Can't obtain SSL cerfiticate for Check Point SSLCA Authentication

[RSAAdmin]

Need to configure secondary Check Point management console. I'm using document called "Check Point Security Suite, IPS-1 Configuration Instructions and Release Notes (August 28, 2011).

When I try to do Page 7, Step 3, from the collector, I get an error that says Opsec error. rc=-1 err=-86 Certificat Authority in read only mode. Action not executed.

Firewall admin has told me that all configurations are correct.

Any suggestions?

[RobertWengewicz]

I am also having a issue with pulling the SSLCA cert I am getting Opsec error. rc=-1 err=-96 Connection error

[RSAAdmin]

Make sure you have the rule set up that allows the ICA_Pull event to occur (depends if you have an enforcement point between the FW-1 Management System and the enVision collector). The setup for this Rule is in the config doc on page 5, Step 3. If that isn't working, you should probably contact support.