Check Point Mobile

[Daniel_Kavan]

RE: sslvpn

Users are being prompted to install a certifcate form a CA claiming to represent Check Point Mobile.

Windows cannot validate the certificate is actually from Check Point Mobile.

Thumbprint (sha1) 71F....

Warning: If you install this root certifcate...

Where to I go in the manager to verify the thumbprint?  The thumbrint in portal settings on that gateway is not matching.

[G_W_Albrecht]

This is the self-signed CP GW certificate - not CPs... See:

sk69660: How to generate Server Certificate Signing Request (CSR) and import the new 3rd Party certi...

sk110540: How to switch from 3rd party CA to Internal CA certificate for SSL clients connection

[Daniel_Kavan]

Do you want to DELETE the certificate from the Root store?

The warning is actually from CP, delete Subject: Check Point - CSHell., IL. Checkpoint, Check Point Moible

Issuer: Self Issued

[G_W_Albrecht]

I do not want to delete anything - your second post now makes me think i did not understand the question, so please disregard my answer !

[Daniel_Kavan · Accepted solution]

TAC said it's expected and thru windows, and the fingerprint is random (doens't tie back to anything) and the sk is hidden (only CP can see it).     I just asked the customer to say YES to both.  This sk answers part of it while the other half is hidden.   https://support.checkpoint.com/results/sk/sk122077