Description

When try to install the downloaded IDP signature on an SRX340 cluster we received the below:

error: Security Package installation disabled temporarily due to invalid license.

Symptoms

As we try to install the downloaded IDP signature on an SRX340 cluster we received the below error:
 

error: Security Package installation disabled temporarily due to invalid license.


Meanwhile the show system license display:
 

{primary:node0}

admin@srx-a> show system license 

License usage: 

                         Licenses   Licenses  Licenses  Expiry

 Feature name            used  installed   needed 

 idp-sig                      1      1           0         2024-04-11 02:00:00 CEST

chassis serial number:CXXXXXXXXXX

 

 

{secondary:node1}

admin@srx-b> show system license 

License usage: 

                         Licenses   Licenses  Licenses  Expiry

 Feature name            used  installed   needed 

 idp-sig                       1      1           0  2024-04-11 02:00:00 CEST

chassis serial number:CXXXXXXXXXX

Solution

  • On the Primary Node, enter configuration mode and disable the IDP process:

 

srx# set system processes idp-policy disable

srx# deactivate security idp

srx# commit

 

  • On both nodes, delete the directory from the shell (as root). This will allow you to rebuild the IDP directory:

 

srx> start shell

% rm -r /var/db/idpd

% rm -r /var/db/appid

% rm -r /var/db/ai_cache

 

  • After verifying that the IDP directory is deleted from both nodes, reboot both nodes:

 

% cli

srx> request system reboot

 

  • The reboot of the device will automatically remake the IDP folder/directory. At this point, re-enable the IDP process (idpd) on the Primary Node. You had previously disabled IDP configuration under the security hierarchy.

 

srx> edit

srx# delete system processes idp-policy disable

srx# commit

 

  • Use the following commands to download and reinstall the IDP package on the Primary node:

 

srx> request security idp security-package download full-update

srx> request security idp security-package download status

srx> request security idp security-package install

srx> request security idp security-package install status

 

Continue checking the status. You should see the successful installation message once it is done.

 

  • Once the status shows a success message, re-activate the IDP configuration on the Primary node:

 

srx# activate security idp

srx# commit

Modification History

9/12/2023
Draft