Integration Checkpoint with AD

[gemechisd]

I have been assigned to integrate our checkpoint firewall with our active directory. Both our AD and DNS are hosted on different servers. We need AD users to authenticate for Remote VPN access with Checkpoint Endpoint Security Client. and that was succesful. I am able to connect to the client.

What I need to achieve is I need AD Users to change their own password up on login on Checkpoint Endpoint Security Client. I have seen different workarounds but when i try to configure Use encryption (SSL) and try to fetch the servers fingerprint "Failed to connect to LDAP Server SSL connection failed ckpSSL ssl lib error." this error is displayed. I have checked my AD Servers security policy and checked "Domain controller: LDAP server signing requirements" and it is set to None. 

How can I solve this error?

[PhoneBoy]

What version/JHF?
Did you follow all the steps here? https://support.checkpoint.com/results/sk/sk89841

[the_rock]

SK phoneboy gave looks promising for your issue.