Checkpoint R75.40 Windows: Renew ICA certificate

[Diego_Carreno]

Hello everyone:

I need your help and knowledge:

I have a Checkpoint R75.40 splat mounted on a Windows (I am clear that it has been out of support for a long time and is in the process of updating to recommended versions.) which the ICA certificate is about to expire.

I have searched for information on how to do it, but there is no clarity for that version, which is why I come to you in case you have knowledge of how it is done.

Thank you very much for your help!!!

[the_rock]

My favorite flavor of that version was R75.47, really good! : - )

Anyway, can you please send a screenshot of what you are referring to, it would help.

Best,

Andy

[Diego_Carreno]

Hello Andy !

Thank you for your help, I attach an image of the internal_ca certificate soon to expire.

Thanks.

[the_rock]

Alrighty mate, lets see what we can do to help. I dont go as far as some folks on here, earliest I recall is R55, but lets see : - )

Andy

[the_rock]

Last time I had to do this, I just followed below and worked fine.

Andy

https://support.checkpoint.com/results/sk/sk158096

This section:

Procedure - If the Internal CA certificate is still valid

[Diego_Carreno]

Thanks Andy, but it gives me the following attached message.

[the_rock]

Not sure if process even applies to version you have, as oldest I see is R76, but try the script listed there under section I mentioned.

Andy

[Diego_Carreno]

Thanks for your help Andy, I will continue investigating.

[the_rock]

No problem, but again, does it let you run the script mentioned in the sk?

Andy

[Diego_Carreno]

The R75.40 that I am reviewing is based on Windows, which is why the solution is more difficult.

[the_rock]

I saw you mentioned splat in your description...

Andy

[Diego_Carreno]

It's true! I got confused, I'm sorry.

[the_rock]

Since its SPLAT, its still based on Linux, so same commands worked like they do in Gaia...Gaia is simply "mix" of splat+old Nokia IPSO OS.

Commands in that sk for the script part definitely should work.

Lets do remote and check it out if you want to.

Best,

Andy

[Diego_Carreno · Accepted solution]

Heelo Andy, I finally failed to renew the CA certificate and used CP_merge to move the configurations to a new mgmt installation.

Thanks for your help!

[the_rock]

Good job 👍