> Source: [sk101588](https://support.checkpoint.com/results/sk/sk101588)

# sk101588 - SNX connection from command line fails with "SNX: Authentication failed" when using a certificate

| Property | Value |
|----------|-------|
| Solution ID | sk101588 |
| Date Created | 2014-07-13 |
| Last Modified | 2020-08-20 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | macOS, Linux |

## Symptoms

- * The SNX connection from command line "`snx -l <CA_Dir>` -s \<Server\>" fails with "`SNX: Authentication failed`" when authenticating with a user certificate.

* The SNX connection from command line succeeds when authenticating with a username and password (snx -u \<User\> -s \<Server\>).

* SNX debug ('`snx -g ...`') shows in `snx.elg` file:

  ```
  
  process_trusted_cas: processing TrustedCAs
  process_trusted_cas: TrustedCAs dir opened ok
  process_trusted_cas: processing file <Certificate_Issuer_CN>.pem
  DecodeBufFromFile: Couldn't read from file -  certs/
  /<Certificate_Issuer_CN>.pem
  process_trusted_cas: get buf from file failed
  ```

## Cause

Incorrect parsing of the path to the certificate file. Since the SNX client could not read the certificate, it does not trust the certificate presented by the Security Gateway, and the SSL negotiation fails.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content