Secondary SMS Certificate expired error

[Ihenock1011]

Hi Team,

We have deployed two Check Point Smart Management Servers (SMS) and their synchronization appears successful. However, when attempting to log in to the secondary SMS, we encounter a certificate expiration error.

Could you please advise on the cause of this issue and the recommended steps for resolving the certificate expiration on the secondary SMS server?

FYI: The error screenshot is attached here.

Thanks,

[just13pro]

When you are login to Primary, will you get the similar error?

[Ihenock1011]

Nop The primary is working Ok.

[Timothy_Hall · Accepted solution]

Known issue that happens every time we set up Management HA for the CCSE labs on R81.20 GA.  Simply execute cprestart or reboot the Secondary and the problem will go away.  This was an issue in prior code releases too, not sure why this can't ever seem to be fixed.

[the_rock]

@Timothy_Hall is 100% right. I had this happen in the lab 3 times and either cprestart or reboot fixes it, easy peasy. 

Andy

[just13pro]

Interesting, I had setup few times with Mgmt HA but so far never encountered any of this error message.

[the_rock]

What version was it?

[just13pro]

mostly R81.10.

Done with R80.10 as well but never encountered such.

[the_rock]

I will try replicate it in R81.10

[Timothy_Hall]

It seems to be some kind of timing/race condition that depends on the performance of the secondary.  In a VMWare environment my CCSE attendees run into it every single time.