Technical Tip : SSL VPN Client with MacOS 10.6 resolving certificate error
Description
This article explains how to resolve a certificate error problem when using the SSL VPN Client on a Mac to connect to a FortiGate.
Scope
All FortiOS versions.
FortiClient SSL VPN client 4.0.2082.
FortiClient SSL VPN client 4.0.2082.
Solution
The following error messages may be seen when trying to connect to a FortiGate using SSL VPN Client with Mac running MacOS 10.6 (Snow Leopard):
[1080:root] Require client certificate for potvinn
[1080:root] rmt_logincheck.c:207 user[bsmith],auth_type=1 failed [insufficient credential]
The following steps may resolve this issue:
1. Install the latest FortiClient VPN SSL (forticlientsslvpn_macosx_4.0.2082.dmg).
2. Export the certificate with all chains in it (.pfx).
3. Import the certificate in the System Keychain access on the Mac. The following Apple KB article provides additional guidance:
http://docs.info.apple.com/article.html?path=Mac/10.6/en/9082.html
[1080:root] Require client certificate for potvinn
[1080:root] rmt_logincheck.c:207 user[bsmith],auth_type=1 failed [insufficient credential]
The following steps may resolve this issue:
1. Install the latest FortiClient VPN SSL (forticlientsslvpn_macosx_4.0.2082.dmg).
2. Export the certificate with all chains in it (.pfx).
3. Import the certificate in the System Keychain access on the Mac. The following Apple KB article provides additional guidance:
http://docs.info.apple.com/article.html?path=Mac/10.6/en/9082.html