> Source: [sk83200](https://support.checkpoint.com/results/sk/sk83200) # sk83200 - Installation of Gaia R75.45 - R77.30 on IPSO-based IP Series appliances from USB storage device | Property | Value | |----------|-------| | Solution ID | sk83200 | | Date Created | 2012-10-03 | | Last Modified | 2020-07-05 | | Technical Level | General | | OS | Gaia | ## Solution This article covers USB installation of Gaia OS R75.45 - R77.30 on IP Appliances that are running IPSO 6.2. For USB installation of Gaia OS on IP Appliances, which are already running Gaia OS, refer to [sk100686](http://supportcontent.checkpoint.com/solutions?id=sk100686). ### Table of Contents: 1. Supported IP Series appliances and software versions 2. Supported USB storage devices * Workaround A * Workaround B * Workaround C 3. Installation procedure * Necessary files * Step 1. Transfer the Gaia ISO file to the USB drive * Step 2. Install Gaia OS using USB storage device * Step 3. Installing the First appliance using USB storage device * Step 4. Installing the Second and Subsequent appliances using USB storage device * Step 5. Completion * Step 6. After fresh install, run the First Time Configuration Wizard 4. Related solutions (1) Supported IP Series appliances and software versions {#Supported IP Series appliances} ------------------------------------------------------------------------------------------ USB installation of Gaia OS is supported on the IP Series appliances with USB ports: * Supported IP Series appliances: **IP150** , **IP280** , **IP290** , **IP690** , **IP1280** and **IP2450** . * Non-supported IP Series appliances: **IP390** , and **IP560**. **Note:** Only Disk-based appliance are supported with Gaia OS at this time. The following releases support USB installation: R75.45, R75.46 and R76. Releases of the R75.4x line continue to support USB installation. (2) Supported USB storage devices {#Supported USB storage devices} ------------------------------------------------------------------ The following USB storage devices have been tested and worked: * HP USB sticks (8G and 16G tested OK) * Kingston Data Traveler G2 1.00 4GB * Silicon Power 15GB and 16GB * Imation 4GB * PNY 8GB * Sandisk Cruzer 4GB * Gigamon "China" 4GB * Lexar JumpDrive USB Flash Drive 4GB The following USB storage devices have been tested and the following issues were found: > > |-----------------------------------|---------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------| > | USB storage device | Issue | Next Step | > | *Sandisk Cruzer 8G* | Installation script exits, and unit ends up in the Gaia Boot manager. | Refer to Workaround B below. | > | *Sandisk 32G* | Does not work; installation script interprets this USB device as a fixed HDD, and formats it with Gaia file system. | Refer to Workaround C below. | > | *PNY 4G* | Installation script exits, and unit ends up in the Gaia Boot manager. | Refer to Workaround B below. | > | *Kingston DataTraveler G2 16GB* | Works on all IP Series appliances, except IP290. | On IP290 appliance only, refer to Workaround A below. | > | *A-DATA C906 4GB* | Does not work. | None. | > | *Emtec Micro USB Flash Drive 8GB* | Does not work. | None. | **Important Note:** Use USB storage devices, which have only one partition. If a USB storage device was previously used for a third-party application, or is partially encrypted, Check Point ISOmorphic tool will not be able to remove the extraneous partitions, and the installation will fail. > {#Supported USB storage devices - Workaround A}{#Supported USB storage devices - Workaround B}{#Supported USB storage devices - Workaround C} > > |--------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| > | Workaround | Instructions | > | Workaround A | **Issue:** Instead of loading boot manager, IP290 appliance is stuck after 'memtest' when USB storage device is inserted. The workaround for this issue is: 1. Unplug the USB storage device. 2. Wait until 'memtest' completes and boot manager starts loading (approximately 20-25 seconds). 3. Insert USB storage device (before boot manager finishes loading). 4. When installation is complete, remove the USB storage device before restarting the machine, otherwise the machine will get stuck during boot. | > | Workaround B | If you end up at the Gaia Boot Manager prompt during installation, you should remove the USB storage device and then reinsert it. The console should show that the device is recognized, then you can continue the installation by typing *INSTALL* at the boot manager prompt. If the USB storage device is not recognized when reinserted (an I/O error appears on the console), complete the installation using one of the following two methods: 1. Remove the USB storage device and proceed to do installation via FTP server by typing *INSTALL* at the boot manager prompt, and providing FTP credentials. 2. Use the Check Point ISOmorphic tool to configure a supported USB storage device. Insert that USB storage device instead of the original one, and complete the installation by typing *INSTALL* at the boot manager prompt. | > | Workaround C | Some USB storage devices are not properly recognized by the Gaia installation script '*Anaconda* '. During the disk formatting stage, it will overwrite the USB storage device with the Gaia file system. The *Sandisk 32G* USB storage device was found to be affected by this issue. If this issue is encountered, then use Check Point ISOmorphic tool to configure *a supported USB storage device* . Insert that USB storage device instead of the original one, and complete the installation by typing *INSTALL* at the boot manager prompt. | (3) Installation procedure {#Installation procedure} ---------------------------------------------------- * ### Necessary files {#Installation procedure - Necessary files} USB installation is included in the R75.45, R75.46, R76 and later releases. Download the Gaia ISO from the release you are installing. You must also use Check Point ISOmorphic tool build 72 or higher. You can download the most current version of ISOmorphic at this link: [Check Point ISOmorphic tool](http://supportcontent.checkpoint.com/file_download?id=12648). **Note:** Check Point ISOmorphic tool should be installed on a Windows-based machine, which can write data to a USB storage device without requiring the user to encrypt that USB storage device. {#Installation procedure - Necessary files} * ### Step 1. Transfer the Gaia ISO file to the USB drive {#Installation procedure - Step 1} **Note:** The USB storage device should have a storage capacity of at least 4 gigabytes. If several IP Series appliances need to be installed, it is recommended to use a USB storage device with even greater storage capacity - to save the backup files. 1. Copy the Gaia ISO file to the Windows machine, on which the ISOmorphic tool was installed. 2. Run the ISOmorphic tool. 3. Choose the USB storage device, choose the Gaia ISO file. 4. The ISOmorphic tool will automatically copy the Gaia ISO file to the USB storage device.

{#Installation procedure - Step 1} * ### Step 2. Install Gaia OS using USB storage device {#Installation procedure - Step 2} 1. Insert the USB storage device into IP Series appliance. 2. From IPSO CLI, mount the USB storage device by running: ***\[HostName\]# mount -t msdosfs -o rw *DEVICE* /cdrom*** Use the following table to determine the exact '*DEVICE*': |--------|------------| | Model | Device | | IP150 | /dev/da0s1 | | IP280 | /dev/da0s1 | | IP290 | /dev/da0s1 | | IP690 | /dev/da0s1 | | IP1280 | /dev/da1s1 | | IP2450 | /dev/da1s1 |

3. Run the installation script: ***\[HostName\]# cd /cdrom/*** ***\[HostName\]# ./Check_Point_USB_Install_IPSO6.2_to_Gaia*** **Important note:** Do NOT unplug the USB storage device until the Gaia installation is complete. The installation script checks the BIOS version, and if it is not the most recent, offers to upgrade it: * To upgrade later, type '***n*** ' and press Enter. * To upgrade now, type '***y*** ' and press Enter. BIOS will be upgraded, and the appliance will be rebooted. Then repeat Step 2 and Step 3 above - re-mount the USB storage device, and run the installation script again.

{#Installation procedure - Step 2} * ### Step 3. Installing the First appliance using USB storage device {#Installation procedure - Step 3} The installation script asks whether: * to perform a fresh install * to perform an upgrade Select the relevant operation. {#Installation procedure - Step 3} * ### Step 4. Installing the Second and Subsequent appliances using USB storage device {#Installation procedure - Step 4} The installation script asks whether: * to perform a fresh install * to perform an upgrade * to perform an upgrade with answers from date Select the relevant operation. *Clarification* : "*Upgrade with answers from date*" is an option, which only shows up after the first time you use the memory stick. The answers, which were given previously (on the date shown) are stored, and can be selected for use if you want to replicate all the same answers on subsequent installations. {#Installation procedure - Step 4} * ### Step 5. Completion {#Installation procedure - Step 5} The installation script installs the IPSO-to-Gaia upgrade package and completes the chosen operation (fresh install, or upgrade). An IP Series appliance will be automatically rebooted to start the Gaia installation. **Warning:** If "An upgrade with answers from date" operation was chosen, part of this operation runs in the background, and the user is returned to the shell before it completes. **Do not perform any activity on the appliance until it reboots**. **Notes:** * For **upgrades** - backup files, the upgrade verifier reports, and an auto-install IPSO package are automatically saved to the USB storage device. For fresh installs - backup files are automatically saved to the USB storage device. Since the backup files can be rather large, saving them to USB storage device may take some time (5-10 minutes). For this reason, the installation script will show the size of the backup files, and will ask whether to proceed. It is recommended to confirm to save the backup files, unless these have been already saved as part of normal system maintenance. * For **fresh installs** - one of the interfaces is automatically configured with the IP address *192.168.1.1 / 24* . This mimics the behavior of the installer on other Check Point appliances. The assumption is that there will be a local computer on the 192.168.1.0 / 24 subnet to configure the appliance using First Time Configuration Wizard. During the First Time Configuration Wizard, that interface can be configured with the desired IP address. The IP Series appliance will reboot again upon completion of Gaia OS installation. **Now, the USB storage device can be unplugged**. {#Installation procedure - Step 5} * ### Step 6. After fresh install, run the First Time Configuration Wizard {#Installation procedure - Step 6} 1. Log in via CLI with user name '*admin* ' and password '*admin* '. 2. Choose the most convenient step (2A, or 2B below) for configuring/identifying the relevant interface, through which you will later connect to the Gaia Portal to go through First Time Configuration Wizard: 1. **Identify an existing interface with default assigned IP address 192.168.1.1:** 1. Switch from CLISH to Expert mode: ***HostName\> expert*** 2. Identify the name of the interface that has been auto-configured with IP address 192.168.1.1: ***\[HostName\]# cat /etc/sysconfig/newsystem.conf***

2. **Choose an interface and configure it with desired IP address:** 1. Assign an IPv4 address to the desired interface in CLISH: ***HostName\> set interface INTERFACE_NAME ipv4-address *IP_ADDRESS* mask-length *SUBNET_MASK_LENGTH_in_BITS**** 2. Set the relevant Default Gateway in CLISH: ***HostName\> set static-route default nexthop gateway address *IP_ADDRESS_OF_DEFAULT_GATEWAY* on***

3. Connect a computer to the interface from previous step. 4. Configure the computer with an IP address on the same subnet as the interface from previous step. *Examples*: * If you used an existing interface with default assigned IP address 192.168.1.1 / 24, then configure the computer with any IP address from that subnet - e.g., 192.168.1.33 / 24. * If you chose and configured an interface with a desired IP address - e.g., 20.20.20.22 / 24, then configure the computer with any IP address from that subnet - e.g., 20.20.20.44 / 24.

5. Open a Web browser, and connect to Gaia Portal: * If you used an existing interface with default assigned IP address 192.168.1.1 / 24, then connect to ***https://192.168.1.1*** . * If you chose and configured an interface with a desired IP address - e.g., 20.20.20.22 / 24, then connect to ***https://20.20.20.22***.

6. Login to Gaia Portal with user name '*admin* ' and password '*admin* '. 7. Complete the First Time Configuration Wizard to configure this IP Series appliance. {#Installation procedure - Step 6} (4) Related solutions {#Related solutions} ------------------------------------------ * [sk65205 - How to install SecurePlatform/Gaia from a USB device on Check Point appliances and Open Servers](http://supportcontent.checkpoint.com/solutions?id=sk65205) --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content