Check Point HARMONY R81 - Page 99

Active Directory Scanner
R81 Harmony Endpoint Server Administration Guide|99
================ Certificate 0 ================
X509 Certificate:
Version: 3
Serial Number: 610206fb000000000002
Signature Algorithm:
Algorithm ObjectId: 1.2.840.113549.1.1.5 sha1RSA
Algorithm Parameters:
05 00
Issuer:
CN=mulberry-DC-CA
DC=mulberry
DC=com
NotBefore: 23/06/2014 13:12
NotAfter: 23/06/2015 13:12
Subject:
CN=DC.mulberry.com
Public Key Algorithm:
?
Certificate Extensions: 9
1.3.6.1.4.1.311.20.2: Flags = 0, Length = 22
Certificate Template Name (Certificate Type)
DomainController
2.5.29.37: Flags = 0, Length = 16
Enhanced Key Usage
Client Authentication (1.3.6.1.5.5.7.3.2)
Server Authentication (1.3.6.1.5.5.7.3.1)
4. Download a certificate from the domain controller. Run:
certutil -store MY <certificate index> <path_to>\<file name>
For example:
certutil -store MY 0 C:\certificates\DCCert.cer
5. Copy the certificate file to the Endpoint Security server. In a High Availability
environment, copy the file to the Primary and Secondary servers.
6. Import a certificate to Endpoint Security server keystore. Run:
cd $CPDIR/jre_64
./bin/keytool -import -keystore ./lib/security/cacerts -file
<file_name> -alias <alias>
For example:
./bin/keytool -import -keystore ./lib/security/cacerts -file
/home/admin/ServerCert.cer -alias SSLCert
7. Enter the default password changeit.