Checkpoint Endpoint VPN

Hi,


i cannot install the Version 80.61 and 80.62 (Beta, GA Release February 2016) of Checkpoint Software. Always installed as root user.

Anyone has the same issue?


Jan 20 10:39:24 1234 installd[423]: ./postinstall: + exit 1

Jan 20 10:39:24 1234 install_monitor[1693]: Re-included: /Applications, /Library, /System, /bin, /private, /sbin, /usr

Jan 20 10:39:24 1234 installd[423]: PackageKit: releasing backupd

Jan 20 10:39:24 1234 installd[423]: PackageKit: allow user idle system sleep

Jan 20 10:39:24 1234 installd[423]: PackageKit: Install Failed: Error Domain=PKInstallErrorDomain Code=112 "Beim Ausführen der Skripts aus dem Paket „Endpoint_Security_VPN.pkg“ ist ein Fehler aufgetreten." UserInfo={NSFilePath=./postinstall, NSURL=file://localhost/Volumes/Endpoint%20Security%20VPN/Endpoint_Security_VPN.pkg#EPS_VPN.pkg, PKInstallPackageIdentifier=com.checkpoint.pkg.epc, NSLocalizedDescription=Beim Ausführen der Skripts aus dem Paket „Endpoint_Security_VPN.pkg“ ist ein Fehler aufgetreten.} {

NSFilePath = "./postinstall";

NSLocalizedDescription = "Beim Ausf\U00fchren der Skripts aus dem Paket \U201eEndpoint_Security_VPN.pkg\U201c ist ein Fehler aufgetreten.";

NSURL = "file://localhost/Volumes/Endpoint%20Security%20VPN/Endpoint_Security_VPN.pkg#EPS_VPN.pkg";

PKInstallPackageIdentifier = "com.checkpoint.pkg.epc";

}

Jan 20 10:39:24 1234 installd[423]: PackageKit: Running idle tasks

Jan 20 10:39:24 1234 Installer[1666]: install:didFailWithError:Error Domain=PKInstallErrorDomain Code=112 "Beim Ausführen der Skripts aus dem Paket „Endpoint_Security_VPN.pkg“ ist ein Fehler aufgetreten." UserInfo={NSFilePath=./postinstall, NSURL=file://localhost/Volumes/Endpoint%20Security%20VPN/Endpoint_Security_VPN.pkg#EPS_VPN.pkg, PKInstallPackageIdentifier=com.checkpoint.pkg.epc, NSLocalizedDescription=Beim Ausführen der Skripts aus dem Paket „Endpoint_Security_VPN.pkg“ ist ein Fehler aufgetreten.}

Jan 20 10:39:24 1234 installd[423]: PackageKit: Removing client PKInstallDaemonClient pid=1666, uid=0 (/System/Library/CoreServices/Installer.app/Contents/MacOS/Installer)

Jan 20 10:39:24 1234 installd[423]: PackageKit: Done with sandbox removals

Jan 20 10:39:25 1234 Installer[1666]: Install failed: The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.

Jan 20 10:39:25 1234 Installer[1666]: IFDInstallController D2C58C00 state = 8

Jan 20 10:39:25 1234 Installer[1666]: Displaying 'Install Failed' UI.

Jan 20 10:39:25 1234 Installer[1666]: 'Install Failed' UI displayed message:'The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.'.

Jan 20 10:39:26 1234 Installer[1666]: LSExceptions [0x7fa7d2c109c0] unloaded

Replies

any suggestions what can I do?

Hi,


I faced exactly the same issue.


I updated my Mac to OSX 10.11.4 Beta today and after that can't install Checkpoint Endpoint Security.

I tried with all versions: E80.60, E80.61, E80.62 (Beta)


Every time, on the last step of the installation process I see


"The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance."


I the /var/log/system.log I see that's the probleam with kexts signature.


Jan 21 17:42:41 Mateusz-MBP com.apple.kextd[47]: Cache file /System/Library/Caches/com.apple.kext.caches/Directories/System/Library/Extensions/KextIdentifiers.plist.gz is out of date; not using.
Jan 21 17:42:42 Mateusz-MBP com.apple.kextd[47]: Untrusted kexts are not allowed
Jan 21 17:42:42 Mateusz-MBP com.apple.kextd[47]: ERROR: invalid signature for com.checkpoint.cpfw, will not load
Jan 21 17:42:42 Mateusz-MBP mateusz[1416]: Failed to load fw kext, kextload exited with error code: 0
Jan 21 17:42:43 Mateusz-MBP Installer[1364]: The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.
Jan 21 17:42:47 Mateusz-MBP com.apple.kextd[47]: Cache file /System/Library/Caches/com.apple.kext.caches/Startup/KextPropertyValues_OSBundleHelper_x86_64.plist.gz is out of date; not using.
Jan 21 17:42:47 Mateusz-MBP com.apple.kextd[47]: Rescanning kernel extensions.
Jan 21 17:42:47 Mateusz-MBP com.apple.kextd[47]: Cache file /System/Library/Caches/com.apple.kext.caches/Startup/IOKitPersonalities_x86_64.ioplist.gz is out of date; not using.
Jan 21 17:42:47 Mateusz-MBP Screenhero[531]: JS Log: Strophe (1): _dataRecv called
Jan 21 17:42:48 Mateusz-MBP kernel[0]: Resetting IOCatalogue.
Jan 21 17:42:48 Mateusz-MBP com.apple.kextcache[1419]: / locked; waiting for lock.
Jan 21 17:42:48 Mateusz-MBP com.apple.kextd[47]: Untrusted kexts are not allowed
Jan 21 17:42:48 Mateusz-MBP com.apple.kextd[47]: ERROR: invalid signature for com.checkpoint.cpfw, will not load


I'm almost sure that in the previous version of ElCapitan (10.11.3) it worked pretty well, even the E80.60 version. It seems that for some reason, this binary signature is not valid anymore.


I tried to find something about this and there are actually a lot of simillar issues reported around year ago when Yosemite came in. Then Checkpoint released E80.60 which solved this issue.


Shall we expect yet another release for the latest version of ElCapitan?

Hi,


same to me.

Previous version of El Capitain worked great with other Checkpoint version.

I've created a bug report but no feedback yet.

Hi Yaybe,


You created bug report to Apple or Checkpoint? Do you have any link so I can watch for updates as well?

On my side, I posted a thread on Checkpoint's forum here: https://forums.checkpoint.com/forums/thread.jspa?messageID=61898&#61898


I'm just curious, have you faced "Enforce firewall policy failed" during connection as well and then decided to resintall or you just wanted to do a fresh install of Endpoint VPN and it failed?


//EDIT

Temporal workaround is to disable rootless mode in OSX, introduced in ElCapitan. You can do it like here: http://osxdaily.com/2015/10/05/disable-rootless-system-integrity-protection-mac-os-x/


More about rootless: https://www.quora.com/Can-someone-elaborate-on-the-OS-X-10-11-feature-called-Rootless. I tried and:


When disabled, Checkpoint VPN works liek a charm, installing, starting, connecting.

When enabled, I face "Enforce Firewall Policy failed" and when try to reinstall it, it fails on signature validation problem


I guess guys at Checkpoint will publish a new release soon fixing that problem. For the time being, we have to keep rootless mode disabled 😟

Hi,


that's the feedback from Checkpoint.


Hi,


Our client doesn't work with 10.11.4 because of the version2 signing.


We are currently working on updating our client to use version2.

It seems this helps.


disable rootless mode

http://osxdaily.com/2015/10/05/disable-rootless-system-integrity-protection-mac-os-x/