topic Multi-Factor Authentication (MFA) for Remote Access VPN with Certificate Key Enrollment for AD user in SASE and Remote Access

Multi-Factor Authentication (MFA) for Remote Access VPN with Certificate Key Enrollment for AD user

Imzi — Thu, 16 Oct 2025 13:31:53 GMT

We have configured 2FA with LDAP on Checkpoint firewall R81.20JHF 105. We are using Cert+Username and Password as the authentication method. Do we need domain admin credentials while to enroll cert key from LDAP to AD USER. We have performed all the required steps for the same but while we enroll and save the certificate, we get an error saying Error Code:67 Overwriting object: Operation not allowed on RDN" . What credentials we need to bypass this error.

Re: Multi-Factor Authentication (MFA) for Remote Access VPN with Certificate Key Enrollment for AD u

the_rock — Fri, 17 Oct 2025 04:39:03 GMT

I believe you need service account with the right permissions.

Re: Multi-Factor Authentication (MFA) for Remote Access VPN with Certificate Key Enrollment for AD u

Imzi — Fri, 17 Oct 2025 09:47:15 GMT

Could you please confirm if LDAP Domain Administrator credentials are required to achieve this requirement,

if credentials with read and write permissions will be sufficient?

Re: Multi-Factor Authentication (MFA) for Remote Access VPN with Certificate Key Enrollment for AD u

the_rock — Fri, 17 Oct 2025 10:14:46 GMT

Im fairly sure just read/write.

Re: Multi-Factor Authentication (MFA) for Remote Access VPN with Certificate Key Enrollment for AD u

Imzi — Sat, 18 Oct 2025 04:39:44 GMT

will test and let you know.

Thanks for your support..!!