A Fix for Checkpoint SecureClient VPN on Mac OS X 10.6 Snow Leopard
Posted on 03 September 2009
We all remember, once Leopard was out it took Checkpoint quite a long time to update their VPN client. Now Snow Leopard is out and it begins …
After installing Snow Leopard, Checkpoints SecureClient refuses to install and if already installed (through an upgrade) it won’t start at all.
I did some investigation and I finaly made it working since Apple hasn’t changed too much.
1. The Checkpoint installer refuses to install
The installer checks up for the Darwin Kernel version 9. In Snow Leopard we have version 10. So two files need to be edit within the installer package.
- just right click on the installer and select Show Package Contents. This opens finder within the package.
- go to Contents/Resources.
- open TextEdit, use vi in a shell or whatever you prefer to edit a simple file
- on file “InstallationCheck” change the number 9 in line 8 to number 10: if [ "$MAJOR" != "10" ]; then
- same on file “postinstall “ change the number 9 in line 84 to number 10
That’s it. Just install it and reboot. Changes need to make afterwards in order to have it starting.
2. SecureClient fails to start
Now this gets just a bit more tricky. Apple has moved some options of kextload to kextutil in 10.6. Checkpoint hardcoded such an option -s in two binary files. This option is to create the symbol files in the Checkpoint directory. It does not exist anymore in kextload, and is now provided in kextutil. But creating the symbol files is only needed for debug reasons, so not really necessary. Therefore I only replaced the option -s with option -r to fill up the space, because the binary file should not change in size. Two binary files have to be changed with an hexeditor.
Preparation:
- Download and install a hexeditor. 0xED is one of it.
- After inserting the first command, it will ask you for your local user password (User needs Administrator permission)
- Open the terminal application from Utilities folder and type:.
sudo cp /opt/CPsrsc-50/bin/StartupItemsMgr $HOME/Desktop
sudo cp /opt/CPsrsc-50/boot/SecureClient/SecureClientStarter /$HOME/Desktop
sudo chown $USER /$HOME/Desktop/StartupItemsMgr
sudo chown $USER /$HOME/Desktop/SecureClientStarter - Now run 0xED and choose File/Open Files from the Menu to load the StartupItemsMgr and SecureClientStarter from your Desktop in it.
- From Menu Edit choose Find/Find or just press Apple-F and type in to find: “kextload -s” and type in replace “kextload -v”
Click on Replace All
Save and close … - Now once you succeeded editing copy those back by typing in the terminal window:
sudo cp $HOME/Desktop/StartupItemsMgr /opt/CPsrsc-50/bin/
sudo cp $HOME/Desktop/SecureClientStarter /opt/CPsrsc-50/boot/SecureClient/
rm $HOME/Desktop/StartupItemsMgr
rm $HOME/Desktop/SecureClientStarter - Reboot and you should have SecureClient starting …
Its also possible to change the installer package itself. This makes it easier if you have a lot of Macs.
Please let me know if this did help.
Update1: There is an EarlyAvailable Version for Snow Leopard (32bit) by now. It won’t need all these steps and even more some small issues are solved in there. You can apply to the EA Program and could get the download almost immediately with a vaild support contract.
Update2: Finally, Checkpoint released its VPN client to the public. You can download it here: SecureClient NG-AI R56 HFA 2 for Mac OS X 10.6 (Snow Leopard) It works fine, so just (clean) uninstall your old VPN Client and install the new one.
295 responses to A Fix for Checkpoint SecureClient VPN on Mac OS X 10.6 Snow Leopard
Tanks!
It work perfectly on my MAC Book Pro 15′
Works like a charm!
Many thanks!
Thanks that helped
Now stuck on part 2
I can get the StartupItemsMgr to mount on my dektop but when typing in the command to get SecureClientStarter I get the response ‘No Such File or Directory’
any suggetions?
could you double check the command you typed on terminal:
this one right:
sudo cp /opt/CPsrsc-50/boot/SecureClient/SecureClientStarter /$HOME/Desktop
correct, that is the command line i typed and get, no such file or directory, also get same response when typing in
sudo chown $USER /$HOME/Desktop/SecureClientStarter
The checkpoint installer did somehow not copy all files. You might need to run Checkpoint Deinstaller (In AppDir) and clean up the left files with:
sudo rm -rf /opt/CPsrsc-50
sudo rm -rf /private/var/db/receipts/com.checkpoint.secureclient.R56.bom
sudo rm -rf /private/var/db/receipts/com.checkpoint.secureclient.R56.plist
sudo rm -rf /Library/Receipts/SecureClient_B634000031_1.pkg/
Also make sure the last line is the name of the installer file. Then start over.
srry to be so needy, followed the steps as above however on re-installing after re-start it would appear that the secure client has not reinstalled at all. No evidence of any SecureClient software at all!!!
Tried a re-install, went through the motions and appeared to re-install but on re-start, nothing, very odd.
Got this installer log
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: @(#)PROGRAM:Install PROJECT:Install-572
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: @(#)PROGRAM:Installer PROJECT:Installer-430.1
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: Hardware: MacBook4,1 @ 2.40 GHz (x 2), 2048 MB RAM
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: Running OS Build: Mac OS X 10.6.1 (10B504)
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: Env: PATH=/usr/bin:/bin:/usr/sbin:/sbin
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: Env: TMPDIR=/var/folders/jy/jyCYdCSFFr0ZaEAQ8-C+3++++TI/-Tmp-/
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: Env: SHELL=/bin/bash
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: Env: HOME=/Users/Brian
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: Env: USER=Brian
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: Env: LOGNAME=Brian
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: Env: DISPLAY=/tmp/launch-Bt2mrG/:0
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: Env: SSH_AUTH_SOCK=/tmp/launch-howVfV/Listeners
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: Env: Apple_PubSub_Socket_Render=/tmp/launch-KmrY3j/Render
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: Env: COMMAND_MODE=unix2003
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: Env: __CF_USER_TEXT_ENCODING=0x1F5:0:0
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: Check Point VPN-1 SecureClient R56 B634000017 Installation Log
Sep 16 09:48:16 brian-laframboises-macbook Installer[269]: Opened from: /Users/Brian/Desktop/SecureClient_B634000017_1 3.pkg
Sep 16 09:48:33 brian-laframboises-macbook runner[285]: Administrator authorization granted.
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: ================================================================================
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: User picked Standard Install
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: Choices selected for installation:
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: Upgrade: “Check Point VPN-1 SecureClient R56 B634000017″
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: SecureClient_B634000017_1 3.pkg : com.checkpoint.secureclient.R56 : 0.0.0.1.0
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: ================================================================================
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: It took 0.00 seconds to summarize the package selections.
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: -[IFPKGDerivedDocument sortedPackageLocations]: result = (\n “file://localhost”\n)
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: -[IFDInstallController(Private) _buildInstallPlan]: location = file://localhost
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: -[IFDInstallController(Private) _buildInstallPlan]: file://localhost/Users/Brian/Desktop/SecureClient_B634000017_1%203.pkg
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: Will use PK session
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: Starting installation:
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: Configuring volume “Macintosh HD”
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: Preparing disk for local booted install.
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: Free space on “Macintosh HD”: 125.86 GB (125858164736 bytes).
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: Create temporary directory “/var/folders/jy/jyCYdCSFFr0ZaEAQ8-C+3++++TI/-Tmp-//Install.269m43gst”
Sep 16 09:48:36 brian-laframboises-macbook Installer[269]: IFPKInstallElement (1 packages)
Sep 16 09:48:37 brian-laframboises-macbook installd[289]: PackageKit: —– Begin install —–
Sep 16 09:48:37 brian-laframboises-macbook installd[289]: PackageKit: request=PKInstallRequest
Sep 16 09:48:37 brian-laframboises-macbook installd[289]: PackageKit: packages=(\n “PKJaguarPackage “\n)
Sep 16 09:48:37 brian-laframboises-macbook installd[289]: PackageKit: Extracting /Users/Brian/Desktop/SecureClient_B634000017_1 3.pkg/Contents/Archive.pax.gz (destination=/var/folders/zz/zzzivhrRnAmviuee+++++++++++/-Tmp-/PKInstallSandbox-tmp/Root/tmp/SecureClientInstaller, uid=0)
Sep 16 09:48:39 brian-laframboises-macbook installd[289]: PackageKit: Shoving /var/folders/zz/zzzivhrRnAmviuee+++++++++++/-Tmp-/PKInstallSandbox-tmp/Root (1 items) to /
Sep 16 09:48:39 brian-laframboises-macbook installd[289]: Installed “Check Point VPN-1 SecureClient R56 B634000017″ ()
Sep 16 09:48:39 brian-laframboises-macbook installd[289]: PackageKit: —– End install —–
Sep 16 09:48:40 brian-laframboises-macbook Installer[269]: Removing temporary directory “/var/folders/jy/jyCYdCSFFr0ZaEAQ8-C+3++++TI/-Tmp-//Install.269m43gst”
Sep 16 09:48:40 brian-laframboises-macbook Installer[269]: Finalize disk “Macintosh HD”
Sep 16 09:48:40 brian-laframboises-macbook Installer[269]: Notifying system of updated components
Sep 16 09:48:40 brian-laframboises-macbook Installer[269]:
Sep 16 09:48:40 brian-laframboises-macbook Installer[269]: **** Summary Information ****
Sep 16 09:48:40 brian-laframboises-macbook Installer[269]: Operation Elapsed time
Sep 16 09:48:40 brian-laframboises-macbook Installer[269]: —————————–
Sep 16 09:48:40 brian-laframboises-macbook Installer[269]: zero 0.01 seconds
Sep 16 09:48:40 brian-laframboises-macbook Installer[269]: disk 0.02 seconds
Sep 16 09:48:40 brian-laframboises-macbook Installer[269]: install 3.06 seconds
Sep 16 09:48:40 brian-laframboises-macbook Installer[269]: -total- 3.08 seconds
Sep 16 09:48:40 brian-laframboises-macbook Installer[269]:
Sep 16 09:48:41 brian-laframboises-macbook Installer[269]: IFDInstallController 329E50 state = 5
Sep 16 09:48:41 brian-laframboises-macbook Installer[269]: Displaying ‘Install Succeeded’ UI.
When cleaning up the receipt files after deinstalling SC. Did you change this line accordingly to the name of your installer package?
If not, or if there are different name of such installer package you installed with. You have to delete all of them. So, again. Deinstall with the Deinstaller of Checkpoint.
sudo rm -rf /private/var/db/receipts/com.checkpoint.secureclient*
sudo rm -rf /Library/Receipts/SecureClient*
And install with the entire procedure above.
The log shows, its internally upgrading, and it won’t install it completely. Had this problem before.
Looking at bin folder i can see StartupItemsMgr but no SecureClientStarter file, there is however a file called SCStart is it possible that my starter is given a different name?
No. SecureClientStarter is not in bin, its always in boot/SecureClient
Being an idiot i tried to uninstall Checkpoint by dragging all checkpoint files to trash. Now when using the fix i can’t completely uninstal the 10.5 version of Checkpoint first. Any way out of this?
in a Terminal type:
sudo rm -rf /opt/CPsrsc-50
sudo rm -rf /private/var/db/receipts/com.checkpoint.secureclient.R56.bom
sudo rm -rf /private/var/db/receipts/com.checkpoint.secureclient.R56.plist
sudo rm -rf /Library/Receipts/SecureClient_B634000031_1.pkg/
Its worked for me and its a massive help, thanks so much. That now means I don’t have to bring my laptop home for work activities.
Cheers.
This is amazing. The people at CheckPoint will not have a fix for six months or so, if the fix for Leopard is an indication; YET here is a working one from outside CheckPoint. See to believe.
THANKS!!!
Great thanks so much… however, has anyone noticed that now when they shut down their mac, it makes the error sound (the low tone long beep “funk” in your system preferences sound effects)?? Maybe I did something wrong, it doesn’t prevent the shutdown just makes the noise after everything disappears besides my desktop picture. anyone else??
Just to update, seems as though the noise is caused by the secureclient.app asking you if you want to quit before it shuts down, and then osx forcing it to quit before it does. Anyone have any ideas how to make secureclient stop on its own during shutdown properly? Looking into it and will post if i find a fix.
Works perfectly! Thank you so much for this post. I am saving a copy for future reference. :)
One further comment – after doing the above (I didn’t want to use the hacked installer unless this method didn’t work, as I wouldn’t have the option of trying this one afterwards) the Checkpoint icon showed in my menubar, but wouldn’t do a thing when I clicked on it. I changed the access permissions on StartupItemsMgr and SecureClientStarter to allow read and write privileges, and everything works! The thing is, next time I repair permissions, will it change them back?
Chris
I hit same issue, but only once. I deinstalled and did the procedure again and never had this issue anymore. I guess its not changing back, but its worth trying.
I am getting the same issue, can’t click on it and can’t even open secureclient app.. anyone else and is there a permanent fix?
Since realising that Snowy had broken Secure Client, I can’t tell you how many hours I have spent trying to get other VPN clients working.
Your post a brilliant help and worked first time – THANK YOU!!!!
Great man !!!
Thank you very much :)
Any reason for the switch from “kextload -d” to “kextload -r”?
the former option -s is not part of kextload in 10.6 at all. This feature has moved to be used in the kextutil command.
the use of option -s is not essential and so far I think its only for debug reasons.
So to start the modules in exact same way, kextutil would need to used instead.
I just use option r and later option d just to fill up the space in the binary, allthough both are not required for starting the module. I might look up in using kextutil for starting the module as well.
Hi All,
This fix was working but since i upgraded to 10.6.1 the secure client icon appears in my tool bar but i have no right click option
Has anyone got SC working since upgrading to 10.6.1
Cheers
Simon
Yes, works here.
Hi all,
same problem for me. Installed, modified as instructions but after the reboot I cannot do anything. The right click doesn’t work and I cannot run SecureClient.
No errors, no info..
Kabutosan
Solved!
Open “System Preferences -> Accounts -> Login Items” and remove “SecureClient.
Add again SecureClient (from Application) and “Log Off”.
Log On again and all works.
Bye
Kabutosan
The binary editing directions worked like charm – thank you!
Yay!!!! It works perfectly!! The second part wasn’t quite as straight forward for me for some reason, but once I opened them it all worked.
Thank you so much!!!!
Ok, I got the first steps done, changing the 9 to a 10. I downloaded the Oxed, when I open the terminal, it asked for a password but ehn I type, the cursor does not move. I opened a new window and copied the commands in and hit enter, nothing happened.
any Idea what I am doing wrong?
thanks
I wonder if are making the same mistake I made by just double clicking on those 2 files (which opens the Terminal). You should ctrl-click –> Open with Other… –> 0xED. This will open the file in the correct application to do the replace step. I hope this helps.
Jah bless! We are up and running again!
/Niklas
hello,
with the 10.6.1 version does not work again,I tried to install it again,but is not working,
someone happens the same?
thanks.
I guess you are the first, I will try.
Just installed it on two 10.6.1, and it runs just fine.
I managed to get my secure client working by getting rid of my MAC and using Windows!
Thank you so much Harald!
Finally I can up and running on Snow Leopard and SecureClient.
The steps above worked as far as getting the software installed and running.. My problem is after I connect to my corp VPN, I am assigned an IP address… Except I am unable to ping via the CheckPoint Virtual adapter on en7… I can ping the IP assigned to me, but that’s all.. Anyone else experience this?
Thank you, thank you, thank you. Worked great!
This is saving me a lot of time!
Harald, you are an absolute star!
It’s just a few small settings to you but for me, it’s 12 nights at home with my Wife and Daughter which would probably not have happened had I not been able to get this working.
All working fine although I had to ‘shutdown’ and manually power up rather than ‘reboot’. I had the same issue fixing AirPort connection after 10.6 upgrade.
Thank you very much.
Worked great. Thanks!
This fix works very well! We have now migrated several of our corporate macs to Snow Leopard as a result of this fix.
Many thanks to Harold for finding and posting the fix!!!
Nice stuff mate…xhmph
Thanks for info ) Andromeda.
Thank you!!!!!!!
Hi! I was surfing and found your blog post… nice! I love your blog. :) Cheers! Sandra. R.
After a successful connection, my Secureclient icon disappears after approx. 5 minutes.
Am I the only one?
Thanks for the article! I made the change to the Installer but I am getting an error “Installation Failed” every time i run the install. I had SecureClient installed on Leopard and I uninstalled it once I realized it doesn’t work – now I can’t reinstall it again ..
Any help would be appreciated!
What error does it show. Before closing the installer, go to its menu “Windows” I tink and select Installer log, Please paste if some errors were shown.
Brilliant! It worked perfectly. Thank you so much for sharing your solution, you are wonderful!
I can never find the SecureClientStarter file to open in 0xED. I can go all through the steps just fine until I get to finding /tmp/SecureClientStarter to change kextload -s to kextload -d. I can find /tmp/StartupItemsMgr no problem. Please help.
Did you copy it there with:
sudo cp /opt/CPsrsc-50/boot/SecureClient/SecureClientStarter /tmp
sudo chown $USER /tmp/SecureClientStarter
if that doesn’t help do:
sudo cp /opt/CPsrsc-50/boot/SecureClient/SecureClientStarter $HOME/desktop
hexedit the file on your desktop
and once done type:
sudo cp $HOME/desktop/SecureClientStarter /opt/CPsrsc-50/boot/SecureClient/
Cannot thank you enough for sharing this solution with us… It is now working!!!
This works perfectly. Thanks.
Harald,
I’ve got this all working now. Thank you so much for putting this solution on the web and for providing support for beginners like me!
Thanks again,
Ben
You are the best! I do not even want to think about how long it will take for Checkpoint to fix this. Still waiting for 64 bit Windows support. My only trouble was actually getting the text editor to open something in /tmp which is hidden from Finder. I just used the finder “go to folder ” option, and Control clicked the file and chose to “open with” then selected the hex editor and I was off to the races. Perfect. Thanks..
I did not have to re-install secureclient as it was working before I upgraded to Snow Leopard. I only modified 2 files as described and it is working like a charm…
Thank you very much for the great tip!!!!
Excellent, Thanks for teh fix this is working great !
Hi,
Where are you from? Is it a secret? :)
Whoohoo! Have been trying to resolve this since updating to Snow Leopard – thanks a million for sharing this :)
Wow, you saved my workday with this one! I was about to restore from backup to 10.5.8! Well done, could not have made it easier. Makes me wonder how easy the fixes are yet companies take so long to release patches.
Cheers
this worked beautifully, thx much for this
If you want to install, please uninstall SecureClient first by using the uninstaller from Checkpoint inside the Application folder. If this for some reason fails, open Terminal (in Utilities) and type:
sudo -s
rm -rf /opt/CPsrsc-50
rm -rf /private/var/db/receipts/com.checkpoint.secureclient.R56.bom
rm -rf /private/var/db/receipts/com.checkpoint.secureclient.R56.plist
Now try to install.
Hi there,
I’ve done the first step and changed the two files. However, I’m still getting the error that SecureClient is still installed. I’ve carried out the steps you’ve provided in Terminal but when I try again I get the same message stating that SecureClient is still installed. I’ve tried this a few times.
Thanks for your help,
Ben
I’m getting the same message as Ben. I ran the uninstall command, but SecureClient still shows up in my menu bar, but I’ve looked in my applications folder and nothing is there. I’ve also tried running the terminal commands in your other post and nothing seems to work to get secureclient to fully uninstall.
Any tips?
In addition to this: http://www.sysadmins-world.com/?p=57 you could try to uninstall it manually:
In Terminal type:
sudo rm -rf /opt/CPsrsc-50
sudo rm -rf “/Applications/Check Point VPN-1 SecureClient”
Thanks! Working perfectly now!
Last login: Wed Sep 9 21:50:27 on ttys000
Macintosh:~ Manoja$ sudo rm -rf /opt/CPsrsc-50
Password:
Macintosh:~ Manoja$ sudo rm -rf /opt/CPsrsc-50
Macintosh:~ Manoja$ sudo rm -rf “/Applications/Check Point VPN-1 SecureClient”
Macintosh:~ Manoja$
All I get is the above or file not found.
What do you want to do? If you are in the process of uninstalling, i’ll be allright. Check that the App doesn’t exist.
Thanks alot, Ive been fighting with checkpoint for years now and had just discovered a working mac version (was using xp with vmware) for leopard, then SL broke it….
But now it works for me!! Yipee
Two things:
for those having trouble with:
[short_username] This is entirely (including brackets) replace by the user name that you are logged in under (same as name next to picture of house) I also had trouble with this…. maybe this means i dont know enough and shouldn’t be fiddling around.
Secure client now appears to have a bug: The secure client icon on the menu bar disappears when i close Remote desktop connection but still appears to be connected! also when i restart Secure client from apps folder and mouse in the expected location of the icon i get the secure client drop down menu…. this is all a bit of a worry.
Ricky from New Zealand
I am still getting the “Invalid Argument” error when I try the chown [short_username] /tmp/StartupItemsMgr command. I replaced short_username with root which is what I am logged in as. same thing
OK…I realise this is Computers for dummies here but now I get bash 3.2# coming up…
What next?
Harald,
You are a GENIUS !!!!
Thank you very, very much for the fix ! Everything is working great !
Marco,
I don’t know about Iphone tethering, but I remember that on Leopard, when I tried using remoting apps from the Iphone (you know, Remote, Rowmote, Keynote remote, etc…basically anything which created a network between my macbook and my Iphone) it wouldn’t work unless I disabled security policies in the SecureClient menu from the icon in the menu bar. Have you tried that ?
Go to SystemPreferences/Accounts if your User is allowed to Administrate this computer, just set a password there and use it then.
Hi Harald
I enter all of these instructions and it comes up with file not found
What am I doing wrong?
That’s just the thing…I don’t have a password
And I’ve put in every password I use for everything else…
Hi Mo,
“sudo -s” requires your mac-users password.