topic Gateway certificate has expired in SASE and Remote Access

Gateway certificate has expired

Virupaksha — Wed, 15 Jul 2020 05:51:17 GMT

Hi Guys,

While accessing the remote VPN, getting gateway certificate expired alert.

Error:Connection Failed

"Gateway certificate has expired. Please check your's computer time and date settings"

I have checked the VPN expiry date but it is 14th may 2021.

Can you please help me on this.

Re: Gateway certificate has expired

JozkoMrkvicka — Wed, 15 Jul 2020 06:02:16 GMT

Hi,

Have you checked times on your computer and your gateway/management? Are you using NTP ?

Did you check defaultCert certificate inside IPsec VPN tab of the affected gateway ?

What warning you are getting once you install policy on affected gateway ? Or, are you even able to install policy on affected gateway ?

Do you have valid license? did you use eval lic in the past which may expire ?

Re: Gateway certificate has expired

Virupaksha — Wed, 15 Jul 2020 07:08:09 GMT

Hi,

Thanks for the reply.

i have checked the IPSEC VPN tab under the activie gateway. In the tab default certificate is expired.

Can you please help me how to renew the default certificate in the IPSEC vpn.

Re: Gateway certificate has expired

_Val_ — Wed, 15 Jul 2020 07:51:39 GMT

From https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk31539

To renew the certificate:

Edit the Check Point Gateway Object Properties in SmartDashboard.
Go to the IPSec VPN tab.
Under the Repository of Certificates section, click the "Renew" button.
Click "Yes" to continue.
Click "OK" to generate Keys and get Internal CA Certificate.
Click "OK" on the Gateway Properties.
Install Policy on the gateway.

Re: Gateway certificate has expired

Prabulingam_N1 — Thu, 16 Jul 2020 15:29:01 GMT

Hi,

You should see "Renew" button there, please try selecting the option.

Regards, Prabu

Re: Gateway certificate has expired

AkosBakos — Wed, 28 Jul 2021 07:50:44 GMT

Hi _Val_,

I'm just wondering maybe the VPN certificate renew can be done with mgmt_cli?
I haven't found any related topic in the guide.

What is your opinion?

Re: Gateway certificate has expired

PriyaRaut — Tue, 31 May 2022 07:55:24 GMT

Kindly confirm if certificate to be export and share with users after renewal or it will automatically get synced ?

Re: Gateway certificate has expired

Karan0587 — Fri, 14 Apr 2023 00:36:08 GMT

Hi @_Val_

Is there a way the certificate can automatically renewed?

Re: Gateway certificate has expired

_Val_ — Mon, 17 Apr 2023 10:10:17 GMT

I do not think so, the procedure is already described above

Re: Gateway certificate has expired

sarshar — Tue, 05 Dec 2023 14:19:58 GMT

Hi Valerie,

Does the VPN connection get disrupted or glitched during the cert renewal?

Should I schedule a planned outage, even for a minute, prior to certificate generation?

Re: Gateway certificate has expired

_Val_ — Tue, 05 Dec 2023 14:28:08 GMT

Who's Valerie?

It is always a good idea to plan for downtime. Plan for a short interruption around policy installation time