> Source: [sk183716](https://support.checkpoint.com/results/sk/sk183716) # sk183716 - Enterprise Endpoint Security Hotfixes for E89.x Windows Clients Releases | Property | Value | |----------|-------| | Solution ID | sk183716 | | Date Created | 2025-07-30 | | Last Modified | 2026-10-05 | | Technical Level | General | | Products | Endpoint Security | | Versions | E89.X | | OS | Windows | ## Solution **Introduction \| Hotfix Installation Instructions \| List of Resolved Issues** Introduction {#Introduction} ---------------------------- The endpoint client hotfix mechanism involves a compact set of binary and configuration files that replace the currently installed files. Each hotfix contains only critical, low-risk changes. Hotfixes are automatically applied to all machines with access to the Check Point CDN or a management server that includes the hotfix. They are safe to apply on any client version for both 32-bit and 64-bit operating systems. Hotfixes only apply if changes are required and will replace only the tested files (changes to custom builds will not be applied). The endpoint client periodically checks for available hotfixes. If a new hotfix is detected, it is automatically retrieved from the CDN and applied. The hotfixes can be found at this CDN root: . You can check the status of installed hotfixes in the "Installed Patch" column on the asset management page. Each endpoint may have multiple hotfixes installed, but typically, each new hotfix includes all previously released updates. Hotfix Installation Instructions {#Installation} ------------------------------------------------ Show / Hide this Section Installing a hotfix on a client that is not connected to the internet can be done in two ways: ### 1. Install the hotfix on an on-prem management server {#Toggle_Installation} Uploading the hotfix to the on-premises Endpoint Server will prompt all connected client machines to download and install it. By default, this process takes approximately four hours. 1. Download the `.tgz` archive relevant to your version under the "Package for isolated on-premises environment" column from the downloads table in this page 2. Upload the `.tgz` file to the server: 1. Open connection to the server you wish to change (use winscp or other app). 2. Copy the `.tgz` file to any location on the Endpoint Security Server. 3. Run the following command: `tar -xf && cd && chmod +x serverconfig.sh && ./serverconfig.sh` 3. Repeat all above steps in all connection point servers in your environment ### 2. Install the hotfix on an offline client To manual install update on Endpoint machine : 1. Download the zip file relevant for your version under the "Package for offline clients" column from the downloads table in this page 2. Extract the DLL from the downloaded zip file 3. Run command prompt with administrator privileges 4. On the command prompt console run the following command line: * For 64 bit : `"C:\Program Files (x86)\CheckPoint\Endpoint Security\Endpoint Common\bin\EP_CDT.exe" ` * For 32 bit `"C:\Program Files\CheckPoint\Endpoint Security\Endpoint Common\bin\EP_CDT.exe" ` List of Resolved Issues {#Resolved Issues} ------------------------------------------ ### E89.10 {#Secure Workspace} Show / Hide section |------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------|------------------| | ID | Description | Hotfix ID | Fixed In Version | | AHTP-35297 | Enhanced system stability to prevent potential machine freezes. | E89_10_868910407 | E89.26 | | EPS-63819 | A one-time script disables hibernation on systems with Full Disk Encryption (FDE) installed to prevent potential EFI System Partition (ESP) file system corruption. | E89_10_868910406 | E89.25 | | EPS-62445 | Stability improvement. | E89_10_868910405 | E89.20 | | ESVPN-4785 | Stability improvement. | E89_10_868910401 | E89.20 | {#limitations-Table} |--------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------| | **Package for isolated on-premises environment** | **Package for offline clients** | | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/144851) (TGZ) | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/144852) (DLL) | ### E89.05 {#Secure Workspace} Show / Hide section |------------|------------------------|------------------|------------------| | ID | Description | Hotfix ID | Fixed In Version | | ESVPN-4785 | Stability improvement. | E89_05_868905068 | E89.20 | {#limitations-Table} |--------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------| | **Package for isolated on-premises environment** | **Package for offline clients** | | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/142129) (TGZ) | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/142130) (DLL) | ### E89.00 {#Secure Workspace} Show / Hide section |------------|-------------------------------------------------------------------------------------------------------------------------------------|------------------|------------------| | ID | Description | Hotfix ID | Fixed In Version | | ESVPN-4785 | Stability improvement. | E89_00_868900007 | E89.20 | | AHTP-33353 | In some rare cases, a BSOD might occur during upgrade to a higher version. After restart and upgrade, everything works as expected. | E89_00_868900003 | E89.05 | {#limitations-Table} |--------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------| | **Package for isolated on-premises environment** | **Package for offline clients** | | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/142127) (TGZ) | [![](https://sc1.checkpoint.com/sc/images/download-m.png)](https://support.checkpoint.com/results/download/142128) (DLL) | --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content