Check Point L-71 - Managing Installed Certificates; Configuring High Availability

Appliance Configuration
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 93
Managing Installed Certificates
On the Installed Certificates page, you can create and manage appliance certificates or upload a
P12 certificate. Uploaded certificates and the default certificates are displayed in a table. To see
certificate details, click the certificate name.
You can upload a certificate signed by an intermediate CA or root CA. All intermediate and root
CAs found in the P12 file are automatically uploaded to the trusted CAs list.
These are the steps to create a signed certificate:
1.
In SmartConsole, create a signing request.
2.
Export the signed request (download the signing request from the appliance).
3.
Send the signing request to the CA.
4.
When you receive the signed certificate from the CA, upload it to the appliance.
On the Device > Device Details page, you can select and assign a Web portal certificate from the
list of installed certificates (with the exception of the Default certificate). The new certificate must
be configured on the Installed Certificates page first.
Installed certificates are used in the Web portal.
To export the signing request:
Click Export.
To upload the signed certificate when you receive the signed certificate from the CA:
1.
Select the signing request entry from the table.
2.
Click Upload Signed Certificate.
3.
Browse to the signed certificate file (*.crt).
4.
Click Complete.
The status of the installed certificate record changes from "Waiting for signed certificate" to
"Verified".
To upload a P12 file:
1.
Click Upload P12 Certificate.
2.
Browse to the file.
3.
Edit the Certificate name if necessary.
4.
Enter the certificate password.
5.
Click Apply.
Configuring High Availability
The Security Gateway is not part of a Security Cluster. To define it as a cluster member, define a
Security Cluster object in your Security Management Server and install a security policy.
Note - A cluster in bridge in Active/Standby mode is supported.