> Source: [sk171399](https://support.checkpoint.com/results/sk/sk171399)

# sk171399 - Error: "Disabling self protection Failed turning off self protection". prevents January 1st, 2021 patch from being installed

| Property | Value |
|----------|-------|
| Solution ID | sk171399 |
| Date Created | 2021-01-04 |
| Last Modified | 2021-01-06 |
| Technical Level | General |
| Products | Endpoint Security |
| Versions | Cloud, E89.X, E88.X, R82.20, R82.10, R82, R81.20 |
| OS | Windows |

## Symptoms

- The following error is displayed in *C:\\Windows\\Internet Logs\\EP_CDTDll.log* :

```
Disabling self protection
Failed turning off self protection
```

## Cause

Missing Root CA certificate

## Solution

### If you have connectivity to the Internet

Show / Hide this section  
If you fail to install EPPatcher_for_users, look for the "Failed turning off self protection" error message in your logs, under "*C:\\Windows\\Internet Logs\\EP_CDTDll.log* ".  

![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk171399/epp1202101042138591.png)  

In case the error exists:  

1. First, verify the certificate is not missing from the Root CA (administrative privileges are not required)  
   - Open CMD  
   - Run this command "*certutil.exe -store root \| findstr GlobalSign* "  
   - Expected output (if the certificate is not missing):  
   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk171399/epp2x202101042203131.png)  

   If the certificate is missing, remediate by including it as a Root CA:  
   * Open CMD (administrative privileges are required)
   * Run this command: "*certutil.exe -addstore root GlobalSign.cer* "  
     - Extract the .cer file from the EPPatcher_for_users.  
     ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk171399/epp3202101042145263.png)  

     ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk171399/epp4202101042145454.png)  

     Click "Copy to File" and follow the wizard to save the *GlobalSign.cer* file.  

2. If none of the above helps, [contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/).

### If you do not have connectivity to the Internet

Refer to [sk171254](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk171254).

<br />

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content