LSMcli ResetSic

Description

This command resets the SICClosed Secure Internal Communication. The Check Point proprietary mechanism with which Check Point computers that run Check Point software authenticate each other over SSL, for secure communication. This authentication is based on the certificates issued by the ICA on a Check Point Management Server. Certificate of a SmartLSM Security GatewayClosed Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. or SmartLSM Cluster MemberClosed Security Gateway that is part of a cluster..

This action revokes the Security Gateway's SIC certificate and creates a new one with the one-time password provided by the user.

If an IP address is supplied for the SmartLSM Security Gateway, the SIC certificate is pushed to the SmartLSM Security Gateway, in which case the SmartLSM Security Gateway SIC one-time password must be initialized first.

Otherwise, if no IP address is given, the SIC certificate is later pulled from the SmartLSM Security Gateway.

Syntax

LSMcli [-d] <Mgmt Server> <Username> <Password> ResetSic <RoboName> <ActivationKey> [-I=<IPAddress>]

Parameters

Parameter

Description

<Mgmt Server>

Name or IP address of the Security Management ServerClosed Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server. or Domain Management ServerClosed Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server..

<Username>

User name of standard Check Point authentication method.

<Password>

Password of standard Check Point authentication method.

<RoboName>

Name of the SmartLSM Security Gateway or SmartLSM ClusterClosed Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. Member.

<ActivationKey>

One-time password for the Secure Internal Communications with the SmartLSM Security Gateway.

<IPAddress>

IP address of Security Gateway (for this action, the certificate is pushed to the Security Gateway).

Example 1

LSMcli mySrvr name pass ResetSic MyROBO aw47q1

Example 2

LSMcli mySrvr name pass ResetSic MyFixedIPROBO sp36rt1 -I=10.20.30.1