topic Re: Expired VPN certificates on gateways - no VPN blades enabled in General Topics

Expired VPN certificates on gateways - no VPN blades enabled

Mike_Jensen — Tue, 23 Feb 2021 17:24:39 GMT

After installing access control policy to a active/standby gateway cluster I have been receiving alerts that the VPN certificates on the gateways has expired. I do not have the IPSec VPN or Mobile Access blades enabled on the cluster so I don't have the option to renew the cert and really don't even need it.

Is there a way I can remove the certificates to clear the message that comes up after installing policy?

Re: Expired VPN certificates on gateways - no VPN blades enabled

JackPrendergast — Wed, 24 Feb 2021 09:42:24 GMT

Enable IPSEC VPN blade, head to IPSEC VPN on the left hand side menu, either remove or renew the cert.

Then, disable IPSEC VPN and push policy.

Should clear it.. should....

Re: Expired VPN certificates on gateways - no VPN blades enabled

Mike_Jensen — Wed, 24 Feb 2021 20:12:19 GMT

Instead of enabling the IPSEC VPN blade I went into the ICA Manager on my SMS, deleted the certs in question, and the message still persists after installing policy. I even did a cpstop/cpstart on the SMS after deleting the certs.

Re: Expired VPN certificates on gateways - no VPN blades enabled

PhoneBoy — Sun, 28 Feb 2021 18:43:06 GMT

Pretty sure certificates need to exist even if you’re not using VPN.
Recommend enabling it, renewing/regenerating the certificate, disabling, and pushing policy.
There should be no harm in this.

Re: Expired VPN certificates on gateways - no VPN blades enabled

Emil_T — Tue, 27 Aug 2024 20:20:21 GMT

Error persists

Re: Expired VPN certificates on gateways - no VPN blades enabled

PhoneBoy — Tue, 27 Aug 2024 20:34:50 GMT

Suggest engaging with TAC: https://help.checkpoint.com