Check Point HARMONY R81 Administration Manual page 41

Connection Port to Services on an Endpoint Security Management Server
a. Back up the current file:
cp -v /web/templates/httpd-ssl.conf.templ{,_BKP}
b. Edit the current file:
vi /web/templates/httpd-ssl.conf.templ
c. In the "Pass Phrase Dialog" section, configure this value in the
"SSLPassPhraseDialog" directive:
SSLPassPhraseDialog "exec:/opt/CPuepm-
R81/apache/bin/SSLPassPhraseDialog"
d. In the "Server Certificate" section, configure this value in the
"SSLCertificateFile" directive:
SSLCertificateFile "/opt/CPuepm-
R81/engine/conf/ssl/sic_cert.pem"
e. In the "Server Private Key" section, configure this value in the
"SSLCertificateKeyFile" directive:
SSLCertificateKeyFile "/opt/CPuepm-
R81/engine/conf/ssl/sic_cert-key.pem"
f. In the "Server Certificate Chain" section, configure this value in the
"SSLCertificateChainFile" directive:
SSLCertificateChainFile "/opt/CPuepm-
R81/engine/conf/ssl/root_sic_cert.pem"
g. Save the changes in the file and exit the editor.
5. Configure the SSL port to 443 in the Gaia database.
Run these two commands:
dbset httpd:ssl_port 443
dbset :save
6. Generate the Apache configuration. Run:
$UEPMDIR/system/install/gaia_apache_conf_generate
7. Restart Check Point services. Run:
R81 Harmony Endpoint Server Administration Guide | 41