View Single Post
  #3 (permalink)  
Old 2008-04-29
shad007 shad007 is offline
Junior Member
 
Join Date: 2008-04-21
Posts: 6
Rep Power: 0
shad007 has an average reputation (10+)
Default Re: SecureRemote IKE issue

Quote:
Originally Posted by Thorpuse View Post
Did you change the IP address or hostname of the SmartCenter post-install? Sounds like your Root CA is invalid.

How did you perform the migration? If you were using the upgrade export/import tools, did the SmartCenter Server IP change for the new system?
I didnt originally use the export tool (primarily due to the fact I wasnt aware of it's existence). Is there some way to use the tool on the old firewall to extract the correct Root CA? or am i going down the wrong path? The IP of the Smartcenter did change post-install from memory.

Also i've found some more possibly helpful info:
When viewing the Certificates list inside the checkpoint software it says that the CA is the defaultCert 'internal_ca' yet when running a cpconfig from the linux root it and selecting option 8 from the menu (Certificate Authority) it lists a different certificate? It looks to me like the linux box has the right certificate, however the checkpoint software running on the management box has the wrong one? =/

"be gentle" :)
Reply With Quote