topic Re: Certificate Revoked error on smartconsole in Firewall and Security Management

Certificate Revoked error on smartconsole

mohammede — Wed, 28 Dec 2022 20:41:39 GMT

Hi Community,

We have two servers to log into the smartconsole, one of the servers I can no longer log into the smart console, we reboot the server and problem still, knowing that I can access from the second server,

Also note that the SIC certificat is still valid,

can please advise about this matter

Re: Certificate Revoked error on smartconsole

the_rock — Wed, 28 Dec 2022 22:39:36 GMT

Can you please attach the screenshot of the error you see?

Andy

Re: Certificate Revoked error on smartconsole

_Val_ — Thu, 29 Dec 2022 08:06:30 GMT

This does not make much sense. Any screenshots & details?

Re: Certificate Revoked error on smartconsole

Blason_R — Thu, 29 Dec 2022 08:14:39 GMT

Follow sk20905 and it should resolve your issue

Re: Certificate Revoked error on smartconsole

mohammede — Thu, 29 Dec 2022 08:45:12 GMT

find attached the error

Re: Certificate Revoked error on smartconsole

mohammede — Thu, 29 Dec 2022 08:49:13 GMT

from the server 1 i Get the message below, What baffles me is that I can log in from another server

Re: Certificate Revoked error on smartconsole

Blason_R — Thu, 29 Dec 2022 08:57:15 GMT

Below command should help. run those from expert prompt and ensure you have full backup taken before performing this activity

cpca_client lscert -stat Valid
cpca_client lscert -stat Valid -kind SIC
cd $CPDIR/conf
ls -lh | grep sic
cp $CPDIR/conf/sic_cert.p12{,_BACKUP}
cpca_client revoke_cert -n "CN=cp_mgmt"
cpca_client create_cert -n "CN=cp_mgmt" -f $CPDIR/conf/sic_cert.p12

Re: Certificate Revoked error on smartconsole

_Val_ — Thu, 29 Dec 2022 09:00:35 GMT

Still unclear. Are you using a certificate to login to SmartConsole?

Also, R80.20 is out of support for a while, I hope you know that.

Re: Certificate Revoked error on smartconsole

mohammede — Thu, 29 Dec 2022 09:23:31 GMT

Thanks for replay,

yes we use certificate to login to SC , i checked before and is still valid

thanks for the note

Re: Certificate Revoked error on smartconsole

mohammede — Thu, 29 Dec 2022 09:25:45 GMT

thanks blason i will proceed to create a new certificate

Re: Certificate Revoked error on smartconsole

_Val_ — Thu, 29 Dec 2022 10:21:38 GMT

Issue a new certificate to that client and try again.

Re: Certificate Revoked error on smartconsole

the_rock — Thu, 29 Dec 2022 13:41:30 GMT

Just do what Val said, issue new cert.

Re: Certificate Revoked error on smartconsole

ilirz — Tue, 23 May 2023 08:59:10 GMT

Hi Blason

I have the same problem with smart console,

if i create new certificate to the management according to your suggestion does it affect the SIC communication with branch gateway .

I have management R 80.20 version and yesterday i logged in to the management and get alarm "connection can not be initiated" and all gateway sic not connection is down. Today after reboot the management I see error Certificate Revoked and can't loggin to the smart console

Re: Certificate Revoked error on smartconsole

the_rock — Tue, 23 May 2023 10:55:57 GMT

It would affect the SIC, as you issue brand new cert.

Re: Certificate Revoked error on smartconsole

Blason_R — Tue, 23 May 2023 11:00:26 GMT

You mean following my commands? Nope it wont affect SIC for sure since I have done this multiple times.

Re: Certificate Revoked error on smartconsole

the_rock — Tue, 23 May 2023 11:57:49 GMT

Sorry, my bad, I responded here, but meant to on something else related to fwm_sic reset command. @ilirz , Blason is right, those commands wont affect SIC.

Re: Certificate Revoked error on smartconsole

ilirz — Tue, 23 May 2023 12:06:51 GMT

thank you,ok I will follow Blason suggestion

Re: Certificate Revoked error on smartconsole

ilirz — Tue, 23 May 2023 12:07:31 GMT

Thanks Blason

Re: Certificate Revoked error on smartconsole

the_rock — Tue, 23 May 2023 12:07:54 GMT

Great, keep us posted if it works.

Andy

Re: Certificate Revoked error on smartconsole

ilirz — Fri, 26 May 2023 16:24:00 GMT

I tried on management r 80.20 take 220 and worked. Thank you to all!