topic Re: Checkpoint R75.40 Windows: Renew ICA certificate in Firewall and Security Management

Checkpoint R75.40 Windows: Renew ICA certificate

Diego_Carreno — Mon, 15 Jan 2024 18:16:32 GMT

Hello everyone:

I need your help and knowledge:

I have a Checkpoint R75.40 splat mounted on a Windows (I am clear that it has been out of support for a long time and is in the process of updating to recommended versions.) which the ICA certificate is about to expire.

I have searched for information on how to do it, but there is no clarity for that version, which is why I come to you in case you have knowledge of how it is done.

Thank you very much for your help!!!

Re: Checkpoint R75.40 Windows: Renew ICA certificate

the_rock — Mon, 15 Jan 2024 18:25:49 GMT

My favorite flavor of that version was R75.47, really good! : - )

Anyway, can you please send a screenshot of what you are referring to, it would help.

Best,

Andy

Re: Checkpoint R75.40 Windows: Renew ICA certificate

Diego_Carreno — Mon, 15 Jan 2024 18:35:56 GMT

Hello Andy !

Thank you for your help, I attach an image of the internal_ca certificate soon to expire.

Thanks.

Re: Checkpoint R75.40 Windows: Renew ICA certificate

the_rock — Mon, 15 Jan 2024 18:37:19 GMT

Alrighty mate, lets see what we can do to help. I dont go as far as some folks on here, earliest I recall is R55, but lets see : - )

Andy

Re: Checkpoint R75.40 Windows: Renew ICA certificate

the_rock — Mon, 15 Jan 2024 18:40:06 GMT

Last time I had to do this, I just followed below and worked fine.

Andy

https://support.checkpoint.com/results/sk/sk158096

This section:

Procedure - If the Internal CA certificate is still valid

Re: Checkpoint R75.40 Windows: Renew ICA certificate

Diego_Carreno — Mon, 15 Jan 2024 19:15:25 GMT

Thanks Andy, but it gives me the following attached message.

Re: Checkpoint R75.40 Windows: Renew ICA certificate

the_rock — Mon, 15 Jan 2024 19:18:49 GMT

Not sure if process even applies to version you have, as oldest I see is R76, but try the script listed there under section I mentioned.

Andy

Re: Checkpoint R75.40 Windows: Renew ICA certificate

Diego_Carreno — Mon, 15 Jan 2024 21:39:07 GMT

Thanks for your help Andy, I will continue investigating.

Re: Checkpoint R75.40 Windows: Renew ICA certificate

the_rock — Mon, 15 Jan 2024 21:40:15 GMT

No problem, but again, does it let you run the script mentioned in the sk?

Andy

Re: Checkpoint R75.40 Windows: Renew ICA certificate

Diego_Carreno — Mon, 15 Jan 2024 21:49:23 GMT

The R75.40 that I am reviewing is based on Windows, which is why the solution is more difficult.

Re: Checkpoint R75.40 Windows: Renew ICA certificate

the_rock — Mon, 15 Jan 2024 21:51:13 GMT

I saw you mentioned splat in your description...

Andy

Re: Checkpoint R75.40 Windows: Renew ICA certificate

Diego_Carreno — Mon, 15 Jan 2024 22:25:54 GMT

It's true! I got confused, I'm sorry.

Re: Checkpoint R75.40 Windows: Renew ICA certificate

the_rock — Mon, 15 Jan 2024 22:52:14 GMT

Since its SPLAT, its still based on Linux, so same commands worked like they do in Gaia...Gaia is simply "mix" of splat+old Nokia IPSO OS.

Commands in that sk for the script part definitely should work.

Lets do remote and check it out if you want to.

Best,

Andy

Re: Checkpoint R75.40 Windows: Renew ICA certificate

Diego_Carreno — Mon, 22 Jan 2024 12:40:35 GMT

Heelo Andy, I finally failed to renew the CA certificate and used CP_merge to move the configurations to a new mgmt installation.

Thanks for your help!

Re: Checkpoint R75.40 Windows: Renew ICA certificate

the_rock — Mon, 22 Jan 2024 12:42:52 GMT

Good job 👍