https://community.checkpoint.com/t5/SASE-and-Remote-Access/Mobile-Client-Machine-Authentication-and-Customized-MSI/m-p/108915#M9245 <P>hi guys,</P><P>&nbsp;</P><P>i'm trying to setup a Machine Authentication using certificate (release from our Active Directory CA) and create a custom MSI to deploy via a GPO.</P><P>The main problem is that, if i'm starting from scratch (install clean CheckPoint agent, configure just the site - without login, modify trac.defaults, repackaging everything with VPNConfig - using edited trac.defaults and trac.config from the installation), the only way to get MA working is to connect first time with a correct username&amp;password, and after that the MA start working.</P><P>There is a way to avoid this? I've readed twice the documentation, but this part isn't too much clear.</P><P>Thanks in advance!</P> Tue, 26 Jan 2021 17:58:32 GMT stich86 2021-01-26T17:58:32Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Mobile-Client-Machine-Authentication-and-Customized-MSI/m-p/108915#M9245 <P>hi guys,</P><P>&nbsp;</P><P>i'm trying to setup a Machine Authentication using certificate (release from our Active Directory CA) and create a custom MSI to deploy via a GPO.</P><P>The main problem is that, if i'm starting from scratch (install clean CheckPoint agent, configure just the site - without login, modify trac.defaults, repackaging everything with VPNConfig - using edited trac.defaults and trac.config from the installation), the only way to get MA working is to connect first time with a correct username&amp;password, and after that the MA start working.</P><P>There is a way to avoid this? I've readed twice the documentation, but this part isn't too much clear.</P><P>Thanks in advance!</P> Tue, 26 Jan 2021 17:58:32 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Mobile-Client-Machine-Authentication-and-Customized-MSI/m-p/108915#M9245 stich86 2021-01-26T17:58:32Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Mobile-Client-Machine-Authentication-and-Customized-MSI/m-p/108957#M9246 <P>ok i found a work-around.<BR />Configuring the site using "CAPI certificate" will deploy the client and automatically connect without user intervention <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Wed, 27 Jan 2021 10:40:09 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Mobile-Client-Machine-Authentication-and-Customized-MSI/m-p/108957#M9246 stich86 2021-01-27T10:40:09Z