internal root ca expiring on R81.20

[sorinstf]

Hello, 

I've upgraded MDS from R80.40 to R81.20. As I have not installed JHA Take 26, how do I manually renew the ICA for this domain?

for DOMAIN in $(${MDSVERUTIL} AllCMAs); do mdsenv ${DOMAIN}; echo -n "${CustomerName} ---> " ; cpopenssl pkcs12 -in ${FWDIR}/conf/InternalCA.p12 -nokeys -nomacver -passin pass: 2>/dev/null | cpopenssl x509 -noout -enddate ; done | sort --key=6

DMS1_main_emea---> notAfter=Feb23 06:23:09 2024 GMT

.....................

[Expert@mds:0]# cpinfo -y all

This is Check Point CPinfo Build 914000231 for GAIA
[MGMT]
No hotfixes..
[IDA]
No hotfixes..
[CPFC]
No hotfixes..
[FW1]
HOTFIX_NGM_DOCTOR_AUTOUPDATE
HOTFIX_VCE_R81_20_AUTOUPDATE
HOTFIX_WEBCONSOLE_AUTOUPDATE
HOTFIX_PUBLIC_CLOUD_CA_BUNDLE_AUTOUPDATE
HOTFIX_GOT_MGMT_AUTOUPDATE
HOTFIX_GOT_TPCONF_MGMT_AUTOUPDATE

FW1 build number:
This is Check Point Security Management Server R81.20 - Build 440
This is Check Point's software version R81.20 - Build 703

[PhoneBoy · Accepted solution]

https://support.checkpoint.com/results/sk/sk158096 

[sorinstf]

Thanks for the Sk. 

I've just upgraded to JHA Take 26 and now this has also been fixed. Very useful feature release. 

[the_rock]

Definitely sk Phoneboy gave is what you need to follow.

Regards,

Andy