topic Re: Do I have to create an SSL cert, or can I use a PFX I've already got? in SASE and Remote Access https://community.checkpoint.com/t5/SASE-and-Remote-Access/Do-I-have-to-create-an-SSL-cert-or-can-I-use-a-PFX-I-ve-already/m-p/23665#M13257 <HTML><HEAD></HEAD><BODY><P>If you want that certificate signed by a different CA other than the internal one, then you will need to add the relevant CA key to Security Management.</P><P>Create an object of type Servers &gt; Trusted CA.</P><P>That said, I believe the gateway still has to generate the certificate, so at best you would be generating a CSR against that CA, which that CA would then have to sign.</P></BODY></HTML> Fri, 31 Aug 2018 18:16:10 GMT PhoneBoy 2018-08-31T18:16:10Z Do I have to create an SSL cert, or can I use a PFX I've already got? https://community.checkpoint.com/t5/SASE-and-Remote-Access/Do-I-have-to-create-an-SSL-cert-or-can-I-use-a-PFX-I-ve-already/m-p/23662#M13254 <HTML><HEAD></HEAD><BODY><P>I'm trying to assign a cert to my gateway's vpn&nbsp;services.&nbsp; &nbsp;The gateways want me to create and generate a cert, but i've already got an export cert in PFX format that I'd like to use.&nbsp; &nbsp;Is it possible to do this?</P></BODY></HTML> Fri, 31 Aug 2018 16:31:09 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Do-I-have-to-create-an-SSL-cert-or-can-I-use-a-PFX-I-ve-already/m-p/23662#M13254 Larry_Chisholm 2018-08-31T16:31:09Z Re: Do I have to create an SSL cert, or can I use a PFX I've already got? https://community.checkpoint.com/t5/SASE-and-Remote-Access/Do-I-have-to-create-an-SSL-cert-or-can-I-use-a-PFX-I-ve-already/m-p/23663#M13255 <HTML><HEAD></HEAD><BODY><P>There are several places certificates could be used/configured.</P><P>Are we talking the Mobile Access Portal or something else?</P><P>Screenshots are exceptionally helpful.</P></BODY></HTML> Fri, 31 Aug 2018 17:38:58 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Do-I-have-to-create-an-SSL-cert-or-can-I-use-a-PFX-I-ve-already/m-p/23663#M13255 PhoneBoy 2018-08-31T17:38:58Z Re: Do I have to create an SSL cert, or can I use a PFX I've already got? https://community.checkpoint.com/t5/SASE-and-Remote-Access/Do-I-have-to-create-an-SSL-cert-or-can-I-use-a-PFX-I-ve-already/m-p/23664#M13256 <HTML><HEAD></HEAD><BODY><P><IMG alt="" class="image-1 jive-image j-img-original" src="https://community.checkpoint.com/legacyfs/online/checkpoint/69970_Cert-Checkpoint.jpg" /></P><P></P><P>Here's where I'm trying to add the certificate.&nbsp; &nbsp;When I click add, there's no option to use a currently existing cert, just to create a new CSR</P></BODY></HTML> Fri, 31 Aug 2018 18:02:08 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Do-I-have-to-create-an-SSL-cert-or-can-I-use-a-PFX-I-ve-already/m-p/23664#M13256 Larry_Chisholm 2018-08-31T18:02:08Z Re: Do I have to create an SSL cert, or can I use a PFX I've already got? https://community.checkpoint.com/t5/SASE-and-Remote-Access/Do-I-have-to-create-an-SSL-cert-or-can-I-use-a-PFX-I-ve-already/m-p/23665#M13257 <HTML><HEAD></HEAD><BODY><P>If you want that certificate signed by a different CA other than the internal one, then you will need to add the relevant CA key to Security Management.</P><P>Create an object of type Servers &gt; Trusted CA.</P><P>That said, I believe the gateway still has to generate the certificate, so at best you would be generating a CSR against that CA, which that CA would then have to sign.</P></BODY></HTML> Fri, 31 Aug 2018 18:16:10 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Do-I-have-to-create-an-SSL-cert-or-can-I-use-a-PFX-I-ve-already/m-p/23665#M13257 PhoneBoy 2018-08-31T18:16:10Z