topic Re: renew IA portal certificate in General Topics

renew IA portal certificate

dehaasm — Mon, 24 Jul 2023 09:26:14 GMT

We need to renew the portal/ia certificate on the gateway, because it is going to expire soon August 30, 2023 (verified by browsing to the firewall), however when we look into the cluster properties and certificate settings window it shows that the certificate had already been expired, which is not the case.

How can we assure that we will replace the correct certificate, should we engage with TAC on this matter?

Re: renew IA portal certificate

G_W_Albrecht — Mon, 24 Jul 2023 09:56:44 GMT

See sk108352: How to create / update the Gaia Portal certificate (signed by ICA) for Security Gateway / Cluster

Re: renew IA portal certificate

dehaasm — Mon, 24 Jul 2023 10:20:13 GMT

maybe i am looking into the wrong place, the certificate we need to update is used by the IA identity agents installed on the laptops so that one need to be renewed, is there a procedure for that one?

ps: i believe when expired that would impact the connection for IA agents to the gateway (TLS handshake not untrusted), but the URL for IA is the same as mentioned in screenshot starting with cpia.

and the current cert is actually from a known CA provider not from Check Point internal CA

Re: renew IA portal certificate

G_W_Albrecht — Mon, 24 Jul 2023 10:49:08 GMT

Was it used in setting a 3rd party cert for the portal like here: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_IdentityAwareness_AdminGuide/Content/Topics-IDAG/Configuring-Identity-Sources-Configuring-Browser-Based-Authentication.htm?Highlight=agent%20certificate

Re: renew IA portal certificate

Chris_Atkinson — Mon, 24 Jul 2023 10:57:40 GMT

Did you already check "sk106500: How to replace Identity Agent Certificate in the Security Gateway object" ?

Re: renew IA portal certificate

the_rock — Mon, 24 Jul 2023 12:29:47 GMT

I followed sk Chris gave last year with the customer and worked fine.

Have you tried that?

Andy