Renewing a CA Certificate Per Policy

This section describes the CA certificate renewal procedure if you are using a CA certificate per policy.

  1. In the Mobile Security Administrator Portal, go to Policy and select a policy profile.
  2. Click any one of these:

    • Device

    • Application

    • File

    • Network

  3. Click Network Protection and go to HTTPS Settings.

  4. In the Inspection CA section, select CA Certificate per policy.
  5. Click Revoke Certificate.

  6. Click Yes in the confirmation box.

    The system deletes the current central CA certificate.

  7. To generate a new CA certificate per policy, do one of these:

    • To generate a CA certificate issued by Check Point, click Generate CA Certificate.

      The system generates a certificate valid for one year from the generation date, as shown in Expiration date.

    • To use a self-signed or a third-party CA certificate, click Upload CA Certificate.

      1. In the pop-up window, upload the certificate.

        Note:

        For the Transport Layer Security (TLS) certificate to be valid:

        • The certificate must have a lifecycle of at least 30 days and not longer than 390 days.

        • The certificate must be valid for more than 30 days from the time it is uploaded to the Mobile Security Administrator Portal.

      2. Enter the certificate password.

      3. Click Verify.

      4. If there are no errors, click Add.

  8. If you have generated a CA certificate by Check Point, click Download Certificate.

    The system downloads the certificate to your computer.

  9. Upload the new certificate to the UEM.

    For more information, see CA certificate deployment using the UEM section for the relevant UEM in Mobile Security Integration Guide.