Remote Access VPN - certificate based login

[AkosBakos]

Hi CheckMates,

I need your help. 

I have a VPN setup, where de user is authenticated by DN. The disadvantage of this, if I move the user to an another OU, the DN changes. (Un)fortunately, the user certificate  is stored on an external smarcard. In this case I need to recreate the user cert and put it to the smartcard. I have 100+ users.

I changed the auth setting to UPN. The VPN connection is unsuccessful until I recreate the site. After this, everything works as expected.

How can I centrally modify the trac.config? 

Every tip and advice are appreciated.

I don't have Harmony, only SCCM.

Akos

[G_W_Albrecht]

https://community.checkpoint.com/t5/Remote-Access-VPN/Possible-to-create-trac-default-from-trac-conf...

[AkosBakos]

Thank, but this SK is deleted

https://support.checkpoint.com/results/sk/sk94273

Akos

[G_W_Albrecht]

Use https://sc1.checkpoint.com/documents/RemoteAccessClients_forWindows_AdminGuide/Content/Topics-RA-VPN... instead. Also see https://sc1.checkpoint.com/documents/RemoteAccessClients_forWindows_AdminGuide/Content/Topics-RA-VPN... and https://support.checkpoint.com/results/sk/sk122574

[PhoneBoy]

The cpmsi_tool is mentioned in https://sc1.checkpoint.com/documents/RemoteAccessClients_forWindows_AdminGuide/Content/Topics-RA-VPN... 
The tool is also distributed with SmartConsole ( in C:\Program Files (x86)\CheckPoint\SmartConsole\VERSION\PROGRAM\util )

[AkosBakos]

Is that possible, the trac.conf doesn't contain that information which relevant for the field selection (DN or UPN) from the user point of view?

Akos