Platform Portal Cert Replacement

[Conor_Mulcahy]

Hi All,

Trying to replace the cert on platfrom portal to an internal CA cert, version is R81.10 take 150, when i upload the cert and push the policy it then looks like the VPN is presenting the new cert to the client and asking it to trsut cert.

Is this expected behaviour, my understanding is you can have a seperate cert for usercheck and platfrom portal while leaving the default cert on the vpn? 

I rolled back using a backup but need to get this sorted. Also after i installed policy it looked like the web gui on the gateway was still using the cert it comes with which juts has its IP listed when you look in the browser.

Anyone can point me in the right direction, appreciate any help, thanks.

[AkosBakos]

Hi @Conor_Mulcahy 

As I know the VPN cert is located here:

The two cert were meybe the same?

And an another thread about platform portal

Akos

[Conor_Mulcahy]

But can't you have a separate cet for platform portal, so if you change the platform portal cert it should not change it for VPN  as well? 

[the_rock]

Technically, it can be different. Can you send what you have for platform?

Andy

[Conor_Mulcahy]

I just uploaded a .p12 cert and setup the alias to match the cert as well as DNS entry but then it looked like the cert then gets presented to the VPN  client. i've reversed the change so cant send screenshot, TAC case are saying if you change in one place usercheck or platform portal then it will change for all, the cert being presented to to the vpn client is expected behavior?