topic Re: Certificate Error in SASE and Remote Access

Certificate Error

Sanjay_S — Tue, 29 Mar 2022 11:49:24 GMT

Hi All,

We have enabled the SAML authentication for the Remote Access VPN users for one of our customers. Also when we they login they are getting the attached certificate error. May i know what could be the best way to fix it? Do we need to install the 3rd party CA certificate to fix the issue? Because this certificate error was not there when the users were authenticating with Radius. But the issue started only after the SAML authentication.

Please find the attached screenshot.

Regards,

Sanjay S

Re: Certificate Error

Juan_ — Tue, 29 Mar 2022 12:43:02 GMT

Hi Sanjay,

On the gateway object, you will find a tab for SAML configuration.
Right there you can upload the certificate you are going to use for that portal.

Make sure the computers trust that certificate.

IE: the root CA of that cert is present on the "Trusted Root CA" repository of the machines

Re: Certificate Error

Sanjay_S — Wed, 30 Mar 2022 07:24:32 GMT

Hi Juan,

Thanks for your quick response on this. So in the SAML configuration i am trying to add a new Aliases which is popping me an error message "Hostname is not a valid FQDN or IP". So first we need to add the URL in the DNS and make sure it resolves to the IP and then we need to add it in the Aliases is it?

Regards,

Sanjay S

Re: Certificate Error

Sanjay_S — Wed, 30 Mar 2022 07:31:37 GMT

Hi Juan,

I also need to know if we need to generate any CSR for the certificate to get from the Third party?

Regards,

Sanjay S

Re: Certificate Error

Juan_ — Wed, 30 Mar 2022 13:25:13 GMT

Hi Sanjay,

Yes, have a look here:

https://community.checkpoint.com/t5/Remote-Access-VPN/Create-CSR-and-Importing-third-party-certificate-in-Mobile/td-p/39942

The URL of the portal will have to match the CN of the certificate and yes, you'll need a DNS entry as you mention.

Juan