R60 SmartDashboard Cert Error

Dear All,

Has anyone encountered this SmartCenter Server certificate
problem? Because
of this I'm am not able to log in to my SmartDashboard.
After entering my
username and password an error window will appear saying:

"The connection has been refused due to one of the
following SmartCenter
certificate problems:
1. The SmartCenter Server's Clock is not setup properly.
2. The certificate's issue date is later than the date of
the SmartCenter
Server's clock.
3. The GUI client's clock and the SmartCenter Server's clock
are not
synchronized.
4. The certificate has expired.
5. The certificate is invalid."

Please help.

TIA,
JCQ

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

> Dear All,
>
> Has anyone encountered this SmartCenter Server
certificate problem? Because
> of this I'm am not able to log in to my SmartDashboard.
After entering my
> username and password an error window will appear
saying:
>
> "The connection has been refused due to one of the
following SmartCenter
> certificate problems:
> 1. The SmartCenter Server's Clock is not setup
properly.
> 2. The certificate's issue date is later than the date
of the SmartCenter
> Server's clock.
> 3. The GUI client's clock and the SmartCenter Server's
clock are not
> synchronized.
> 4. The certificate has expired.
> 5. The certificate is invalid."
>
> Please help.
>

Besides being the obvious, that is checking clock sync
between SmartCenter
server and GUI client host. You  may try :

   - # fwm sic_reset
   - # cpconfig 'reset sic'

M.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Hi Mark,

I tried resetting CA thru cpconfig but this didn't work. I
haven't tried fwm
sic_reset, though. I'll replicate my production firewall in
our lab so that
I can safely try these suggestions.

Thanks.

On 7/13/07, Mark Elsen <mark.elsengmail.com> wrote:
>
> > Dear All,
> >
> > Has anyone encountered this SmartCenter Server
certificate problem?
> Because
> > of this I'm am not able to log in to my
SmartDashboard. After entering
> my
> > username and password an error window will appear
saying:
> >
> > "The connection has been refused due to one
of the following SmartCenter
> > certificate problems:
> > 1. The SmartCenter Server's Clock is not setup
properly.
> > 2. The certificate's issue date is later than the
date of the
> SmartCenter
> > Server's clock.
> > 3. The GUI client's clock and the SmartCenter
Server's clock are not
> > synchronized.
> > 4. The certificate has expired.
> > 5. The certificate is invalid."
> >
> > Please help.
> >
>
> Besides being the obvious, that is checking clock sync
between SmartCenter
> server and GUI client host. You  may try :
>
>    - # fwm sic_reset
>    - # cpconfig 'reset sic'
>
> M.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================