Multi-Factor Authentication (MFA) for Remote Access VPN with Certificate Key Enrollment for AD user

[Imzi]

We have configured 2FA with LDAP on Checkpoint firewall R81.20JHF 105. We are using Cert+Username and Password as the authentication method. Do we need domain admin credentials while to enroll cert key from LDAP to AD USER. We have performed all the required steps for the same but while we enroll and save the certificate, we get an error saying Error Code:67 Overwriting object: Operation not allowed on RDN" . What credentials we need to bypass this error. 

[the_rock]

I believe you need service account with the right permissions.

[Imzi]

Could you please confirm if LDAP Domain Administrator credentials are required to achieve this requirement,

or

if credentials with read and write permissions will be sufficient?

[the_rock · Accepted solution]

Im fairly sure just read/write.

[Imzi]

will test and let you know.

Thanks for your support..!!