topic Re: Mobile Access Agent for Linux "Cannot Delete Certificates" in SASE and Remote Access

Mobile Access Agent for Linux "Cannot Delete Certificates"

AlfredoH — Sun, 16 Jan 2022 01:47:42 GMT

Hello everyone!

I'm having a problem while installing the Mobile Access Portal agent to connect to the VPN. I'm working on Ubuntu 21.10, I already installed everything from this site: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119772

I have to install the agent but when I run it using "sudo bash cshell_install.sh" I receive this as output:

Start Check Point Mobile Access Portal Agent installation
Extracting Mobile Access Portal Agent... Done
Installing Mobile Access Portal Agent...
Cannot delete certificates. Installation aborted.

And I can't find any solution. Any suggestions?

Thank you in advance!

Re: Mobile Access Agent for Linux "Cannot Delete Certificates"

huangsoul — Mon, 21 Mar 2022 14:46:37 GMT

I am having the exact problem. Ubuntu 20.04. Any one can help?

Re: Mobile Access Agent for Linux "Cannot Delete Certificates"

Maxno — Sun, 17 Apr 2022 13:30:15 GMT

I am having the exact problem.
Ubuntu 21.10.
Any one can help?

Re: Mobile Access Agent for Linux "Cannot Delete Certificates"

G_W_Albrecht — Sun, 17 Apr 2022 15:44:13 GMT

sk120452: Mobile Access Portal Agent fails to install the certificate ?

Re: Mobile Access Agent for Linux "Cannot Delete Certificates"

Schums — Mon, 23 May 2022 13:18:38 GMT

Someone with Ubuntu 22.04 is also having the same problem with their cshell_install.sh. The error is different from the ones in the link:

certutil: could not find certificate named "CShell_Certificate": SEC_ERROR_BAD_DATABASE: security library: bad database.

certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key database is in an old, unsupported format.

Re: Mobile Access Agent for Linux "Cannot Delete Certificates"

davek — Wed, 08 Jun 2022 15:47:19 GMT

I am having the same issue with a fresh install of Ubuntu 22.04. I have installed the required Java Runtime Environment, linux tools, and libraries documented here :

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk119772

I am getting the error "Cannot delete certificates. Installation aborted." when running the 'cshell_installation.sh' script.

Any news or updates ?

Re: Mobile Access Agent for Linux "Cannot Delete Certificates"

RuiRibeiro — Thu, 09 Jun 2022 16:10:03 GMT

Hi,

See this post https://community.checkpoint.com/t5/Remote-Access-VPN/CShell-SNX-chrooted-wrapper-automated-setup-for-Linux-bash/m-p/150151#M7232

Re: Mobile Access Agent for Linux "Cannot Delete Certificates"

RuiRibeiro — Thu, 09 Jun 2022 16:11:36 GMT

See my post, that error is was one the reasons I wrote a wrapper setup script https://community.checkpoint.com/t5/Remote-Access-VPN/CShell-SNX-chrooted-wrapper-automated-setup-for-Linux-bash/m-p/150151#M7232

Re: Mobile Access Agent for Linux "Cannot Delete Certificates"

RuiRibeiro — Thu, 09 Jun 2022 22:45:47 GMT

see my post https://community.checkpoint.com/t5/Remote-Access-VPN/CShell-SNX-chrooted-wrapper-automated-setup-for-Linux-bash/m-p/150151#M7232

Re: Mobile Access Agent for Linux "Cannot Delete Certificates"

RuiRibeiro — Thu, 09 Jun 2022 22:46:27 GMT

see my post for an automated solution https://community.checkpoint.com/t5/Remote-Access-VPN/CShell-SNX-chrooted-wrapper-automated-setup-for-Linux-bash/m-p/150151#M7232

Re: Mobile Access Agent for Linux "Cannot Delete Certificates"

CheckPointerXL — Fri, 08 Jul 2022 16:00:22 GMT

hello,

did you fix it?

Re: Mobile Access Agent for Linux "Cannot Delete Certificates"

Oranger — Mon, 08 Aug 2022 12:04:31 GMT

Using your solution, I'm able to connect once. Reconnect not working. Browser window closes after "Connecting...".

Can connect again only after reinstalling vpn.sh. What am I doing wrong?

Re: Mobile Access Agent for Linux "Cannot Delete Certificates"

WanderMaia — Sun, 23 Oct 2022 18:55:09 GMT

Good evening!

On Linux Mint 21 I installed without any problems, but on ubuntu 22.04 and 22.10 I had the same problem. In the case of ubuntu, as of version 22.04, the firefox browser is distributed in snap format. I suspect the cause is the files being in different locations.

As a workaround, I removed firefox snap and installed firefox .deb and it worked perfectly. Below are the commands to install on ubuntu 22.04 or 21.10 (works on based distributions):

Prerequisites:

Update:

sudo apt update && apt upgrade -y

Install Java (openJDK)

sudo apt install default-jre -y
sudo apt install default-jdk -y

Install packages

sudo apt install software-properties-common apt-transport-https wget curl build-essential xterm libnss3-tools openssl -y

Install Packages (x86)

sudo dpkg --add-architecture i386
sudo apt install libx11-6:i386 libc6:i386 libncurses5:i386 libstdc++6:i386 libstdc++5:i386 libpam0g:i386 -y
sudo apt install binutils-multiarch binutils-multiarch-dev -y

Remove firefox Snap:

sudo snap remove --purge firefox

Install firefox (.deb)

sudo add-apt-repository ppa:mozillateam/ppa
sudo apt update
sudo apt install --target-release 'o=LP-PPA-mozillateam' firefox

Adjust repository priority for firefox

sudo cat << EOF | sudo tee -a /etc/apt/preferences.d/mozillateamppa
Package: firefox*
Pin: release o=LP-PPA-mozillateam
Pin Priority: 501

EOF

Run the scripts

./snx_install.sh
./cshell_install.sh

Access the VPN through chrome (I always do it) and accept the certificate.

Hope this helps.

Re: Mobile Access Agent for Linux "Cannot Delete Certificates"

Markito — Tue, 14 Mar 2023 17:52:01 GMT

Hi,

I have the same problem in ubuntu 22.04, the only thing I did was comment these lines and it is functional.

Re: Mobile Access Agent for Linux "Cannot Delete Certificates"

asdad — Mon, 10 Nov 2025 12:32:29 GMT

Modifying .sh breaks data integrity of the script.