Logging in to SmartProvisioning

Defining SmartProvisioning as a GUI Client

Configure the Security Management Server or Multi-Domain Server to give access to the computer with SmartProvisioning. Define this computer as a GUI Client that can connect to the Security Management Server or Multi-Domain Server.

The cpconfig configuration tool can be used on Gaia and SecurePlatform.

To define SmartProvisioning as a GUI Client:

1. Open the applicable configuration tool,
   • Security Management Server - From the CLI run cpconfig
   • Multi-Domain Server - From the CLI run mdsconfig
2. Enter the number for the GUI Clients option.
3. Enter Y to change the list of GUI Clients.
4. Enter A to add a GUI Client.
5. Use one of these settings to define SmartProvisioning computer:
   • IP address
   • Machine name
   • Any: Enable any machine to connect to the Domain Management Server as a client

     Note: For security reasons, we recommend that you do not use the Any setting.

   • IP/Net mask: Range of IP addresses defined by a netmask. For example, 192.0.2.0 and 255.255.255.0
   • Range of IP addresses: Range of IP addresses without a netmask. For example 192.0.2.8-192.0.2.16
   • IP address with wildcards: For example: 192.22.36.*
   • Domain (Multi-Domain Security Management only): Enable any host in the domain to be a recognized GUI client
6. Enter N.

   No more GUI Clients are defined.

7. Exit the configuration tool.

Defining SmartProvisioning Administrators

Login permissions to the SmartProvisioning Console are given to administrators, which are defined in SmartDashboard or in the Check Point Configuration Tool. In SmartDashboard, you can further define specific permissions of administrators. In particular, you can define an administrator's permissions for provisioning devices with SmartProvisioning.

To edit the Permissions Profile of an administrator of SmartProvisioning:

1. Open SmartDashboard.
2. Open the Administrator Properties window of a new or existing administrator.
3. Click the New button that is next to the Permissions Profile field.
4. Select Customized and click Edit.
5. In the General tab, make sure that SmartLSM Security Gateways Database has Read/Write permissions.
6. In the Provisioning tab, define SmartProvisioning permissions for this administrator.

   Option	Read/Write	Read Only	Deselected
   Manage Provisioning Profiles	Add, edit, delete, assign provisioning profiles to gateways	Assign existing provisioning profiles to gateways	Provisioning features are unavailable
   Manage Device Settings	Edit all gateway network settings	View gateway network settings	Gateway network settings are unavailable
   Run Scripts	Add, edit, delete, and run scripts on gateways		Run script commands are unavailable

7. Click OK.

   The changes in permissions are applied the next time the administrator logs in.

Logging In

To log into SmartProvisioning:

1. Start SmartProvisioning:
   • From the Windows Start menu, select Programs > Check Point SmartConsole > SmartProvisioning.
   • From SmartDashboard, select Window > SmartProvisioning.
2. Enter these details for the Security Management Server or Multi-Domain Server:
   • Administrator User Name and Password
   • Server IPv4 address
3. Click OK.

   SmartProvisioning opens.