How to implement a PKI certificate on standalone VM with Mobile Access Blade?

[Daniel_Dor]

Greetings,

1. One of our customers has Internal PKI Server (they implemented PKI with Windows Server 2012 R2)
2. The customer created a new standalone VM with Mobile Access Blade on, and they would like to enroll this machine with the PKI certificate.
3. What is the best way to implement this PKI certificate on the new standalone VM with Mobile Access Blade? 

4. They would like something like this:

Thanks.

Daniel

[Daniel_Dor]

https://community.checkpoint.com/people/dwelccfe6e688-522c-305c-adaa-194bd7a7becc‌ -> What is the best way to do that?

[Daniel_Dor]

I assume that this is being done using the process here -> am I correct?

[PhoneBoy]

There are several places where certificates can be used with Mobile Access Blade:

1. The Gaia WebUI (for managing the device)

2. The Mobile Access Blade portal itself (for logging in through a web browser)

3. Client VPN certificates

Can you clarify?

[Daniel_Dor]

Their goal is that the Mobile Access Blade machine will be able to communicate with their Internal AD and Exchange Servers without warning. Therefore, that would be your number 1.

[PhoneBoy]

That would be option #4, sites you are accessing via MAB

This is covered in the "Adding a Trusted Certificate Authority for Website Certification" section of the Mobile Access Blade docs: Mobile Access R80.10 (Part of Check Point Infinity)