How to prevent Untrusted Certificate warning message in checkpoint capsule connect

[Prasaddere]

Hello,

We have deployed new remote access VPN. Where we implemented vpn Client on Mobiles (Checkpoint Capsule connect) but we are getting certificate warning to Trust and Continue. So How to prevent Untrusted Certificate warning message on mobile Phone (checkpoint capsule connect)

[AkosBakos]

Hi @Prasaddere 

Can you share a screenshot of the message?

My first 2 idea for solution.

1:

Use 3rd party certificate. Choose one that its root is installed in the Trusted Root Certificate store on the device.
(eg.:DigiCert)

2:

Install the Check Point's root and issuer certificate onto the devices. 

Akos

[the_rock]

I see what Akos is saying. But, first, screenshot would certainly help. Just blur out any sensitive data, please.

Andy

[Prasaddere]

Attached screenshot. we have already deployed certificate from internal CA for Mobile blade portal and different certificate for IPSec Client including all root and subordinate CA. Still getting the attached message for certificate trust first time which we need to avoid. 

Same we had issue on Windows laptop but we solution to add fingerprint in Windows registry. which we have added. Issue is only with now on Mobile phone.

[PhoneBoy]

Pretty sure you need to deploy the ICA CA certificate to the mobile device as "trusted."
This either has to be done via MDM or manually.

[Prasaddere]

Certificate from internal CA already added in root CA as well issuing CA. Also server certificate attahed on IPsec client. as seperate CSR generated for mobile against which we got another certificate P12 which we import on mobile portal.

[AkosBakos]

Hi,

To be sure, when you accepted the cert and check the certificate chain, everything looks normal?

If you use MDM only one certificate store exists on the device?

Akos