> Source: [sk184495](https://support.checkpoint.com/results/sk/sk184495)

# sk184495 - Renewing Service Principal Secret for Cloud Firewall HA Cluster in Microsoft Azure

| Property | Value |
|----------|-------|
| Solution ID | sk184495 |
| Date Created | 2026-01-15 |
| Last Modified | 2026-05-11 |
| Technical Level | Advanced |
| Products | Cloud Firewall |
| Versions | R82.10, R81.20, R82 |
| OS | Gaia |
| Platform | Azure |

## Symptoms

- You receive an alert to renew the Service Principal object for a Check Point Cloud Firewall cluster in Microsoft Azure.

## Cause

The Service Principal object used by the Check Point Cloud Firewall High Availability (HA) cluster in Microsoft Azure has a secret (client key) that is expiring. This secret is required for the cluster to authenticate Application Programming Interface (API) calls to Microsoft Azure for management operations, such as failover and dynamic routing. If the secret expires and is not renewed in both Microsoft Azure and the Check Point configuration, the cluster loses the ability to perform these management operations.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content