> Source: [sk71000](https://support.checkpoint.com/results/sk/sk71000)

# sk71000 - First Time Configuration Wizard on Check Point appliances

| Property | Value |
|----------|-------|
| Solution ID | sk71000 |
| Date Created | 2012-04-13 |
| Last Modified | 2025-05-02 |
| Technical Level | General |
| OS | Gaia |
| Platform | Smart-1, 15000, 3000, 5000, 20, 400, 7000, 28000, 9000, LightSpeed QLS, 16000, 26000, 19000, 29000, 6000, TE |

## Solution

**Table of Contents:**

* Background
* Getting Started Guides
* Using the First Time Configuration Wizard
* Running the First Time Configuration Wizard again
* Disabling / bypassing the First Time Configuration Wizard
* HCP Reports: Gaia First Time Configuration Wizard failed due to missing '/etc/.wizard\*' files

### Background {#TOC01}

When installing a new Check Point appliance, or resetting the Check Point appliance to factory defaults, or booting another image on the Check Point appliance for the first time, it is mandatory to run the First Time Configuration Wizard.

The Wizard presents a number of windows, in which you configure the Date and Time, Network Connections, Routing, DNS Servers, Host and Domain Name, and Deployment Type. The features configured in the Wizard are accessible after completing the Wizard via the WebUI.

### Getting Started Guides {#TOC02}

Refer to the relevant **Quick Start Guide** and **Getting Started Guide** for your appliance in [sk96246 - Documentation For Check Point Appliances](https://support.checkpoint.com/results/sk/sk96246).

### Procedure for Using the First Time Configuration Wizard {#TOC03}

The basic steps are:

1. Connect a standard network cable to the appliance's Management interface and to your management network. This interface is preconfigured with the IP address 192.168.1.1.

2. Connect to the management interface by connecting from a computer on the same network subnet as the Management interface (for example, with IP address 192.168.1.x and net mask 255.255.255.0). This can be changed later in Gaia Portal or Gaia Clish.

3. To access the administration interface, initiate a connection from a browser to the default administration IP address:

   `https://192.168.1.1`

   **Note:** Pop-ups must always be allowed for `https://<IP Address of Appliance>`.
4. The login page appears. Log in with the default system administrator credentials:

   * Login name: `admin`
   * Password: `admin`

   Click on **Login**.
5. Change the administrator password, as prompted. The default password is provided to you only to allow access to the appliance for the first time. For security purposes, you must change it to a more secure password.

6. The First Time Configuration Wizard runs. Perform all the necessary configuration steps. Check the settings that appear on the Summary page.

   In addition, in Gaia OS you can check the relevant log file - `/var/log/ftw_install.log`
7. Click **Finish** to complete the First Time Configuration Wizard. The appliance will automatically restart (this may take several minutes).

|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| **Important Note:** Upon completing the initial configuration, the First Time Configuration Wizard creates the following special (empty) files on the appliance: |-----------------|------------------------------------------------------| | Version         | Syntax to Create the File                            | | R80 and above   | 1. `/etc/.wizard_accepted` 2. `/etc/.wizard_started` | | R75.40 - R77.30 | * `/etc/.wizard_accepted`                            | Existence of these files is checked each time the user tries to configure the appliance. |

### Procedure for Running the First Time Configuration Wizard Again {#TOC04}

If for some reason the user needs to run the First Time Configuration Wizard again, then perform these steps:

**Important Note** : If this appliance was configured as **Security Gateway** , then it is **not** recommended to reconfigure it as **Standalone** because after performing the below activity and configuring it as a Standalone you will see **Security Management Server** status as **"Attention"** in SmartConsole / SmartView Monitor with these messages "`Error: 'Security Management Server' is not responding. Verify that 'Security Management Server' is installed on the gateway. If 'Security Management Server' should not be installed verify that it is not selected in the Products List of the gateway (SmartDashboard > Security Gateway > General Properties > Software Blades List).`"

1. Connect to the command line on the appliance.

2. Log in to the Expert mode:

   `expert`
3. Back up the current files:

   `mv -v /etc/.wizard_accepted{,_BKP}`

   `mv -v /etc/.wizard_started{,_BKP}`

   Note: To restore the First Time Wizard and return to the normal Gaia Portal, run:

   `cp -v /etc/.wizard_accepted_BKP /etc/.wizard_accepted`

   `cp -v /etc/.wizard_started_BKP /etc/.wizard_started`
4. **Important Note:** If this appliance was configured as Security Management Server, and user will reconfigure the appliance to be **only** the Security Gateway, then you must remove these files from the appliance (otherwise, intermittent SIC issues (e.g., '`SIC error no. 147`') will arise during policy installation onto this Security Gateway):

   `rm -i $FWDIR/conf/ICA.crl`

   `rm -i $FWDIR/conf/InternalCA.*`
5. Next time user logs into Gaia Portal, the First Time Configuration Wizard starts automatically.

   **Note:** The credentials for Gaia Portal are **not** reset to the default.

### Procedure for Disabling/ Bypassing the First Time Configuration Wizard {#TOC05}

If for some reason the user needs to disable/bypass the First Time Configuration Wizard, then perform these steps:

1. Connect to the command line on the appliance.

2. Log in to the Expert mode:

   `expert`
3. Create the special file(s):

   |-----------------|------------------------------------------------------------------|
   | Gaia OS Version | Syntax to Create the File                                        |
   | R80 and above   | 1. `touch /etc/.wizard_accepted` 2. `touch /etc/.wizard_started` |
   | R75.40 - R77.30 | * `touch /etc/.wizard_accepted`                                  |

4. Next time user logs into the Gaia Portal, the First Time Configuration Wizard does **not** start automatically.

   **Note:** The credentials for Gaia Portal are **not** reset to the default.

### Procedure for resolving HCP error: Gaia First Time Configuration Wizard failed due to missing '/etc/.wizard\*' files: {#TOC06}

If you run HCP report and see this error regarding "wizard" files are missing that means the Security Gateway was probably created prior to R80 and is missing one of the two files R80 and above are looking for. To add the missing file, perform these steps:

1. Connect to the command line on the appliance.

2. Log in to the Expert mode and check to see if both these files exist.

   `expert`  
   ` # ls -la /etc/.wizard*`  
   You should see 2 files:   
   `/etc/.wizard_accepted`  
   `
   /etc/.wizard_started
   `
3. Create either of the missing files:

   |-----------------|------------------------------------------------------------------|
   | Gaia OS Version | Syntax to Create the File                                        |
   | R80 and above   | 1. `touch /etc/.wizard_accepted` 2. `touch /etc/.wizard_started` |

4. Next time HCP report runs, the First Time Configuration Wizard test will show as **Passed**.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content
