Skip to main content
jballini
Staff
jballini
Staff
November 25, 2024

Technical Tip: Verify if the CA certificate in Windows PC/laptop is matching the Certificate in FortiGate

  • November 25, 2024
  • 0 replies
  • 884 views
Description The article describes a troubleshooting step for a specific certificate issue and provides steps on how to make sure the CA that has generated the certificate is available in the Customer PC/laptop Windows OS
Scope

FortiGate.
Solution

 

  1. The CA that has generate the certificate needs to be available in the OS.
    In order to check, go to Start -> Run -> Mmc -> Add -> Certificate store.

   run and run system.png

 

Mmc.png

 

Select OK.

 

2nd of 1st.png

 

2nd of 2nd.png

 

2nd of 3rd.png

 

After selected the 'Certificates' click on 'Add'.

 

  1. Download the certificate from the FGT GUI: Security Profiles -> SSL/SSH Inspection and select 'deep-inspection' -> select the specific CA certificate related to the captive portal -> Select 'Download'.
  2. At this point install it on the PC and test:

  1. Cname must match URL

  2. Expiry date should be valid.
    Terms & ConditionsAccessibility statement