> Source: [sk170923](https://support.checkpoint.com/results/sk/sk170923)

# sk170923 - CPCA process is down on MDS level in environments with OPSEC integration 

| Property | Value |
|----------|-------|
| Solution ID | sk170923 |
| Date Created | 2020-12-09 |
| Last Modified | 2020-12-10 |
| Technical Level | Advanced |
| Products | Multi-Domain Security Management Server |
| Versions | R81 (EOS) |
| OS | Gaia |
| Platform | Smart-1 |

## Symptoms

- * CPCA process is down on the MDS level and only the following lines can be found in the log file:   
  `[cpca ...]@Host[DATE TIME] fwCA::IsDbChanged: no database change. tag is 140 `  
  `[cpca ...]@Host[DATE TIME] FwCaCmdCa::Process: entered state=7 `  
  `[cpca ...]@Host[DATE TIME] fwca_server_end_handler: connection ended. sock=17 `  
  `[cpca ...]@Host[DATE TIME] fwca_quit_sig: exiting on signal 2 `  

  `[cpca ...]@Host[DATE TIME] http_file_init_callback: The http post server has stoped to listen. `  
  `[cpca ...]@Host[DATE TIME] http_mgmt_callback: The http post server has stoped to listen. `  
  `[cpca ...]@Host[DATE TIME] http_get2_callback: The http Get server has stoped to listen. `  
  `[cpca ...]@Host[DATE TIME] http_post_register_callback: got certificate request. `  
  `[cpca ...]@Host[DATE TIME] http_post_register_callback: The http post server has stoped to listen. `  
  `[cpca ...]@Host[DATE TIME] http_post_external_cmd_callback: got command request. `  
  `[cpca ...]@Host[DATE TIME1] http_post_external_cmd_callback: The http post server has stoped to listen. `  
  `[cpca ...]@Host[DATE TIME] http_get_callback: The http Get server has stoped to listen. `  
  `[cpca ...]@Host[DATE TIME] IcaDBManager::CloseDB: succeeded `  
  `[cpca ...]@Host[DATE TIME] fwCA::End: ended `  
  `[cpca ...]@Host[DATE TIME] destroy_rand_mutex: destroy `  

  `[cpca ...]@Host[DATE TIME] cpca: Tue Sep 22 01:31:46 2020 `  

  `fwd child 6859 exiting `  

* LEA spawning is enabled on the Global domain, even if the OPSEC queries only the CMA's:  
  `[Expert@HostName:0]# mdsenv`  
  `
  [Expert@HostName:0]# grep Spawn_LEA $CPDIR/registry/HKLM_registry.data`  
  `
  :Spawn_LEA ("[4]1")`  

* Starting CPCA in debug mode with '-d' flag does not print any error that can indicate this cause.

## Cause

The enabled LEA spawning on the global level causes the CPCA child process to fail to start by FWD daemon.

<br />

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content