Technical Tip: Export SSL certificate and key from Microsoft Windows IIS then import to FortiWeb

Description

This article describes steps to export the SSL certificate and key from Microsoft Windows IIS, then import them to FortiWeb.

Scope

FortiWeb.

Solution

To place the website behind FortiWeb, update the DNS or traffic destination so that client requests are sent to the FortiWeb proxy rather than directly to the web server. As part of this change, SSL/TLS termination will be performed on FortiWeb instead of the origin server.

In case of the website domain, the SSL certificate was previously installed in the Microsoft Windows IIS Web server; the SSL certificate and key can be exported from the server and imported into FortiWeb.

1. Remote desktop into the Microsoft Windows Web Server and open the IIS Manager panel. In the IIS Manager panel, navigate to the Server Certificates page.

2. In the Server Certificates page, select the website domain SSL certificate, then select the Export option.

3. In the export certificate panel, insert the directory for exporting the SSL certificate and the encryption password. Proceed to export the SSL certificate file after filling in the information. The SSL certificate file shall include both the certificate and key file information.

4. Copy the SSL certificate file into the local machine or the machine that is going to be used to access FortiWeb. Log in to FortiWeb and navigate to the Local SSL Certificate page. Select the Import option to begin importing the SSL certificate.

5. Select Type as PKCS12 Certificate and upload the exported SSL certificate file.

6. Fill in the password which generated during exporting the SSL certificate and proceed to import the SSL certificate.

7. The SSL certificate is now imported to FortiWeb and ready to be selected/used in the Server Policy.

Related document:

Local Certificates