{"id":827,"date":"2011-09-12T17:04:56","date_gmt":"2011-09-12T10:04:56","guid":{"rendered":"http:\/\/www.jaringankita.com\/blog\/?p=827"},"modified":"2013-05-02T23:46:41","modified_gmt":"2013-05-02T16:46:41","slug":"how-to-integrate-thawte-certificate-into-checkpoint-ssl-vpn","status":"publish","type":"post","link":"https:\/\/www.jaringankita.com\/blog\/how-to-integrate-thawte-certificate-into-checkpoint-ssl-vpn","title":{"rendered":"How to integrate 3rd party Certificate into Checkpoint SSL VPN"},"content":{"rendered":"

\nIn the past few days, I have been confusing about how to integrate Thawte Certificate into Checkpoint SSL VPN in R75 (this guide is also for R65). I have been trying and trying , and today I got the solution. Below are the steps to install the Thawte Certificate. Before doing that, please make sure that you have done below prerequisites:<\/p>\n

<\/p>\n

1. Download the Thawte Premium Root CA from thawte.com<\/p>\n

2. Download the Thawte Primary Intermediate CA – also known as the thawte Primary Root CA<\/p>\n

3. Download the Thawte Secondary Intermediate CA – also known as the thawte SSL CA<\/p>\n

After downloading all above requrired file , here are the steps:<\/p>\n

1. Go to the “Servers and OPSEC Applications”<\/p>\n

2. On the Trusted CAs, right click then choose “New CAs – Trusted CA”<\/p>\n

3. Enter the name of the CA<\/p>\n

4. Still on the same menu, click tab “OPSEC PKI” , only tick the “HTTP Servers”<\/p>\n

5. Click “Get” , then choose the file you already downloaded called “Thawte Premium CA”<\/p>\n

6. On the Trusted CAs again, right click then choose “New CAs – Subordinate CA”<\/p>\n

7. Import both Thawte Primary and Secondary CAs into the Subordinate. Then enter the name you like and click “Get” button on “OPSEC PKI” tab. After that choose the file of Thawte Primary CAs<\/p>\n

\"\"<\/a><\/p>\n

\"\"<\/a><\/p>\n

8.Double click your SSL VPN Gateway, go to IPSec VPN.<\/p>\n

9. Under “Repository of Certificates Available to the Gateway” . Click “Add”<\/p>\n

10.Enter the Certificate Nickname you like.<\/p>\n

11.Choose the “CA to enroll from”\u00a0 from Secondary CAs <\/strong>not<\/span> the Primary one. <\/span><\/span><\/p>\n

12. Then click “Generate” in order the device to generate keys.\u00a0 And also choose the option “Store keys on the Security Management Server”<\/span><\/span><\/p>\n

13. After that, save the CSR file into your local drive. <\/span><\/span><\/p>\n

14.Send that CSR file to Thawte in order to get Signed.<\/span><\/span><\/p>\n

15.After receiving the Signed CSR, then go to the same menu (IPSec VPN). The click “Complete” from above step. Choose the Signed CSR then click OK<\/span><\/span><\/p>\n

I also have the tutorial from Checkpoint regarding on how to install Verisign to Checkpoint SSL VPN. Please click the below link to download it:<\/p>\n

Verisign and Checkpoint Firewall<\/a><\/strong><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

In the past few days, I have been confusing about how to integrate Thawte Certificate into Checkpoint SSL VPN in R75 (this guide is also for R65). I have been trying and trying , and today I got the solution. Below are the steps to install the Thawte Certificate. Before doing that, please make sure […]<\/p>\n","protected":false},"author":6,"featured_media":829,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[600,29],"tags":[913,783,915,607,618,606,914,619,611,916,21,608,612,610,609,615],"class_list":["post-827","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-checkpoint-2","category-information-security","tag-ca","tag-certificate","tag-certificate-nickname","tag-checkpoint-3rd-cert","tag-checkpoint-firewall","tag-checkpoint-ssl-vpn","tag-csr","tag-how-to-configure-checkpoint-vpn-ssl-certificate","tag-ngx65","tag-ok","tag-r75","tag-thawte","tag-thawte-and-checkpoint","tag-thawte-certificate","tag-verisign","tag-verisign-and-checkpoint"],"_links":{"self":[{"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/posts\/827","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/comments?post=827"}],"version-history":[{"count":43,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/posts\/827\/revisions"}],"predecessor-version":[{"id":833,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/posts\/827\/revisions\/833"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/media\/829"}],"wp:attachment":[{"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/media?parent=827"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/categories?post=827"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jaringankita.com\/blog\/wp-json\/wp\/v2\/tags?post=827"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}