topic Re: Import SAN Certificat on the IPSEC Repository in SASE and Remote Access

Import SAN Certificat on the IPSEC Repository

Shiny_ma_ghost — Thu, 12 Oct 2023 19:07:54 GMT

Hello, friends,

I hope you're well. This is my first time posting here, so I don't know if this is the right place.

I want to do the same thing as this post: https://community.checkpoint.com/t5/Remote-Access-VPN/Changing-the-Certificate-presented-during-Endpoint-Security/td-p/80714

I don't know how to import my SAN certificate to the security gateway because i did the CSR from the CLI.

Here's the situation:

I generated the CSR for my SAN certificate using the CLI: https://support.checkpoint.com/results/sk/sk170395

and requested my certificate, which I now have, but I can't find a way to import my certificate into the security gateway's certificate repository. Can anyone help me?

Regards,

Re: Import SAN Certificat on the IPSEC Repository

PhoneBoy — Fri, 13 Oct 2023 14:54:38 GMT

Have you created an object for the relevant Certificate Authority?
This is necessary to use a third party certificate for the gateway.

Re: Import SAN Certificat on the IPSEC Repository

Shiny_ma_ghost — Fri, 13 Oct 2023 17:14:41 GMT

Hello PhoneBoy,

Thank you for your reply.

Have you created an object for the certificate authority concerned? Not yet, as I haven't generated the CSR via the GUI. I understand that I need to do this (create the object for the certification authority) in order to generate the CSR.

I'll give it a try and let you know the result.