topic Re: Cannot install Check Point Mobile Access Portal Agent on Windows 10 in Endpoint

Cannot install Check Point Mobile Access Portal Agent on Windows 10

alesandro1977 — Fri, 23 Apr 2021 13:13:19 GMT

Good day,

I'm trying to install the Check Point Mobile Access Portal Agent 800.007.040 on a domain joined Windows 10 computer but launching the install, I receive the following message :

The Mobile Access Portal Agent installer failed to install the certificate and cannot work properly. The certificate is required for secure communication with the corporate site.

Install the Mobile Access Portal Agent again, and make sure to Approve the certificate during the installation process.

I removed our corporate VPN and antivirus (Kaspersky) but the problem still remains.

When looking at the msi log file, the following comes up :

CreateCertificate: 14:48:28:911 Initialized.

CreateCertificate: 14:48:28:912 Install path is:

CreateCertificate: 14:48:28:912 C:\Users\test\AppData\Local\CheckPoint\MobileAccess\

CreateCertificate: 14:48:28:913 Update current certificate or create new one

CreateCertificate: 14:48:28:913 There is no installs.ini file, checking default profile in profiles.ini file.

CreateCertificate: 14:48:28:914 Default profile has not been found in profiles.ini file

CreateCertificate: 14:48:28:919 Successfully Opened the System Store

CreateCertificate: 14:48:28:921 The desired certificate wasn't found

CreateCertificate: 14:48:28:921 Store Closed

CreateCertificate: 14:48:28:922 Try to delete file by path:

CreateCertificate: 14:48:28:922 C:\Users\test\AppData\Roaming\CheckPoint\MobileAccessDeployment\ca-certificate.pem

CreateCertificate: 14:48:28:923 Certificate isn't exist - create new certificate

CreateCertificate: 14:48:28:923 Getting CShell's PID

CreateCertificate: 14:48:28:924 PID is:

CreateCertificate: 14:48:28:925

CreateCertificate: 14:48:28:926 Couldn't get the CShell's process id.

CreateCertificate: 14:48:28:927 Try to delete file by path:

CreateCertificate: 14:48:28:928 C:\Users\test\AppData\Roaming\CheckPoint\MobileAccessDeployment\certificates.jks

CreateCertificate: 14:48:28:928 Generating RSA key (private key for CA certificate)

CreateCertificate: 14:48:29:482 Generating x509 certificate (CA certificate)

CreateCertificate: 14:48:29:488 Writing certificate to disk

CreateCertificate: 14:48:29:489 Directory doesn't exist or wrong path

CreateCertificate: 14:48:29:489 Create CheckPoint directory

CreateCertificate: 14:48:29:490 Directory doesn't exist or wrong path

CreateCertificate: 14:48:29:490 Create MobileAccessDeployment directory

CreateCertificate: 14:48:29:491 generate RSA key for CSR

CreateCertificate: 14:48:29:745 Generating a Certificate Request

CreateCertificate: 14:48:29:751 sign CSR with CA certificate

CreateCertificate: 14:48:29:756 Create p12 store

CreateCertificate: 14:48:29:760 Add certificate to java keystore

CreateCertificate: 14:48:29:987 java home has been detected

CreateCertificate: 14:48:29:988 C:\Program Files\Java\jre1.8.0_231

\bin\keytool.exe

CreateCertificate: 14:48:30:283 Wait response is:

CreateCertificate: 14:48:30:284 0

CreateCertificate: 14:48:31:23 Wait response is:

CreateCertificate: 14:48:31:24 0

CreateCertificate: 14:48:31:25 Adding certificate to trusted root

CreateCertificate: 14:48:31:28 Successfully Opened the System Store

CreateCertificate: 14:48:31:29 Successfully opened file

CreateCertificate: 14:48:31:29 Successfully got file attributes

CreateCertificate: 14:48:31:29 Successfully Read file

CreateCertificate: 14:48:31:30 Unabled to add certificate to store.

CreateCertificate: 14:48:31:30 Store Closed

CreateCertificate: 14:48:31:31 AddCertificateToTrustedRootStore failed.

CreateCertificate: 14:48:31:31 Try to delete file by path:

CreateCertificate: 14:48:31:32 C:\Users\test\AppData\Roaming\CheckPoint\MobileAccessDeployment\cshell.p12

CreateCertificate: 14:48:31:32 Try to delete file by path:

CreateCertificate: 14:48:31:32 C:\Users\test\AppData\Roaming\CheckPoint\MobileAccessDeployment\CshellFileForAnswer.txt

CreateCertificate: 14:48:31:33 FAILURE

CreateCertificate: 14:48:31:33 Try to delete file by path:

CreateCertificate: 14:48:31:34 C:\Users\test\AppData\Roaming\CheckPoint\MobileAccessDeployment\certificates.jks

Anybody know why it's causing these errors and how I can go about getting it to work?

Thank you.

Re: Cannot install Check Point Mobile Access Portal Agent on Windows 10

PhoneBoy — Fri, 23 Apr 2021 18:24:03 GMT

This looks like a clue: "AddCertificateToTrustedRootStore failed"
I believe this requires admin privileges, do you have that on the computer?

Re: Cannot install Check Point Mobile Access Portal Agent on Windows 10

alesandro1977 — Fri, 23 Apr 2021 22:37:56 GMT

In fact the process does not need any admin rights, a standard user can run it and the certificate gets installed.

the user logged in is domain admin and computer admin.

Re: Cannot install Check Point Mobile Access Portal Agent on Windows 10

JCMN — Mon, 17 May 2021 09:13:23 GMT

I have the same issue. Any luck yet finding a solution?

Re: Cannot install Check Point Mobile Access Portal Agent on Windows 10

JCMN — Tue, 25 May 2021 12:55:49 GMT

Any update on this?

Re: Cannot install Check Point Mobile Access Portal Agent on Windows 10

Jerry_Yu — Tue, 01 Jun 2021 02:34:47 GMT

I ask user to install 64 bit java, not 32 bit. the problem was fixed.

Re: Cannot install Check Point Mobile Access Portal Agent on Windows 10

TcoUpLoad — Wed, 12 Jan 2022 17:15:57 GMT

That is not the solutions ... i have java 64bits installed and have that issue...

At this time

CreateCertificate: 14:48:31:28 Successfully Opened the System Store.

we are talking about windows cetificates store or java keytool ?

Re: Cannot install Check Point Mobile Access Portal Agent on Windows 10

jbIT — Thu, 27 Jan 2022 16:19:26 GMT

Hi alesandro

The MSI creates a temporary installation file that is launched to install agent. This temporary file need to be located on a local folder.

So, probably the folder C:\Users\test\AppData\Roaming\CheckPoint is considered "remote" because it is part of the roaming profile which is syncronized with the roaming profile process.

We have solved that issue this way.

Best regards.

Re: Cannot install Check Point Mobile Access Portal Agent on Windows 10

Grigoriy — Mon, 13 Mar 2023 11:57:38 GMT

Hello

Have you found any solution?

Re: Cannot install Check Point Mobile Access Portal Agent on Windows 10

Grigoriy — Mon, 13 Mar 2023 11:59:22 GMT

Please, can you describe step-by-step how have you resolved this issue?

Re: Cannot install Check Point Mobile Access Portal Agent on Windows 10

jassscheck — Mon, 13 Mar 2023 18:43:39 GMT

Hello Grigoriy,

exclude the folder C:\Users\test\AppData\Roaming\CheckPoint from the roaming profile.

The folder must be local.

I have fixed it that way.

Sorry, don't have time to write a step-by-step guide.

Re: Cannot install Check Point Mobile Access Portal Agent on Windows 10

Tarzan — Tue, 20 Feb 2024 11:23:55 GMT

Hello jbIT

Is the folder/path the default one? In this case C:\Users\test\AppData\Roaming\CheckPoint is this by default?

Or you can select where to install it?

Thank you in advance!

Re: Cannot install Check Point Mobile Access Portal Agent on Windows 10

jassscheck — Tue, 20 Feb 2024 13:24:47 GMT

Hello Malware, from what i know, yes it is the default and you can't change it.

Best regards.

Re: Cannot install Check Point Mobile Access Portal Agent on Windows 10

Tarzan — Tue, 20 Feb 2024 14:12:30 GMT

And how exactly are you extracting the folder/path? I was trying to find info on the roaming profile as well? Could you please let me know, what is this profile? Is it centrally located or?

Thank you for your help!