cpca_client create

Description

Issues a SIC Secure Internal Communication. The Check Point proprietary mechanism with which Check Point computers that run Check Point software authenticate each other over SSL, for secure communication. This authentication is based on the certificates issued by the ICA on a Check Point Management Server. certificate for the Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server. or Domain Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server..

Note:

On a Multi-Domain Server Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS., you must run this command in the context of the applicable Domain Management Server:

mdsenv <IP Address or Name of Domain Management Server>

Syntax

cpca_client [-d] create_cert [-p <CA port number>] -n "CN=<Common Name>" -f <Full Path to PKCS12 file> [-w <Password>] [-k {SIC | USER | IKE | ADMIN_PKG}] [-c "<Comment for Certificate>"]

Parameters

Parameter

Description

-d

Runs the command in debug mode.

Use only if you troubleshoot the command itself.

Best Practice - If you use this parameter, then redirect the output to a file, or use the script command to save the entire CLI session.

-p <CA port number>

Specifies the TCP port on the Security Management Server or Domain Management Server, which is used to connect to the Certificate Authority.

The default TCP port number is 18209.

-n "CN=<Common Name>"

Sets the CN to the specified <Common Name>.

-f <Full Path to PKCS12 file>

Specifies the PKCS12 file, which stores the certificate and keys.

-w <Password>

Optional. Specifies the certificate password.

-k {SIC | USER | IKE | ADMIN_PKG}

Optional. Specifies the certificate kind.

-c "<Comment for Certificate>"

Optional. Specifies the certificate comment (must enclose in double quotes).

Example

[Expert@MGMT:0]# cpca_client create_cert -n "cn=cp_mgmt" -f $CPDIR/conf/sic_cert.p12