Gateway Certificates

Download the Check Point Module Certificate from the ICA Management Tool.

Step 1

Open a web browser to https://location-a:18265. Click "Manage Certificates". Click "Search". Scroll down to location-a VPN Certificate. Download the gateway/enforcement module certificate in .cer format.

Figure 1: Check Point ICA Management Tool

Look for "Location-A VPN Certificate" link. The gateway name was removed from Figure 2.

Figure 2: Check Point ICA Management Tool, Search Results

Click the blue VPN Certificate link in Figure 2.

Figure 3: Check Point ICA Management Tool, Search Results, Certificate Download

Step 2

Convert the gateway / module certificate from DER format to X509 PEM format with openssl.

openssl x509 -in location-a.cer -text -inform DER -out location-a.pem

Figure 3 shows the gateway certificate after being converted into .pem format for Openswan.

Figure 4: Check Point Gateway Certificate in PEM Format