CP Certificate signing request refused by RSA Keon CA

[esacpug]

I am trying to configure PKI based authentication by checkpoint firewall (Nokia IPSO NGX R61 HFA_03) with RSA Keon CA. RSA Keon CA refuses to sign the CSR generated on CP firewall because the csr has a public exponent.

Error message:

"This certificate request has been refused because it contains a RSA key with public exponent 3. Please try to submit the request again or contact your administrator for assistance."

If you have a working set-up of such a configuration, can you please let me what should be the CP settings to generate a CSR without a public exponent.

Can anyone please let me know the required settings on the "PKI and
certificate properties" or other related settings?

Many Thanks in Advance,
esacpug

[JohnMH]

That error message for me required a fix from RSA.

It was a problem introduced because RSA was no longer accepting requests with that exponent.. Which Checkpoint was generating them with.

John

[JohnMH]

I think also the later version (R65) from Checkpoint fixed the issue by not generating the request with that exponent. I had a ticket with Checkpoint to fix it. RSAs fix was to add an option to allow you to accept those request types generated with that exponent.

John