CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SmartCenter Server (Formerly Management Server)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-07-18
Junior Member
 
Join Date: 2005-09-29
Posts: 7
Rep Power: 0
sclausson has an average reputation (10+)
Default SmartCenter Server Fingerprint Changed -- why?

I was unable to connect to the SmartCenter Server this morning. This happened once before, and I jsut needed to issue a 'cprestart'. I did that this morning, and when I reconnected I was presented with a message warning that the SmartCenter fingerprint has changed. I am the only administrator of this server, and I have made no changes. I need to determine why this changed, and if there has been a security breach.

Has anyone encountered this before?

Thanks,
Shayne
Reply With Quote
  #2 (permalink)  
Old 2007-07-18
Senior Member
 
Join Date: 2007-02-07
Location: Halle (Saale)
Posts: 255
Rep Power: 2
dantro has an average reputation (10+)
Default Re: SmartCenter Server Fingerprint Changed -- why?

This should not happen at all. Even if you are upgrading to a newer version your ICA remains the same and so does your fingerprint. When you installed the SCS you have been asked to save the fingerprint to a file. Open up this file now and compare it with your new fingeprint. If it changed, check the syslog, smart center server logs and related for the reason.

Best regards,
Danny Trommer
CCSA/CCSE/CCSE+
Reply With Quote
  #3 (permalink)  
Old 2007-07-19
Senior Member
 
Join Date: 2007-06-04
Posts: 1,073
Rep Power: 3
mcnallym has an average reputation (10+)
Default Re: SmartCenter Server Fingerprint Changed -- why?

Only ever encountered this when I had reset the ICA and it generated a new fingerprint with the new CA.

When upgrading you have a new client which doesn't have the fingerprint in so you have to approve however I don't believe that if you upgrade on box that you get a new fingerprint.

I think you might however if you upgrade export and then import to a new box get a new fingerprint, but to be honest never checked that.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 14:56.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0