run cpstart<\/span><\/div>\n
7. Within the Smart Dashboard change the Origin IP of the Manager and select Install Database.<\/div>\n
\u00a0<\/span><\/div>\n
Export and Detach license<\/strong><\/span><\/div>\n
\u00a0<\/span><\/div>\n
1.\u00a0Log into the Smart Centre Server via the Smart Dashboard and goto Smart Update.
\n2.\u00a0Export the license as a file and detach from the Smart Centre Server Object.
\n<\/span><\/div>\n
\u00a0<\/span><\/div>\n
Update the Smart Centre Object
\n<\/strong><\/span><\/div>\n
<\/div>\n
\n
1.\u00a0Edit the Check Point Manager Object to reflect the new Smart Centre details (Name, IP, Tolopolgy and Operating System)<\/span><\/div>\n

2.\u00a0Change the Object Name to that of the Smart Centre`s hostname.
\n<\/span><\/p>\n<\/div>\n

\u00a0<\/span><\/div>\n
Reinitialise the Certificate Authority<\/strong><\/span><\/div>\n

\n1.\u00a0Using cpconfig select the \u201cCertificate Authority\u201d option.
\n2.\u00a0Select \u201cYes\u201d to Reinitialise the CA and use the Smart Centre Object name as the internal CA name.
\n<\/span><\/div>\n
\u00a0<\/span><\/div>\n
Import and attach License<\/strong><\/span><\/div>\n

\n1.\u00a0Re-import the license into the repository and reattach to the Smart centre server.
\n<\/span><\/div>\n
\u00a0<\/span><\/div>\n
Update Package details
\n<\/strong><\/span><\/div>\n
\u00a0<\/span><\/div>\n
1.\u00a0Go into Smart Update and under the Packages tab select \u201cGet Gateway Data\u201d for the Smart Centre Server.
\n2.\u00a0If this option is greyed out, a missing symlink could be missing.
\nTroubleshooting steps can be found by selecting (from toolbar) Packages > Get Data From All.<\/span><\/div>\n
\u00a0<\/span><\/div>\n
Final Steps<\/strong>
\n<\/span><\/div>\n
<\/div>\n
1. As an additional test of the Smart Centres ICA connectivity select \u201cGet OS\u201d within the Smart Centre Object. If this completes without any dialog then the communication is fine.
\n2. Then re-push the policy from your new manager to your firewalls.
\n<\/span><\/div>\n
\u00a0<\/span><\/div>\n
Additional Reources<\/strong> :\u00a0 CheckPoint KB : SK22867 \u2013 \u201cPeer Sent Wrong DN\u201d – Useful for ICA issues.<\/span><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Below are the steps required to migrate a Provider-1 CMA to a Smart Centre Server. This tutorial was based on exporting and migrating from R55 to R65 and will involve the following steps, \u00a0 1.\u00a0Export the CMA on the Provider-1 2.\u00a0Import the CMA into Smart Centre 3.\u00a0Export and detach license 4.\u00a0Update the Smart Centre Object … Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17],"tags":[],"yoast_head":"\nCheck Point: Migrate Provider-1 R55 CMA to R65 Smart Centre Server<\/title>\n<meta name=\"description\" content=\"Below are the steps required to migrate a Provider-1 CMA to a Smart Centre Server. This tutorial was based on exporting and migrating from R55 to R65 and\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Check Point: Migrate Provider-1 R55 CMA to R65 Smart Centre Server\" \/>\n<meta property=\"og:description\" content=\"Below are the steps required to migrate a Provider-1 CMA to a Smart Centre Server. This tutorial was based on exporting and migrating from R55 to R65 and\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html\" \/>\n<meta property=\"og:site_name\" content=\"Fir3net\" \/>\n<meta property=\"article:published_time\" content=\"2009-06-11T15:59:41+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-02-24T13:09:25+00:00\" \/>\n<meta name=\"author\" content=\"Rick Donato\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Rick Donato\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html\"},\"author\":{\"name\":\"Rick Donato\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037\"},\"headline\":\"Check Point: Migrate Provider-1 R55 CMA to R65 Smart Centre Server\",\"datePublished\":\"2009-06-11T15:59:41+00:00\",\"dateModified\":\"2023-02-24T13:09:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html\"},\"wordCount\":527,\"publisher\":{\"@id\":\"https:\/\/www.fir3net.com\/#organization\"},\"articleSection\":[\"Check Point Firewalls\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html\",\"url\":\"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html\",\"name\":\"Check Point: Migrate Provider-1 R55 CMA to R65 Smart Centre Server\",\"isPartOf\":{\"@id\":\"https:\/\/www.fir3net.com\/#website\"},\"datePublished\":\"2009-06-11T15:59:41+00:00\",\"dateModified\":\"2023-02-24T13:09:25+00:00\",\"description\":\"Below are the steps required to migrate a Provider-1 CMA to a Smart Centre Server. This tutorial was based on exporting and migrating from R55 to R65 and\",\"breadcrumb\":{\"@id\":\"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.fir3net.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\/\/www.fir3net.com\/security\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Firewalls\",\"item\":\"https:\/\/www.fir3net.com\/security\/firewalls\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Check Point Firewalls\",\"item\":\"https:\/\/www.fir3net.com\/security\/firewalls\/check-point\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Check Point: Migrate Provider-1 R55 CMA to R65 Smart Centre Server\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.fir3net.com\/#website\",\"url\":\"https:\/\/www.fir3net.com\/\",\"name\":\"Fir3net\",\"description\":\"Keeping you in the know\",\"publisher\":{\"@id\":\"https:\/\/www.fir3net.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.fir3net.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.fir3net.com\/#organization\",\"name\":\"Fir3net\",\"url\":\"https:\/\/www.fir3net.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png\",\"contentUrl\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png\",\"width\":390,\"height\":88,\"caption\":\"Fir3net\"},\"image\":{\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037\",\"name\":\"Rick Donato\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g\",\"caption\":\"Rick Donato\"},\"description\":\"Rick Donato is a Network Automation Architect\/Evangelist and the founder of Packet Coders.\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Check Point: Migrate Provider-1 R55 CMA to R65 Smart Centre Server","description":"Below are the steps required to migrate a Provider-1 CMA to a Smart Centre Server. This tutorial was based on exporting and migrating from R55 to R65 and","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html","og_locale":"en_US","og_type":"article","og_title":"Check Point: Migrate Provider-1 R55 CMA to R65 Smart Centre Server","og_description":"Below are the steps required to migrate a Provider-1 CMA to a Smart Centre Server. This tutorial was based on exporting and migrating from R55 to R65 and","og_url":"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html","og_site_name":"Fir3net","article_published_time":"2009-06-11T15:59:41+00:00","article_modified_time":"2023-02-24T13:09:25+00:00","author":"Rick Donato","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Rick Donato","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html#article","isPartOf":{"@id":"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html"},"author":{"name":"Rick Donato","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037"},"headline":"Check Point: Migrate Provider-1 R55 CMA to R65 Smart Centre Server","datePublished":"2009-06-11T15:59:41+00:00","dateModified":"2023-02-24T13:09:25+00:00","mainEntityOfPage":{"@id":"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html"},"wordCount":527,"publisher":{"@id":"https:\/\/www.fir3net.com\/#organization"},"articleSection":["Check Point Firewalls"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html","url":"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html","name":"Check Point: Migrate Provider-1 R55 CMA to R65 Smart Centre Server","isPartOf":{"@id":"https:\/\/www.fir3net.com\/#website"},"datePublished":"2009-06-11T15:59:41+00:00","dateModified":"2023-02-24T13:09:25+00:00","description":"Below are the steps required to migrate a Provider-1 CMA to a Smart Centre Server. This tutorial was based on exporting and migrating from R55 to R65 and","breadcrumb":{"@id":"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.fir3net.com\/Firewalls\/Check-Point\/migrate-a-provider-1-cma-to-a-smart-centre-server.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.fir3net.com\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/www.fir3net.com\/security"},{"@type":"ListItem","position":3,"name":"Firewalls","item":"https:\/\/www.fir3net.com\/security\/firewalls"},{"@type":"ListItem","position":4,"name":"Check Point Firewalls","item":"https:\/\/www.fir3net.com\/security\/firewalls\/check-point"},{"@type":"ListItem","position":5,"name":"Check Point: Migrate Provider-1 R55 CMA to R65 Smart Centre Server"}]},{"@type":"WebSite","@id":"https:\/\/www.fir3net.com\/#website","url":"https:\/\/www.fir3net.com\/","name":"Fir3net","description":"Keeping you in the know","publisher":{"@id":"https:\/\/www.fir3net.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.fir3net.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.fir3net.com\/#organization","name":"Fir3net","url":"https:\/\/www.fir3net.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png","contentUrl":"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png","width":390,"height":88,"caption":"Fir3net"},"image":{"@id":"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037","name":"Rick Donato","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g","caption":"Rick Donato"},"description":"Rick Donato is a Network Automation Architect\/Evangelist and the founder of Packet Coders."}]}},"_links":{"self":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/246"}],"collection":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/comments?post=246"}],"version-history":[{"count":1,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/246\/revisions"}],"predecessor-version":[{"id":3478,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/246\/revisions\/3478"}],"wp:attachment":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/media?parent=246"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/categories?post=246"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/tags?post=246"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}