topic Re: How to implement a PKI certificate on standalone VM with Mobile Access Blade? in Mobile

How to implement a PKI certificate on standalone VM with Mobile Access Blade?

Daniel_Dor — Thu, 23 Nov 2017 07:26:19 GMT

Greetings,

1. One of our customers has Internal PKI Server (they implemented PKI with Windows Server 2012 R2)
2. The customer created a new standalone VM with Mobile Access Blade on, and they would like to enroll this machine with the PKI certificate.
3. What is the best way to implement this PKI certificate on the new standalone VM with Mobile Access Blade?

4. They would like something like this:

Thanks.

Daniel

Re: How to implement a PKI certificate on standalone VM with Mobile Access Blade?

Daniel_Dor — Thu, 23 Nov 2017 07:27:01 GMT

https://community.checkpoint.com/people/dwelccfe6e688-522c-305c-adaa-194bd7a7becc‌ -> What is the best way to do that?

Re: How to implement a PKI certificate on standalone VM with Mobile Access Blade?

Daniel_Dor — Thu, 23 Nov 2017 07:39:23 GMT

I assume that this is being done using the process here -> am I correct?

Re: How to implement a PKI certificate on standalone VM with Mobile Access Blade?

PhoneBoy — Thu, 23 Nov 2017 16:57:29 GMT

There are several places where certificates can be used with Mobile Access Blade:

1. The Gaia WebUI (for managing the device)

2. The Mobile Access Blade portal itself (for logging in through a web browser)

3. Client VPN certificates

Can you clarify?

Re: How to implement a PKI certificate on standalone VM with Mobile Access Blade?

Daniel_Dor — Sun, 26 Nov 2017 11:28:23 GMT

Their goal is that the Mobile Access Blade machine will be able to communicate with their Internal AD and Exchange Servers without warning. Therefore, that would be your number 1.

Re: How to implement a PKI certificate on standalone VM with Mobile Access Blade?

PhoneBoy — Sun, 26 Nov 2017 18:19:23 GMT

That would be option #4, sites you are accessing via MAB

This is covered in the "Adding a Trusted Certificate Authority for Website Certification" section of the Mobile Access Blade docs: Mobile Access R80.10 (Part of Check Point Infinity)