topic Remove old, unused and expired IDA broker certificate in Firewall and Security Management

Remove old, unused and expired IDA broker certificate

Christian_Koehl — Thu, 05 Dec 2024 11:41:15 GMT

Dear Folks,

an older IDA environment with IDA Broker function must be corrected. The system is running R81.20 with JHF-89.

My question is, how to remove an expired IDA Broker certificate?

Best regards,

Christian

Re: Remove old, unused and expired IDA broker certificate

Lesley — Thu, 05 Dec 2024 12:06:40 GMT

I think it keeps showing until you renew it or either disable the functionality itself

Re: Remove old, unused and expired IDA broker certificate

Christian_Koehl — Thu, 05 Dec 2024 13:04:23 GMT

Dear Lesley,
disabling the broker function will not delete the old cert.

I tried it with ICA tool, but it seems, as ICA tool didn't see broker certs (only the other typs of certs like vpn etc.)

Re: Remove old, unused and expired IDA broker certificate

bregis2000 — Tue, 11 Mar 2025 14:24:31 GMT

Any updates on this? Running R81.10 and getting an alert in the MDS for this. Would like to clear it as I'm receiving emails and notifications from our ops teams about this alert condition.

Re: Remove old, unused and expired IDA broker certificate

_Val_ — Tue, 11 Mar 2025 16:07:44 GMT

It is probably best to open a ticket with TAC about it

Re: Remove old, unused and expired IDA broker certificate

bregis2000 — Tue, 11 Mar 2025 18:32:32 GMT

Thanks. Seems like this SK is the direction to go https://support.checkpoint.com/results/sk/sk110056 [How to revert a Portal Certificate from a 3rd Party to Internal CA certificate]