How to create CSR for the Security Gateway VPN access

[VarunTP]

We have External firewall Security Gateway with 3 firewalls , and my vpn certificate is getting expire and I have to generate CSR. 

Can anyone help to generate SSL for this security gateway ?  Whether I need to generate from CLI or smartconsole ? since 3 firewalls are in SG .

[PhoneBoy]

This is generally done in the gateway (cluster) object.
If you specify an external CA, I believe it should offer to generate a CSR.

[VarunTP]

Thanks for the response , I tried this but getting error "The direct CA certificate in the received chain doesn't match the CA certificate ". 

I checked this but couldnt resolve . This is also mention the same error 
How to fix "The direct CA certificate in the received chain doesn't match the CA certificate for whi...

lemme check , thanks 

[the_rock]

What Phoneboy gave is totally valid, but just wondering, when you say vpn cert is getting expired, you can simply highlight it, hit renew and thats it. It will be valid for another year, unless you do below on mgmt server and then renew the cert, it would be good for 3 years.

Andy

https://support.checkpoint.com/results/sk/sk176527

[VarunTP]

Renew option wasnt coming for this particular certificate , might be we have signed with Thirdpart CA