> Source: [sk183032](https://support.checkpoint.com/results/sk/sk183032)

# sk183032 - Policy installation in SmartConsole fails with "SIC error no. 117"

| Property | Value |
|----------|-------|
| Solution ID | sk183032 |
| Date Created | 2025-01-14 |
| Last Modified | 2025-01-15 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82, R81.20, R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- * Policy installation in SmartConsole fails with:

  `Installation failed. Reason: SIC is not initialized at the peer [ SIC error no. 117 ] check that peer SIC is configured, and that is has a valid SIC certificate.`
* The `$CPDIR/log/cpd.elg` file on the Security Gateway contains these lines:

  `SIC Error for amon: Server could not find authentication method, method returned deny for service amon. Peer is: cp_mgmt`

  `SIC Error for InstallPolicy: Server could not find authentication method, method returned deny for service InstallPolicy. Peer is: cp_mgmt`

  `SIC Error for RemoteLicense: Server could not find authentication method, method returned deny for service RemoteLicense. Peer is: cp_mgmt`

  `SIC Error for EntitlementManager: Client could not choose an authentication method for service EntitlementManager`
* Pulling the SIC certificate under debug on the Security Gateway from its Management Server:

  `[Expert@GW_HostName:0]cp_pull_cert -d -h <IP Address of Management Server> -n <Name of Security Gateway Object>`

  shows these lines:

  `SIC initialization started`  
  `
  ...`  
  `
  Pulling certificate from management`  
  `
  CPSIC Error: Could not receive the SIC certificate from SmartCenter Server`  
  `
  Error is: Connection error`  
  `
  ...`  
  `
  Failed to pull certificate for context_id 0`
* Traffic capture on the Management Server on the TCP ports 18211, 18210, and 18192 shows that the required traffic does not arrive from the Security Gateway when pulling the SIC certificate.

## Cause

Communication from the Security Gateway to the Management Server to the TCP ports 18211, 18210, and 18192 is blocked by some network device between the Security Gateway and the Management Server.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content