> Source: [sk36463](https://support.checkpoint.com/results/sk/sk36463)

# sk36463 - How to change the validity period of a user's certificate

| Property | Value |
|----------|-------|
| Solution ID | sk36463 |
| Date Created | 2008-12-08 |
| Last Modified | 2026-03-25 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R81.20, R81.10 (EOS), R81 (EOS) |

## Solution

By default, if you create a user with certificate in SmartConsole, the certificate is valid for two years. You can change the Certificate Validity Period in the CLI of the VPN Gateway or in the ICA Management Tool.  

**Note (for Mobile Access blade) -** It is not supported to generate a *.p12* file for the certificate with the new validity period. For end users to connect through Mobile Access, they must use this URL to open the Mobile Access portal (same as the regular URL, with "*/enroll* " added to the end):  
*https://\<MobileAccess Blade Gateway IP Address\>/\<MobileAccess Blade prefix\>/Login/enroll*   

### Changing the Certificate Validity Period in the CLI of the Security Management

To set the Certificate Validity Period of a User Certificate to less than 2 years, on the CLI of the Security Management enter the expert mode and run:  
`[Expert@HostName]# cpca_client set_cert_validity -k `**[** **USER]** `-y `**[Validity period]***This command is to configure the management to issue shorter/longer certificates, and it will apply to all new certificates issued by the mgmt., not only to the desired GW*

### Changing the Certificate Validity Period in the ICA Management Tool

If you configure a Certificate Validity Period in the ICA Management Tool, you must create the user in SmartConsole and create the certificate in the ICA Management Tool:

1. Open the ICA Management Tool.
2. Click **Create Certificate** click**Advanced** \> select for how long you want the certificate to be valid.
3. Enter the users exact Distinguished Name (DN).
4. Click **Go**.
5. Do **one** of these:
   * Send the registration key to the end user in an email.
   * Generate the certificate file

For more information about the ICA Management Tool, review [sk30501](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk30501&partition=General&product=Security).  

<br />

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content