> Source: [sk116462](https://support.checkpoint.com/results/sk/sk116462)

# sk116462 - How to Install P7b format 3rd-party signed certificate on Gaia Portal without Multiportal feature

| Property | Value |
|----------|-------|
| Solution ID | sk116462 |
| Date Created | 2017-03-25 |
| Last Modified | 2018-08-19 |
| Technical Level | General |
| Products | Security Management Server |
| Versions | R82.10, R82, R81.20, R82.20 |
| OS | Gaia |

## Solution

Certificate signed by 3rd-party is provided in `P7b` format. To install this certificate in Gaia portal without MultiPortal feature, it should be first converted to `.PEM` format

**Procedure**

1. Transfer the 3rd-party CA signed P7b format certificate to some directory on Gaia device.  

   Example: **/home/admin**
2. Since Signed certificate is in` p7b` format, convert it to PEM format as per below instructions.  
   PEM format usually have extensions such as (`*.pem, *.crt, *.key, and *.cer`)  

   B.1. Navigate to directory to .p7b file (**/home/admin** ) in Expert mode and run the following command:  

   **# cpopenssl pkcs7 -inform DER -in <p7b certificate file name > -print_certs -out server.pem** This will create **server.pem** file in the current directory.  

   <br />

   B.2. Run the following command to rename **server.pem** to **server.crt:****# cp /home/admin/server.pem /home/admin/server.crt**
3. Transfer the private key in same directory (**/home/admin**) you generated while creating CSR on Gaia Device.  

4. Rename this **private.key** to **server.key** using following command:  

   **#cp /home/admin/private.key /home/admin/server.key**
5. You now have the new certificate **"server.crt"** from step **B.2** and new certificate key **"server.key"**from step**D** in **/home/admin** directory.  

6. Backup the current certificate file **"server.crt"** and certificate key file **"server.key"** in the **"/web/conf/"** directory:  

   **[Expert@HostName:0]# cp /web/conf/server.crt /web/conf/server.crt_ORIGINAL****[Expert@HostName:0]# cp /web/conf/server.key /web/conf/server.key_ORIGINAL**
7. Replace the current files certificate file **"server.crt"** and certificate key file **"server.key"** in the **"/web/conf/"** directory with the new certificate file and certificate key file you created in **/home/admin****[Expert@HostName:0]# cp /home/admin/server.crt /web/conf/server.crt****[Expert@HostName:0]# cp /home/admin/server.key /web/conf/server.key**
8. Restart the Gaia Portal process:  

   **`[Expert@HostName:0]# tellpm process:httpd2`
   `[Expert@HostName:0]# tellpm process:httpd2 t`**

**Related Solutions:**

[sk97648 - How to create and set certificate for Gaia Portal](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk97648&partition=Advanced&product=All%22)

[sk108252 - How to change Gaia Portal's certificate from SHA-1 to SHA-256](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk108252&partition=Advanced&product=Security)

[sk108352 - How to create / update the Gaia Portal certificate (signed by ICA) for Security Gateway / Cluster](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk108352&partition=Advanced&product=Security)

[sk109593 - How to configure Gaia Portal to use a 3rd party CA-issued Wildcard certificate for a Check Point Gateway](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk109593&partition=Advanced&product=Security)

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content