Troubleshooting Tip: Cannot import pkcs# 12 certificate on FortiGate from device manager in FortiManager
| Description | This article provides a solution to one of the common problems encountered when trying to import pkcs# 12 certificate on FortiGate from the device manager in FortiManager.
Go to Device Manager -> Device and Groups -> Managed FortiGate, Select FortiGate -> System -> Certificates, and import pkcs# 12 certificate. Enter the Password and Certificate Name and select 'OK'. FortiManager gives the error 'The password associated with this file is wrong".'. (Note: If the Certificate option is not showing under system, then enable it from Feature visibility)
|
| Scope | FortiManager v7.4,v7.6. |
| Solution | The provided .pfx file is encrypted using cipher RC2-40-CBC, which is considered too weak and is not supported on FortiManager.
FortiManager does not utilize any encryption algorithms that are disabled by default in libssl due to security concerns. Generate the .pfx file using a stronger encryption algorithm. |
