ssl vpn configuration in checkpoint firewall

Click OK to accept this certificate as a Certificate Authority Certificate.Ħ. Details of the Intermediate certificate will be displayed in the message box. The Certificate Authority Certificate View window will appear. Click Open button once you’ve selected the file.ĥ. Next you will need to select the Entrust Intermediate file Intermediate.crt. Click on the OPSEC PKI tab and click the Get button.Ĥ. Enter a name for the Entrust Intermediate and a comment if necessary.ģ.

The Certificate Authority Properties window will appear. Right click on Trusted CAs, select New CA and click on “Subordinate.”Ģ.

Open SmartDashboard and select the Servers and OPSEC tab. Part 2 of 3: Installing the Intermediate Certificatesġ. The Entrust_Root CA will now be listed under Trusted CAs. Make sure “HTTP Server(s)” is checked and click OK.ħ. Click OK to accept this certificate as a Certificate Authority.Ħ. You will then return to the Certificate Authority Properties window in the OPSEC PKI tab. Details of the Root certificate will be displayed in the message box. This will allow you to select the Entrust Root certificateĤ. Locate the Entrust Root certificate commonly named Root.crt and click on Open.ĥ. The comment section is not mandatory but can be used to provide more information about the certificate.ģ. Select the OPSEC PKI tab and click on the “Get” button. In the General tab, give the Root certificate a name such as “Entrust_Root”. Right click on Trusted CAs, select New CA and click on “Trusted…”Ģ. The Certificate Authority Properties window will appear. Part 1 of 3: Installing the Entrust Root Certificateġ. How to generate a CSR using CheckPoint appliance:īefore generating a CSR you will need to install the Root and Intermediate certificates into the Trusted CAs and Subordinate CAs.ġ) Installing the Entrust Root certificateĢ) Installing the Intermediate certificates For more information on SSL/TLS Best Practices, click here.

Make sure you run the SSL Server Test at the end of the installation process to check your certificate configuration against SSL/TLS Best Practices.

It is best practice to ensure that you have current and up to date Ciphers and Protocols to ensure the best security when deploying a new Private key and Server Certificate.

If you plan on using the same certificate on multiple servers always transfer the private key using a secure method ( e-mail is not considered a secure method of transfer).

Ssl vpn configuration in checkpoint firewall