Terraform - Azure - Checkpoint CloudGuard IAAS Deployment

[Simon_Macpherso]

Hi all,

We’re deploying a CloudGuard IaaS High Availability cluster to Azure public cloud using Terraform.

I’ve based my Terraform code on the HA configuration templates available on the checkpointsw repo.

https://github.com/CheckPointSW/CloudGuardIaaS/tree/master/terraform/azure/high-availability-new-vne...

The cluster deploys successfully however I cannot establish SIC with the gateways.

I have a SIC key value configured in my terraform.tfvars file.

The cloud-init.sh script which runs the cloud_config.py script references the SIC key value.

SIC will establish if I reset SIC and enter a new password on each gateway.

--------------------------------------------------------------------------------------------------------------------------------------

Error:

SIC Status for test-gw: Not Communicating

Peer does not have a certificate for SIC (error no. 111)

--------------------------------------------------------------------------------------------------------------------------------------

Can you please let me know if there are any additional steps required to get SIC working post-deployment.  

Regards,

Simon