CA renew

[Danielpb]

I'm new here so Hello people hope you can help me out!

okay see if you can answer this if I renew the Internal_CA will it:

1.contact the mgmt in the master list (public ip of mgmt off site)
2.or the ip address (which is a private address located off site) displayed in the CA certificated which is the privte local address.

hope that make sense.

Also if i do renew what connection problems will occure eg VPN connection etc

many thanks

Dan

[RayPesek]

Hi Dan,

Why do you want to do this? Mine had a life of 20 years when installed in 2003.

Ray

[Danielpb]

Hi Ray,

The CRL has expired don't know why it was just like that.

cheers

Okay I did a bit of a hit of miss, Anyway it worked maybe some can confirm this....
The certificate is created by the CMA and pushed to the firewall object. As long as you have the CMA ojbect setup (which is remote by the way to the firewall module) as a secondary Smart Center with the correct Public ip address it shoud work.

cheers

[RayPesek]

Gotcha. I didn't realize it was just the CRL. I thought you were trying to create a new root certificate, which could be a bit problematic. :-)

Glad you got it working,

Ray