topic Re: SMS in API / CLI Discussion

SMS

khanhhv_1509 — Tue, 17 Jun 2025 12:02:29 GMT

Hi everyone, I'm learning about the components of firewall checkpoint and found out that Cert between SMS and GW will expire in 5 years from the date of creation. I want to ask what will happen when Cert expires and is there a way to re-initialize Cer for one or more GWs?

Re: SMS

PhoneBoy — Tue, 17 Jun 2025 18:19:08 GMT

SIC should handle this on it's own unless there's a connectivity issue between the SMS and Gateway,.
https://support.checkpoint.com/results/sk/sk164255

Re: SMS

the_rock — Tue, 17 Jun 2025 23:16:21 GMT

Its all automatically done.

Andy

Re: SMS

khanhhv_1509 — Wed, 18 Jun 2025 01:39:19 GMT

i still don't understand, how does it work can you explain it to me

Re: SMS

the_rock — Wed, 18 Jun 2025 19:43:07 GMT

Do you have access to the sk? Its explained in the solution part.

Andy

Re: SMS

PhoneBoy — Wed, 18 Jun 2025 19:47:00 GMT

When the expiration date is less than a certain value (don't recall offhand what it is), the SIC certificates are automatically renewed.
If you've blocked the necessary ports for this to occur (in the SK I linked), then this process will fail.

Re: SMS

Jim_Oqvist — Thu, 19 Jun 2025 09:08:39 GMT

Hi, SIC is documented in R82 Quantum Security Management Administration Guide and the process for renewal is documented in here: Certificate Longevity and Statuses

Automatic renewal of SIC certificates ensuring continuous SIC connectivity

SIC certificates are renewed automatically after 75% of the validity time of the certificate has passed. If, for example, the SIC certificate is valid for five years. After 3.75 years, a new certificate is created and downloaded automatically to the SIC entity. This automatic renewal ensures that the SIC connectivity of the Security Gateway is continuous. The administrator can revoke the old certificate automatically or after a set period of time. By default, the old certificate is revoked one week after certificate renewal.