How to install a wildcard certificate without generating a CSR from each gateway

[AaronPW]

Hello. 

I'm trying to use a 3rd party wildcard certificate for GAIA portal access to some of our firewalls.  A CP engineer and I installed wildcard.key file as server.key and the .crt file as server.crt but the IP was still resolving to the ISP domain name so it was giving a domain mismatch error. 

I got that fixed and now the ip resolves to our domain but the website still shows an error and says that the domains do not match. 

I got a new engineer who says we have to do a CSR for each gateway and cannot use the wildcard certificate. 

Is this the case or were we just not communicating?

[PhoneBoy]

As far as I know, this is supported.
Are you accessing the Gaia WebUI by FQDN?

[the_rock]

Im fairly positive you can use wildcard cert, had seen customers do it before.

Andy

[Daniel_]

Do you use a IP-address for the gateway? That's not possible. The wildcard just includes domains. There is not wildcard IP-address certificate. You have to use FQDN.

[CP_Chris]

If you are wanting to change the GAIA portal certificate - you want to use the Platform Portal section of the Gateway Properties to change the certificate. Don't manually change the files at the CLI. I think it is possible to edit the files, then restart the service, but with the multiportal it is easier to do it this way. Just don't forget to install the policy after making the change.