topic Re: How to change certificate password of Checkpoint Mobile VPN - Certificate Password in SASE and Remote Access

How to change certificate password of Checkpoint Mobile VPN - Certificate Password

PointOfChecking — Thu, 06 Mar 2025 09:09:45 GMT

I've looked everywhere and it doesn't appear that anyone has posted this previously so I thought I'd post a short guide on this.

To change the client certificate password of your Checkpoint Mobile Access VPN certificate, you can follow the below steps.

1. Open your Check Point Mobile Client and browse to your certificate if it isn't already populated in the field.

2. Click on the "Certificate" Icon highlighted in the below screenshot

3. Enter the current certificate password into the presented prompt as shown below

4. On the window that appears, click the "Change Password" button as shown below

5. On the "Change Certificate Password" window that appears, enter the old and new passwords as prompted and press "OK". If you've done this correctly, you will be shown the "Certificate password replaced successfully" window as below

6. You can now press "OK" to close all the windows and connect with your new password.

Easy and quick to do!

This does rely on the user proactively changing the password and doesn't force any complex rules, but it's one step in the right direction.

If anyone knows how to to configure a minimum time period to force password change, or to enforce complexity requirements, I would love to know, so please reply to this post.

Thank you for reading!

Re: How to change certificate password of Checkpoint Mobile VPN - Certificate Password

_Val_ — Mon, 10 Mar 2025 07:48:26 GMT

Why would you need to do that in the first place?

Re: How to change certificate password of Checkpoint Mobile VPN - Certificate Password

PointOfChecking — Tue, 11 Mar 2025 07:59:52 GMT

Thanks for reading Val,

I understand without the actual certificate file, knowing the password is useless.

I also understand that if someone had made a copy of the certificate file and stolen it, changing the password on the original certificate will not change the password on the stolen certificate.

However, as you know, most companies have password policies which require you to change your password on a frequent basis.

Not being able to change it breaks those policies.

Even if you don't agree with some of the policies, if they've been set, you must find a way to follow them sadly.

If this helps one unlucky engineer, then it's a post worth posting I think 😀

Re: How to change certificate password of Checkpoint Mobile VPN - Certificate Password

the_rock — Tue, 11 Mar 2025 13:34:16 GMT

Super valid point, thanks for sharing!

Andy

Re: How to change certificate password of Checkpoint Mobile VPN - Certificate Password

PhoneBoy — Tue, 18 Mar 2025 22:56:02 GMT

I've had to do this a few times myself for various reasons.
Thanks for sharing!

Re: How to change certificate password of Checkpoint Mobile VPN - Certificate Password

PointOfChecking — Fri, 21 Mar 2025 10:04:11 GMT

Here's a question for you, if I may.

Is there a way to lock the certificate if say 5 failed attempts were made on the password?

Otherwise a brute force attack can be made on the certificate to get it's password?

Re: How to change certificate password of Checkpoint Mobile VPN - Certificate Password

G_W_Albrecht — Fri, 21 Mar 2025 10:39:56 GMT

Sure ! But to require you to change your password on a frequent basis does not make anything safer, quite the contrary, as people then use simpler passwords. Many companies have dropped this requirement out of good reasons...

Re: How to change certificate password of Checkpoint Mobile VPN - Certificate Password

PhoneBoy — Fri, 21 Mar 2025 14:30:39 GMT

No, and I'm not sure how a password-protected file of any kind would implement such "brute force protection" against any tool that might be able to read it.