https://community.checkpoint.com/t5/Firewall-and-Security-Management/error-on-lom-interface-SSL-certificate-upload-on-Checkpoint-4800/m-p/196294#M36629 <P>Hello,</P><P>As I am not sure if this is the right location, it probably is not...</P><P>I wanted to replace the ssl certificate on the lom-interfaces of several devices. I have ready certificates with .pem format and the private key.<BR />When I try to upload the certificates on the 4800 devices which run the 2.8 firmware, I only get one file to upload which gets the error: "Certificate upload failed. Cannot validate." - which I also experienced with other devices with outdated firmware.<BR />In other devices it is a place to upload the certificate and the private key separately and type in the pre-shared key. Here there is only one file to be uploaded. Is it possible to combine the private key with the certificate file together to have this right?</P><P>When trying to generate the certificate on the device I get to downlowad the csr.txt but it is no use to upload it as certificate.</P><P>Can you advise anything here?</P><P>Is it possible to upload other firmware than the 2.8 for the 4800 (like the 3.46 for the 5400 series), to solve this issue?<BR />I know that the devices are already out of support (or soon will be) and will be replaced this year or next, but maybe there is a chance that there is an easy fix for this issue.</P><P>&nbsp;</P> Thu, 26 Oct 2023 14:09:11 GMT a574591 2023-10-26T14:09:11Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/error-on-lom-interface-SSL-certificate-upload-on-Checkpoint-4800/m-p/196294#M36629 <P>Hello,</P><P>As I am not sure if this is the right location, it probably is not...</P><P>I wanted to replace the ssl certificate on the lom-interfaces of several devices. I have ready certificates with .pem format and the private key.<BR />When I try to upload the certificates on the 4800 devices which run the 2.8 firmware, I only get one file to upload which gets the error: "Certificate upload failed. Cannot validate." - which I also experienced with other devices with outdated firmware.<BR />In other devices it is a place to upload the certificate and the private key separately and type in the pre-shared key. Here there is only one file to be uploaded. Is it possible to combine the private key with the certificate file together to have this right?</P><P>When trying to generate the certificate on the device I get to downlowad the csr.txt but it is no use to upload it as certificate.</P><P>Can you advise anything here?</P><P>Is it possible to upload other firmware than the 2.8 for the 4800 (like the 3.46 for the 5400 series), to solve this issue?<BR />I know that the devices are already out of support (or soon will be) and will be replaced this year or next, but maybe there is a chance that there is an easy fix for this issue.</P><P>&nbsp;</P> Thu, 26 Oct 2023 14:09:11 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/error-on-lom-interface-SSL-certificate-upload-on-Checkpoint-4800/m-p/196294#M36629 a574591 2023-10-26T14:09:11Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/error-on-lom-interface-SSL-certificate-upload-on-Checkpoint-4800/m-p/196323#M36630 <P>I believe you can combine the certificates, yes.<BR />In terms of upgrading the LOM firmware beyond the recommended version, I would check with TAC: <A href="https://help.checkpoint.com" target="_blank">https://help.checkpoint.com</A>&nbsp;</P> Thu, 26 Oct 2023 17:10:06 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/error-on-lom-interface-SSL-certificate-upload-on-Checkpoint-4800/m-p/196323#M36630 PhoneBoy 2023-10-26T17:10:06Z