Gateway certificate has expired

[Virupaksha]

Hi Guys,

While accessing the remote VPN, getting gateway certificate expired alert.

Error:Connection Failed

"Gateway certificate has expired. Please check your's computer time and date settings"

I have checked the VPN expiry date but it is 14th may 2021.

Can you please help me on this.

[JozkoMrkvicka]

Hi,

Have you checked times on your computer and your gateway/management? Are you using NTP ?

Did you check defaultCert certificate inside IPsec VPN tab of the affected gateway ?

What warning you are getting once you install policy on affected gateway ? Or, are you even able to install policy on affected gateway ?

Do you have valid license? did you use eval lic in the past which may expire ?

[Virupaksha]

 Hi,

Thanks for the reply.

i have checked the IPSEC VPN tab under the activie gateway. In the tab default certificate is expired.

Can you please help me how to renew the default certificate in the IPSEC vpn.

[Prabulingam_N1]

Hi,

You should see "Renew" button there, please try selecting the option.

Regards, Prabu

[_Val_ · Accepted solution]

From https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

To renew the certificate:

1. Edit the Check Point Gateway Object Properties in SmartDashboard.
2. Go to the IPSec VPN tab.
3. Under the Repository of Certificates section, click the "Renew" button.
4. Click "Yes" to continue.
5. Click "OK" to generate Keys and get Internal CA Certificate.
6. Click "OK" on the Gateway Properties.
7. Install Policy on the gateway.

[AkosBakos]

Hi _Val_,

I'm just wondering maybe the VPN certificate renew can be done with mgmt_cli?
I haven't found any related topic in the guide.

What is your opinion?

BR

A

[PriyaRaut]

Kindly confirm if certificate to be export and share with users after renewal or it will automatically get synced ?

[Karan0587]

Hi  @_Val_ 

Is there a way the certificate can automatically renewed?

[_Val_]

I do not think so, the procedure is already described above

[sarshar]

Hi Valerie,

Does the VPN connection get disrupted or glitched during the cert renewal?

Should I schedule a planned outage, even for a minute, prior to certificate generation?

[_Val_]

Who's Valerie?

It is always a good idea to plan for downtime. Plan for a short interruption around policy installation time