> Source: [sk180924](https://support.checkpoint.com/results/sk/sk180924)

# sk180924 - Security Group Member goes into a boot loop when added to a Security Group in which image auto cloning is enabled

| Property | Value |
|----------|-------|
| Solution ID | sk180924 |
| Date Created | 2023-04-30 |
| Last Modified | 2023-05-02 |
| Technical Level | General |
| Products | Scalable Platforms |
| Versions | R81.20, R81.10 (EOS) |
| OS | Gaia |

## Symptoms

- * When you add a new Security Group Member to a Security Group in which image auto cloning is enabled, the Security Group Member goes into a boot loop.

* The procedure in [sk180418](https://support.checkpoint.com/results/sk/sk180418) does not resolve the issue.

## Solution

[Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing it.  
For faster resolution and verification, collect these files:

1. [CPinfo](https://support.checkpoint.com/results/sk/sk92739) file from the Management Server involved in the case.
2. [CPinfo](https://support.checkpoint.com/results/sk/sk92739) file from the Security Gateway / each Cluster Member involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://support.checkpoint.com/results/sk/sk168597).

*** ** * ** ***

This **workaround**is available:

1. Disable image auto cloning on the Single Management Object (SMO). This stops the boot loop on the newly added Security Group Member   
   `gclish> set smo image auto-clone state off`  

2. Backup the `/usr/lib/smo/libclone.tcl` file:  
   `# cp /usr/lib/smo/libclone.tcl{,.ORIG}`  

3. Change these lines in the `/usr/lib/smo/libclone.tcl` file on the SMO:  

   **from** :  
   `proc update_image_md5 {} {`  
   ` infunc`  
   ` set md5_list [get_image_md5_list]`  
   ` save_md5 $md5_list`  
   ` outfunc`  
   `}`  

   **to** :  
   `proc update_image_md5 {} {`  
   ` infunc`  
   ` clog "ps -o ppid= -p [pid]" ppid`  
   ` clog "ps -o comm= -p $ppid" parent_command`  
   ` if {$parent_command != "DAService"} {`  
   ` set md5_list [get_image_md5_list]`  
   ` save_md5 $md5_list`  
   ` }`  
   ` outfunc`  
   `}`  

4. Copy the file to all Security Group Members:  
   `# asg_cp2blades -a /usr/lib/smo/libclone.tcl`

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content