https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255002#M49918 <P>Maybe try this:</P> <P>mpclient set portal UserCheck https-cert "&lt;cert-object-name-in-CP&gt;"</P> <P>Andy</P> Wed, 13 Aug 2025 02:48:55 GMT the_rock 2025-08-13T02:48:55Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255001#M49917 <P>I uploaded a certificate to UserCheck through SmartConsole but the cluster is still sending back the cert specified under IPSEC VPN. Searching around it appears this may be because of some MultiPortal feature? However, I cannot find any documentation on configuring MultiPortal beyond some commands, i.e. mpclient list and cpwd_admin list which confirm MultiPortal is running and listing UserCheck.</P> <P>How do I get the gateway cluster to use the certificate I created specifically for UserCheck? The IPSEC certs are/should be separate. I do not use Remote Access, etc.</P> Wed, 13 Aug 2025 01:27:36 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255001#M49917 B_P 2025-08-13T01:27:36Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255002#M49918 <P>Maybe try this:</P> <P>mpclient set portal UserCheck https-cert "&lt;cert-object-name-in-CP&gt;"</P> <P>Andy</P> Wed, 13 Aug 2025 02:48:55 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255002#M49918 the_rock 2025-08-13T02:48:55Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255003#M49919 <P>It may be this one:</P> <P><A href="https://support.checkpoint.com/results/sk/sk131212" target="_blank">https://support.checkpoint.com/results/sk/sk131212</A></P> <P>&nbsp;</P> Wed, 13 Aug 2025 05:18:49 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255003#M49919 emmap 2025-08-13T05:18:49Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255039#M49930 <P>Thanks&nbsp;<a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/38213">@the_rock</a>&nbsp;</P> <P>Any chance you know a command to show the installed cert or find the cert object name?</P> Wed, 13 Aug 2025 14:05:45 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255039#M49930 B_P 2025-08-13T14:05:45Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255040#M49931 <P>The solution was to set the UserCheck URL to https instead of http per <A href="https://community.checkpoint.com/t5/Threat-Prevention/Usercheck-Block-Page-is-Insecure-Private/m-p/20216/highlight/true#M3843" target="_self">here</A>&nbsp;and <A href="https://support.checkpoint.com/results/sk/sk176372" target="_self">sk176372</A>. That is a smidge confusing considering it was already operating on https while it was set to http....</P> Wed, 13 Aug 2025 15:49:52 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255040#M49931 B_P 2025-08-13T15:49:52Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255041#M49932 <P>I never changed that option, works fine for me.</P> <P>Andy</P> Wed, 13 Aug 2025 14:09:40 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255041#M49932 the_rock 2025-08-13T14:09:40Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255042#M49933 <P>Are you using a unique cert for UserCheck or is it shared with IPSEC or other items?</P> Wed, 13 Aug 2025 14:53:08 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255042#M49933 B_P 2025-08-13T14:53:08Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255043#M49934 <P>Not unique, maybe thats why.</P> Wed, 13 Aug 2025 14:57:48 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-not-using-provided-certificate-MultiPortal/m-p/255043#M49934 the_rock 2025-08-13T14:57:48Z