FortiManager: mass deploy of a "trusted" CA certificate

Hello,

I'm deploying a trusted CA certificate to a number of Fortigates devices that are in sync with FortiManager.

This is not for full SSL inspection, but for trusting SSL connections to internal servers (the ones that go into Remote CA Certificates).

Right now I'm using a script since I didn't find such functionality in 7.4.11. Dynamic Local Certificate seems to be only for full SSL inspection.b

Did I miss anything or scripting is the way to go?

Thanks

Staff & Editor

Hello heoun,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Regards,

Jean-Philippe - Fortinet Community Team

Staff

Yes, this is the right way, it is also covered in this article:

The ‘Dynamic Local Certificate’ is used for certificates with private keys:

Emirjon

Sign up