https://community.checkpoint.com/t5/Events/Automatic-Certificate-Renewal-for-Event-Forwarding/m-p/216308#M15 <P>Hey Checkmates,</P><P>&nbsp;</P><P>I was wondering if there is a way to automatically update the certificates used for Event Forwarding from Checkpoint Infinity Portal.</P><P>&nbsp;</P><P>I have set up event forwarding from Checkpoint to a server, in which a daemon forwards data to a third party. This server is also hosting the certificate authority which I have used to sign the Checkpoint certificate request, as instructed on the <A href="https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Infinity-Portal-Admin-Guide/Content/Topics-Infinity-Portal/Event-Forwarding.htm" target="_self">docs</A>. The mTLS connection is working perfectly fine as of now, but certificate expiration is a concern.</P><P>It's obviously a security concern to have extremely long-lasting certificates, but I also cannot manually upload the certificates to Checkpoint Infinity Portal every few months due to business constraints. I can obviously set up automatic renewal of certificates on the server side, but the problem lies on being able to upload the newly generated certificates to Checkpoint.&nbsp;</P><P>I have searched the API documentation and the forum, but could not find any information about how to automatically re-upload renewed certificates. Am I missing something in the documentation? Or am I misunderstanding that I will need to re-upload renewed certificates?</P><P>&nbsp;</P><P>Thanks in advance!</P> Tue, 04 Jun 2024 07:55:20 GMT AnaCDC 2024-06-04T07:55:20Z https://community.checkpoint.com/t5/Events/Automatic-Certificate-Renewal-for-Event-Forwarding/m-p/216308#M15 <P>Hey Checkmates,</P><P>&nbsp;</P><P>I was wondering if there is a way to automatically update the certificates used for Event Forwarding from Checkpoint Infinity Portal.</P><P>&nbsp;</P><P>I have set up event forwarding from Checkpoint to a server, in which a daemon forwards data to a third party. This server is also hosting the certificate authority which I have used to sign the Checkpoint certificate request, as instructed on the <A href="https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Infinity-Portal-Admin-Guide/Content/Topics-Infinity-Portal/Event-Forwarding.htm" target="_self">docs</A>. The mTLS connection is working perfectly fine as of now, but certificate expiration is a concern.</P><P>It's obviously a security concern to have extremely long-lasting certificates, but I also cannot manually upload the certificates to Checkpoint Infinity Portal every few months due to business constraints. I can obviously set up automatic renewal of certificates on the server side, but the problem lies on being able to upload the newly generated certificates to Checkpoint.&nbsp;</P><P>I have searched the API documentation and the forum, but could not find any information about how to automatically re-upload renewed certificates. Am I missing something in the documentation? Or am I misunderstanding that I will need to re-upload renewed certificates?</P><P>&nbsp;</P><P>Thanks in advance!</P> Tue, 04 Jun 2024 07:55:20 GMT https://community.checkpoint.com/t5/Events/Automatic-Certificate-Renewal-for-Event-Forwarding/m-p/216308#M15 AnaCDC 2024-06-04T07:55:20Z https://community.checkpoint.com/t5/Events/Automatic-Certificate-Renewal-for-Event-Forwarding/m-p/216568#M16 <P>I suspect this is currently not possible, but am confirming with the relevant R&amp;D team.</P> Wed, 05 Jun 2024 16:01:31 GMT https://community.checkpoint.com/t5/Events/Automatic-Certificate-Renewal-for-Event-Forwarding/m-p/216568#M16 PhoneBoy 2024-06-05T16:01:31Z