cp_conf ca

Description

This command changes the settings of the Internal Certificate Authority (ICA Internal Certificate Authority. A component on Check Point Management Server that issues certificates for authentication.).

Note - On a Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server., this command corresponds to the option Certificate Authority in the cpconfig menu.

Syntax

cp_conf ca

-h

fqdn <FQDN Name>

init

Parameters

Parameter

Description

-h

Shows the applicable built-in usage.

fqdn <FQDN Name>

Configures the Fully Qualified Domain Name (FQDN) for the Internal Certificate Authority (ICA).

The "<FQDN Name>" is the text string in this format: hostname.domainname

Notes:

The existing certificates for configured objects are not revoked.
The existing ICA certificate is not changed.
The Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. uses the specified "<FQDN Name>" to configure the Certificate Revocation List Distribution Point (CRL DP) property in all certificates that the ICA generates.

Refer to this command: cpca_client get_crldp

init

Initializes the Internal Certificate Authority (ICA).

Example

[Expert@MyMGMT:0]# hostname
MyMGMT
[Expert@MyMGMT:0]#
 
[Expert@MyMGMT:0]# domainname
checkpoint.com
[Expert@MyMGMT:0]#
 
[Expert@MyMGMT:0]# cp_conf ca fqdn MyMGMT.checkpoint.com
Trying to contact Certificate Authority. It might take a while...
Certificate was created successfully
MyMGMT.checkpoint.com was successfully set to the Internal CA
[Expert@MyMGMT:0]#