Check Point R80.20 - Step 5: Configuring the Check Point Security Gateway to Work with the Gemalto HSM Appliance Server

Hardware Security Module (HSM)
Next Generation Security Gateway Guide R80.20 | 87
Step
Description
5
Run the cmu list command to view the handles of the key pair you created.
Example:
Enter password for token in slot 0 : <
Password for the partition on HSM
Appliance Server that you configured in Step 2
>
handle=17 label=CAPrivateKeyPairLabel
handle=18 label=CAPublicKeyPairLabel
6 Use the handle numbers from the previous Step 5 to create the CA certificate.
Example:
# ./cmu selfsigncertificate -privatehandle=17 -CN="www.myhsm.cp"
-sha1WithRSA -startDate 20170720 -endDate 20190101
-serialNum=123456789abcdef
7
Run the cmu list command to view the handles of the CA certificate you created.
Example:
Please enter password for token in slot 0 : <
Password for the partition on
HSM Appliance Server that you configured in Step 2 >
handle=13 label=www.myhsm.cp
handle=17 label=CAPrivateKeyPairLabel
handle=18 label=CAPublicKeyPairLabel
Note - You use the numbers of these three handles later on the Check Point Security
Gateway in the
$FWDIR/conf/hsm_configuration.C
file.
Step 5: Configuring the Check Point Security Gateway to
Work with the Gemalto HSM Appliance Server
Workflow in this section:
Step
Description
A Install the Gemalto HSM Simplified Client Software Packages on the Check Point
Security Gateway (on page 88).
B Establish a Trust Link between the Check Point Security Gateway and the Gemalto HSM
Appliance Server (on page 88).
C Configure HTTPS Inspection on the Security Gateway to work with the Gemalto HSM
Appliance Server (on page 90).
Note - If you have a Check Point Cluster environment, do this procedure on each cluster member.