topic Re: Checkpoint Endpoint VPN MacOs in SASE and Remote Access

Checkpoint Endpoint VPN MacOs

Lgriger — Wed, 11 May 2022 12:18:20 GMT

Hello,

why is not supportet "CAPI" authorization for MacOS ?

Re: Checkpoint Endpoint VPN MacOs

G_W_Albrecht — Wed, 11 May 2022 12:27:39 GMT

It is supported, see sk151714: SSL negotiation fails, "No client certificate was provided" error, sk98466 - "No valid certificate with acceptable DN found in the Keychain" pop-up in Endpoint Security Client / Endpoint Security VPN on Mac OS X when connecting with CAPI certificate, sk116865: "No valid certificate with acceptable DN found in the Keychain" pop-up in Endpoint Security Client / Endpoint Security VPN on Mac OS

Re: Checkpoint Endpoint VPN MacOs

Lgriger — Thu, 12 May 2022 12:45:35 GMT

Do you see CAPI ? in Image.png ?

Re: Checkpoint Endpoint VPN MacOs

G_W_Albrecht — Thu, 12 May 2022 12:56:15 GMT

See Remote Access VPN R81.10 Administration Guide p. 46, 56, 59. I am using CP RA VPN client with a certificate stored in Mac OS KeyChain, what in detail are you trying ?

Re: Checkpoint Endpoint VPN MacOs

Lgriger — Thu, 12 May 2022 13:04:11 GMT

A okay,
but my case is different I need load certificate from smartcard(PKI) and I am not sure if it possible download cert from it I think not.
I need put card into reader and after for me will be possible connect into VPN whis just ask on pincode and thats it.
This way working for windows but not for Mac M1.

Re: Checkpoint Endpoint VPN MacOs

G_W_Albrecht — Thu, 12 May 2022 13:18:11 GMT

If the SmartCard is mounted, Site created and certificate from SmartCard is selected for authorization, it will work this way.

Re: Checkpoint Endpoint VPN MacOs

Lgriger — Thu, 12 May 2022 13:39:09 GMT

yes its working now, i am sorry ,again issue was between monitor and chair.