Sha-1 certificate on R80.10 Management server

Dan_Roddy — Wed, 03 Apr 2019 20:46:57 GMT

Every week I discover a troubling detail about our environment.

How did I end up with a SHA-1 certificate on management, and thus the gateways. SHA-1 was deprecated in 2017 and it was a big deal then. Can someone help me understand sk#103839 (SHA-1 and SHA-256 certificates in Check Point Internal CA (ICA) ? Yes, this probably is my problem that I did not take care of, so if it is, please just tell me.

Thank you,

Dan

Re: Sha-1 certificate on R80.10 Management server

PhoneBoy — Wed, 03 Apr 2019 23:11:06 GMT

Assuming your R80.x Management was upgraded from R77.x, your Internal CA is still probably using SHA1 certificates.
A fresh install of R80.x would result in a SHA256 ICA.
If you want to change your ICA to SHA256, see: https😕/supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk103840
Note, if you're managing older gateways, this will break your ability to manage them.
The SK above lists the versions that supports a SHA256 ICA.

sk103839 relates to how the gateway and management fetches updates from Check Point and isn't related to the ICA.

topic Sha-1 certificate on R80.10 Management server in General Topics

Sha-1 certificate on R80.10 Management server

Re: Sha-1 certificate on R80.10 Management server