Certificate Authority

Warnings:

• Before you follow this procedure, always consult Check Point Support if this procedure is necessary.

• Schedule a full maintenance window.

• Before you follow this procedure, collect a set of backup files:

  • Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Snapshot (see Snapshot Management)

  • Gaia Backup (see Backing Up and Restoring the System)

  • CPinfo file (see sk92739)

  • After you follow this procedure, you must:

    1. Reset SIC Secure Internal Communication. The Check Point proprietary mechanism with which Check Point computers that run Check Point software authenticate each other over SSL, for secure communication. This authentication is based on the certificates issued by the ICA on a Check Point Management Server. on each managed Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. and each Cluster Member Security Gateway that is part of a cluster..

    2. Establish SIC in SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. with each of these objects.

    3. Renew the IKE certificate for any Security Gateway / Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. that runs with Remote Access VPN, Site-to-Site VPN, or one of the HTTPS portals (UserCheck, Identity Awareness Check Point Software Blade on a Security Gateway that enforces network access and audits data based on network location, the identity of the user, and the identity of the computer. Acronym: IDA. Captive Portal, Mobile Access Check Point Software Blade on a Security Gateway that provides a Remote Access VPN access for managed and unmanaged clients. Acronym: MAB. Portal).