Uploading External Certificate on Checkpoint Gateway

[LostBoY]

we recently had to replace all the self signed certs from out devices. I received a cert, root cert and key from DIGICERT.

from openssl i combined cert and key into a .p12 file and imported in FW. However as i didnt include root in their the cert validation is failing in subsequent scans.

Can i combine root ,cert and key files to create a .p12 ? will this solve the issue as it will have the entire chain then.

[the_rock]

Sounds like that can work.

[PhoneBoy]

Yes, you need to include all the intermediary CAs in the .p12 file.