UserCheck not using provided certificate - MultiPortal configuration?

[B_P]

I uploaded a certificate to UserCheck through SmartConsole but the cluster is still sending back the cert specified under IPSEC VPN. Searching around it appears this may be because of some MultiPortal feature? However, I cannot find any documentation on configuring MultiPortal beyond some commands, i.e. mpclient list and cpwd_admin list which confirm MultiPortal is running and listing UserCheck.

How do I get the gateway cluster to use the certificate I created specifically for UserCheck? The IPSEC certs are/should be separate. I do not use Remote Access, etc.

[the_rock]

Maybe try this:

mpclient set portal UserCheck https-cert "<cert-object-name-in-CP>"

Andy

[B_P]

Thanks @the_rock 

Any chance you know a command to show the installed cert or find the cert object name?

[emmap]

It may be this one:

https://support.checkpoint.com/results/sk/sk131212

[B_P · Accepted solution]

The solution was to set the UserCheck URL to https instead of http per here and sk176372. That is a smidge confusing considering it was already operating on https while it was set to http....

[the_rock]

I never changed that option, works fine for me.

Andy

[B_P]

Are you using a unique cert for UserCheck or is it shared with IPSEC or other items?

[the_rock]

Not unique, maybe thats why.