Checkpoint 1400 - Change Browser Based Auth Portal Certificate when using SmartProvisioning

[Us4r]

Hello,

at the Moment I'm configuring Identity Awarenes on Checkpoint 1400 Appliances which are managed via SmartProvisioning.

Is there any Chance to Change the Portal Certificate which will be automatically used for the Web Portal?

It allways automatically uses the created IPSEC VPN - Certificate which is very unusful because it was generated for the wrong common Name (<Gatewayname> VPN Certificate instead of the dynamic-IP).

It would be really great if there is some CLI command or anything else how I can use there my own Certificate for alle Provisioned appliances. Users won't get a Certificate error message when logging in via the WebPortal...

Thanks.

Regards

Florian

[G_W_Albrecht]

Are you talking about the Hotspot portal, UserCheck or the WebGUI ? And what about recreating a correct Internal Certificate ?

[Us4r]

I'm talking about the webportal certificate which will be used from Identity Awareness in case of activated User Authentication via WebPortal. So about the certificate which will be used for the https://<dynamic-ip>/connect  URL. If I can recreate this internal Certificate with a individual defined common name attributes (IP - Address as common name) then that would be fine.

[G_W_Albrecht]

The way to change this is in the GW IA settings: