Technical Tip: FortiMail TLS verifymsg log unable to get local issuer certificate

Description

This article describes how to resolve TLS verifymsg log unable to get local issuer certificate.

Scope

 FortiMail.

Solution

1. The issue only occurs when relaying outbound emails to Outlook / Microsoft 365 recipients.

2. Error shown as follows:
    

   

    

3. Download the attached certificate DigiCertGlobalRootCA.crt.pem 

4. Navigate to System -> Certificate -> CA Certificate and select the Import button.
    

   

    

5. Give a name without spaces to the Certificate.