Appliance Configuration
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 93
Managing Installed Certificates
On the
Installed Certificates
page, you can create and manage appliance certificates or upload a
P12 certificate. Uploaded certificates and the default certificates are displayed in a table. To see
certificate details, click the certificate name.
You can upload a certificate signed by an intermediate CA or root CA. All intermediate and root
CAs found in the P12 file are automatically uploaded to the trusted CAs list.
These are the steps to create a signed certificate:
1.
In SmartConsole, create a signing request.
2.
Export the signed request (download the signing request from the appliance).
3.
Send the signing request to the CA.
4.
When you receive the signed certificate from the CA, upload it to the appliance.
On the
Device
>
Device Details
page, you can select and assign a Web portal certificate from the
list of installed certificates (with the exception of the Default certificate). The new certificate must
be configured on the
Installed Certificates
page first.
Installed certificates are used in the Web portal.
To export the signing request:
Click
Export
.
To upload the signed certificate when you receive the signed certificate from the CA:
1.
Select the signing request entry from the table.
2.
Click
Upload Signed Certificate
.
3.
Browse to the signed certificate file (*.crt).
4.
Click
Complete
.
The status of the installed certificate record changes from "Waiting for signed certificate" to
"Verified".
To upload a P12 file:
1.
Click
Upload P12 Certificate
.
2.
Browse to the file.
3.
Edit the
Certificate name
if necessary.
4.
Enter the certificate
password
.
5.
Click
Apply
.
Configuring High Availability
The Security Gateway is not part of a Security Cluster. To define it as a cluster member, define a
Security Cluster object in your Security Management Server and install a security policy.
Note
- A cluster in bridge in Active/Standby mode is supported.
Summary of Contents for L-71
Page 122: ......