Check Point HARMONY R81 - Database Migration in a High Availability Environment; Updating the PAT Version on the Server

Management High Availability
R81 Harmony Endpoint Server Administration Guide|174
Notes -
n
A standby Endpoint Security Management Server cannot be changed to Active
until the first synchronization of the Endpoint Security database is completed.
n
While the Primary server is offline and the Secondary server is active, external
Remote Help servers do not get updates.
Database Migration in a High Availability
Environment
If a High Availability configuration was exported, you must re-configure it after the import.
Best practice is to re-install all Secondary Servers and Remote Help Servers after the migrate
import procedure.
Install new Secondary Servers and Remote Help Servers of the same version as the primary
server and synchronize all servers.
Updating the PAT Version on the Server
When you change a Standby Security Management Server to Active, the new Active Security
Management Server can have an older Policy Assignment Table (PAT) version than the
clients. If the PAT version on the server is lower than the PAT version on the client, the client
will not download policy updates.
To fix this, update the PAT number on the Active server.
To get the PAT version:
If the Active Security Management Server is available, get the last PAT version from it.
On the Active Server:
Run: uepm patver get
If the Active Security Management Server is not available, get the last PAT version from a
client that was connected to the server before it went down.
On the client computer:
1. Open the Windows registry.
2. Find HKEY_LOCAL_MACHINE\SOFTWARE\CheckPoint\EndPoint
Security\Device Agent
3. Double-click the PATVersion value.