> Source: [sk65625](https://support.checkpoint.com/results/sk/sk65625)

# sk65625 - How to export a PKCS#12 certificate for a Edge / Safe@Office device from Security Management server

| Property | Value |
|----------|-------|
| Solution ID | sk65625 |
| Date Created | 2011-10-25 |
| Last Modified | 2017-09-07 |
| Technical Level | General |
| Products | Security Management Server, Multi-Domain Security Management Server |
| Versions | R82.10, R82, R81.20, R82.20 |

## Solution

* **Either** export the ICA certificate from the Security Management Server:

  1. Connect to command line on the Management Server (over SSH, or console).   

  2. Log in to Expert mode.   

  3. Export the VPN ceritificate:   

     **`[Expert@HostName]# vpn export_p12 -obj <`*Name_of_Edge_Object* `> -cert <`*Name_of_Certificate_in_Edge_Object* `> -file <`*Name_of_Output_P12_File* `.p12> -passwd <`*Password_to_Open_Output_P12_File*`>`**   

     **Note:**   
     This command exports information contained in the network objects database and writes it in the PKCS#12 format to a file with the p12 extension.  
     Refer to *Command Line Interface Reference Guide* ([R55](http://supportcontent.checkpoint.com/documentation_download?id=5678), [R60](http://supportcontent.checkpoint.com/documentation_download?id=5518), [R61](http://supportcontent.checkpoint.com/documentation_download?id=6354), [R62](http://supportcontent.checkpoint.com/documentation_download?id=6836), [R65](http://supportcontent.checkpoint.com/documentation_download?id=7239), [R70](http://supportcontent.checkpoint.com/documentation_download?id=8713), [R71](http://supportcontent.checkpoint.com/documentation_download?id=10324), [R75](http://supportcontent.checkpoint.com/documentation_download?id=11657), [R75.20](http://supportcontent.checkpoint.com/documentation_download?id=12264), [R75.40](http://supportcontent.checkpoint.com/documentation_download?id=13944), [R75.40VS](http://supportcontent.checkpoint.com/documentation_download?id=16262), [R76](http://supportcontent.checkpoint.com/documentation_download?id=22909), [R77](http://supportcontent.checkpoint.com/documentation_download?id=24833)) - Chapter 'VPN Commands' - vpn export_p12.   

  4. Transfer this certificate file from Management Server to your SmartDashboard computer.   

  5. In SmartDashboard, open the Security Gateway object properties - expand the '`Mobile Access`' pane - go to '`Portal Settings`' - click on '`Import...`' button - choose the P12 file that was exported from Management Server.   

  6. Install the policy onto Security Gateway.

  <br />

  <br />

* **Or** export the certificate using the Edge Object:

  1. Connect with SmartDashboard to Security Management Server.  

  2. Create an Edge object with VPN properties.   

  3. A certificate is automatically created for this object.   

  4. Double-click on the certificate name on the '`VPN`' tab of Edge object.   

  5. Save the certificate as a **\*.p12** file.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content