topic Re: Platform Portal Cert Replacement in General Topics

Platform Portal Cert Replacement

Conor_Mulcahy — Wed, 14 Aug 2024 14:53:03 GMT

Hi All,

Trying to replace the cert on platfrom portal to an internal CA cert, version is R81.10 take 150, when i upload the cert and push the policy it then looks like the VPN is presenting the new cert to the client and asking it to trsut cert.

Is this expected behaviour, my understanding is you can have a seperate cert for usercheck and platfrom portal while leaving the default cert on the vpn?

I rolled back using a backup but need to get this sorted. Also after i installed policy it looked like the web gui on the gateway was still using the cert it comes with which juts has its IP listed when you look in the browser.

Anyone can point me in the right direction, appreciate any help, thanks.

Re: Platform Portal Cert Replacement

AkosBakos — Wed, 14 Aug 2024 18:20:19 GMT

Hi @Conor_Mulcahy

As I know the VPN cert is located here:

The two cert were meybe the same?

And an another thread about platform portal

Akos

Re: Platform Portal Cert Replacement

Conor_Mulcahy — Thu, 15 Aug 2024 12:55:08 GMT

But can't you have a separate cet for platform portal, so if you change the platform portal cert it should not change it for VPN as well?

Re: Platform Portal Cert Replacement

the_rock — Thu, 15 Aug 2024 12:59:42 GMT

Technically, it can be different. Can you send what you have for platform?

Andy

Re: Platform Portal Cert Replacement

Conor_Mulcahy — Mon, 19 Aug 2024 09:30:09 GMT

I just uploaded a .p12 cert and setup the alias to match the cert as well as DNS entry but then it looked like the cert then gets presented to the VPN client. i've reversed the change so cant send screenshot, TAC case are saying if you change in one place usercheck or platform portal then it will change for all, the cert being presented to to the vpn client is expected behavior?