> Source: [sk1000017](https://support.checkpoint.com/results/sk/sk1000017)

# sk1000017 - Check Point Upgrade Service Engine (CPUSE) Update Check Fails Due to Missing Support Entitlement

| Property | Value |
|----------|-------|
| Solution ID | sk1000017 |
| Date Created | 2026-08-21 |
| Last Modified | 2026-09-09 |
| Technical Level | General |
| Products | Licensing |
| Versions | Not Version-Specific |
| OS | Gaia |

## Symptoms

- * In Gaia Portal, the **Check Point Upgrade Service Engine (CPUSE)** update check fails and shows:  

  *Could not connect to the Check Point Cloud. Check your connection settings (Proxy, DNS, and gateway).*

<!-- -->

* The connectivity tests described in [sk101669](https://support.checkpoint.com/results/sk/sk101669)to the required Check Point Cloud servers succeed.  

<!-- -->

* The Deployment Agent log `/opt/CPInstLog/DeploymentAgent.log` contains entitlement errors similar to:  

  *Currently installed license is not entitled to receive updates from the Check Point download center.
  FDT error: EntitlementEJB:doProductEntitlement() User Product Entitlement Failure.*

<!-- -->

* Run the `cpstat os -f licensing` command on the Security Gateway or Security Management Server where the CPUSE update check fails. The output of the command shows that **Support Level** or **Support Expiration** is empty or expired.

> Example:

```
Account ID:          <User Center ID>
Package description: Check Point xxx Appliance with Sandboxing subscription package for 1 year
Container CK:        <License CK string or appliance Mgmt interface MAC address>
CK Signature:        aJ......Tru
Container SKU:       CPAP-SGxxx
Support level:       
Support expiration:  
Activation status:   2

```

* The solutions documented in [sk181557](https://support.checkpoint.com/results/sk/sk181557) and [sk103433](https://support.checkpoint.com/results/sk/sk103433)do not resolve the issue.

## Cause

CPUSE validates support entitlement before it allowing the download of a packages from the Check Point Download Center.The installed license or associated contract does not contain valid support entitlement information. The **Support Level** or **Support Expiration** fields are missing, expired, or unavailable. As a result, the Deployment Agent rejects the update request. Gaia Portal then displays a generic Check Point Cloud connectivity error.

## Solution

1. Verify that the affected license contains valid support entitlement information.
2. Contact Check Point Account Services through a [Non-Technical Service Request](https://help.checkpoint.com/) and ask them to verify the support entitlement associated with the license.
3. After Account Services updates the entitlement information, wait for synchronization between the User Center and the Security Management Server.  
   **Note**: Customers cannot manually initiate this synchronization.
4. Run: cpstat os -f licensing
5. Confirm that **Support Level** and **Support Expiration** contain valid values.
6. Run the CPUSE update check again.

Additional Information
----------------------

The Security Management Server synchronizes entitlement information with the User Center once per day. According to [SK94064](https://support.checkpoint.com/results/sk/sk94064), the synchronization occurs daily at 23:00. After Account Services updates the entitlement information, the updated Support Level and Support Expiration fields may take several hours to appear on the affected system. Customers cannot manually trigger this synchronization.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content