topic Re: Changing the UserCheck Certificate in General Topics

Changing the UserCheck Certificate

Nick_Doropoulos — Tue, 11 Jun 2019 20:58:19 GMT

Can I confirm that changing the UserCheck certificate on a gateway does not require changing any other certificates as well (i.e. IPSec etc.)?

Moreover, would any additional configuration need to take place after importing a new UserCheck certificate?

Many thanks in advance.

Re: Changing the UserCheck Certificate

PhoneBoy — Tue, 11 Jun 2019 21:18:51 GMT

It may impact the Remote Access VPN certificate.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk131212
It shouldn't impact IPsec which uses a different certificate.

Re: Changing the UserCheck Certificate

Nick_Doropoulos — Tue, 11 Jun 2019 21:48:54 GMT

Excellent, thanks PhoneBoy!

So, in the interest of changing the customer's UserCheck certificate in the most orderly, non-disruptive manner, how should I go about it? Should I contact Check Point to obtain the hotfix mentioned?

Many thanks.

Re: Changing the UserCheck Certificate

PhoneBoy — Tue, 11 Jun 2019 22:59:43 GMT

I would open a TAC case just to make sure all the bases are covered here.