Silent install Check Point Mobile Access Portal Agent

[altu]

Hi,

I am trying to install the Check Point Mobile Access Portal Agent (CheckPointMobileAgent.msi) which would allow our users to connect to VPN via the web portal in modern browsers like Chrome, Edge Chromium, etc...

However, during the installation the installer will show a prompt where you would have to allow the installation of a certificate. (screenshot below)

Each time you run the installer a new certificate is generated. The Thumbprint changes.

How should we install this agent silently to a couple of thousands of devices without our users seeing this prompt.

In corporate environments it's not feasible to have to do stuff manually.

Because of this, we are also not able to install the agent during OS Deployment.

I can't find any property in the MSI that would force the import of the certificate without displaying the prompt.

I also can't manually import the certificate with certutil as a new certificate is generated each time the installer runs.

Does anyone have any tips or suggestions?

Thank you

[Gaurav_Pandya]

Hi,

We have installed JHF on gateway and because of that users were prompting certificate warning. This warning comes first time connect only. We are not getting this warning message every time. 

[altu]

I think you're talking about the prompt to trust the certificate when you try to connect? That's not the problem I'm talking about here.

My issue is with the installation of the Check Point Mobile Access Portal Agent.

[PhoneBoy]

@AndreiR any ideas here?

[altu]

Is there anyone that deployed this in their organization?

We can't be the only ones facing this issue...

[Fatihah]

@altu , yes my side also having this issue.

The users was prompted to re-install the agent everytime they're accessing the mobile access portal.

And currently we haven't find out the solution on this issue. We already reach out to TAC, but the issue still persist.

Gateway ver: R80.40 

Hotfix: Take 125