Skip to main content
Magdalena
Magdalena
Visitor III
February 6, 2025
Question

FortiClient shows "failed to verify server certificate" message

  • February 6, 2025
  • 2 replies
  • 1231 views

I am using FortiClient Version 7.2.7 and whenever clients try to connect to the EMS withing the LAN they receive a "failed to verity server certificate" message.

Connecting via a mobile hotspot works.

Does anyone know why this is happening and how i can fix it?

 

2 replies

AEK
SuperUser
AEK
SuperUser
February 6, 2025

Are you connecting with hostname or IP address?

Bear in mind that if the used hostname or IP is not the same as the certificate subject or SAN then you will receive certificate error.

AEK
    Magdalena
    MagdalenaAuthor
    Visitor III
    February 7, 2025

    I am connecting to the host name

    The name is the same as in the certificate

    AEK
    SuperUser
    AEK
    SuperUser
    February 7, 2025

    This should mean that you don't see the same certificate on WAN (mobile hotspot) and on LAN, which is not supposed to be so.

    Try run this command from both WAN and LAN to confirm that the certificate is (or is not) the same.

    openssl s_client -connect YourServerIP:8013

     

    AEK
    MZBZ
    Staff
    MZBZ
    Staff
    February 8, 2025

    Starting from FortiClient 7.2.5+, renewing the SSL cert on FortiGate will trigger a security feature on FortiClient. This is known and will change in the next version. You can contact TAC for the issue id.

     

    Solution is to disconnect FCT from EMS and shutdown FCT (right click tray area and shutdown). Then delete FortiClient folder in %appdata% and %localappdata% and reboot the system.

     

    Terms & ConditionsAccessibility statement