Skip to main content
simonz_FTNT
Staff & Editor
Staff & Editor
October 11, 2023

Technical Tip: How to export root CA from Certificate Authority Server and import to FortiGate

  • October 11, 2023
  • 0 replies
  • 16669 views
Description

This article describes how to export root CA certificate from Active Directory or CA server and then import it into FortiGate.

Scope FortiGate.
Solution
  1. Login to Active Directory Server and launch the Certificate Authority application by holding the Windows button + R then type certsrv.msc
  2. 'Right-click' on the CA and select Properties.

 

CA-1.JPG

 

  1. Under General, select View Certificate to display the certificate.

 CA-2.JPG

 

  1. Then under Detail, select Copy to File to start the exporting wizard process.

 

 CA-3.JPG

 

  1. Follow the wizard process to complete the exporting, and select DER Encoded binary X.509 (.cer) format.
  2. Select browse, choose the save location for the certificate, and press next to complete the exporting process.

 

Once done with the exporting process, log to FortiGate and browse to System -> Certificates then select Create/Import -> CA Certificate

 

Select File, select Upload, and select the previously exported certificate.

 

 FGT-CA-3.JPG

 

 Select OK to import, it will show under the Remote CA Certificate section as CA_CERT_1.

 

FGT-CA-5.JPG

 

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!