R80.20 ICA Management Tool

[Eduardo_Garfias]

Hi guys!, i have an issue trying to to generate a certificate from a request (pkcs10), the message i get is "Failed Creating Certificate. Got Bad input" (Image attached).... same request on a box with R80.10 its working ... but not on R80.20

SK That i used for setting up ICA Management Tool   Setting up the ICA Management Tool 

I am trying to complete a certificate from an SMB Appliance for VPN - i am using this sk  https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...9

any of you guys have been into something similar?

Thanks & Regards

[G_W_Albrecht]

If it does work correctly on R80.10 i would involve TAC - sounds like a bug...

[Danny]

You obviously followed the procedure I described for locally managed SMB appliances here:

HowTo Set Up Certificate Based VPNs with Check Point Appliances - R77 edition 

I suggest try a different browser, start the ICA Management Tool with our ccc script and then access it via http://10.1.1.100:18265, or use the cpca_client command in expert mode to perform the same action on CLI as you are trying to perform in your web browser.

[Eduardo_Garfias]

Thanks for the Responses, i opened a case with TAC, turns out that on version R80.20 you need to remove the

"-----BEGIN CERTIFICATE REQUEST------" and "-----END CERTIFICATE REQUEST-----"

Just paste the certificate without this and works fine, strange that its not the way it works ons previous versions R77.30 and R80.10

but it is succesfully on that way

Thanks again. mates!

[G_W_Albrecht]

Did you already ask if there is an sk for this issue ? Such a big change must be documented in the sk(s) (sk109139 / sk30501 / sk94028).

[Uri_Lewitus]

Hi Eduardo

Can you share the ticket number please - I would like to get to the bottom of this and find out what was changed. Having the SR number would really help

Thanks,

Uri

[Danny]

Thank you for posting the solution!