topic Re: VPN Certificate Replacement script in SASE and Remote Access

VPN Certificate Replacement script

jg2712 — Thu, 28 Oct 2021 13:25:25 GMT

I know that you can renew this via the GUI but I'm looking to know whether there is a CLI option for this.
I have yet to find any reference to this in the CLI reference guide or the Management CLI guide.

Anybody??

Re: VPN Certificate Replacement script

G_W_Albrecht — Thu, 28 Oct 2021 14:34:52 GMT

The command you need is cpca_client, see CLI R81.10 Reference Guide p.103ff. Also, see cp_conf ca on page 91.

Re: VPN Certificate Replacement script

jg2712 — Thu, 28 Oct 2021 14:39:07 GMT

It's very kind of you to reply so quickly but we are not using the ICA.
Our VPN certificate (e.g. remoteaccess.organisation.org) was recently renewed;
We had to import the CA chain
We had to issue a CSR
We had to import the resultant certificate

It is these three steps I would like to script if possible.