automatic certificate renewal

Railx — Tue, 06 Aug 2024 13:43:58 GMT

Good afternoon.

According to the https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_RemoteAccessVPN_AdminGuide/Content/Topics-VPNRG/User-and-Client-Authentication.htm?TocPath=User%20and%20Client%20Authentication%20for%20Remote%20Access%7C_____0#Managing_User_Certificates, in R81.20 automatic certificate renewal is enabled on Security Gateways by default.
Previously, on previous versions, you could disable it directly in SmartConsole in the Certificates tab in Global proptries.
Now you cannot disable this feature. My searches for this parameter in GuidBedit did not yield any results.

Could you please tell me if anyone has tried to change this?

Re: automatic certificate renewal

Lesley — Tue, 06 Aug 2024 15:05:15 GMT

Search in GUIDBEDIT for:

renew_users_ica_cert

Also you can edit

$FWDIR/conf/trac_client_1.ttm

<<trac-before>>

:certificate_auto_renewal_threshold (
:gateway (
:default (client_decide)
)
)

<<trac-after.>>

:certificate_auto_renewal_threshold (
:gateway (
:default (0)
)
)