Fortinet Client VPN software cannot see the local computer certificate

3 replies
2109 views

Hi,

We have an issue where the Fortinet Client VPN software cannot see the local computer certificate when launching the software as a standard user. The software can see the certificate when configuring the VPN settings but when the client is launched it cannot see the certificate. We think this is permissions related, the users are not local admins.

Thanks!

FortiClient

FortiNet_Newb

New Member

You need to enable the option for "Allow Non-Administrators to Use Machine Certificates". If you are using EMS to manage your clients, you can find the toggle under your VPN Tunnel's Advanced Settings located in your applicable Remote Access Profile.

asho22Author

New Member

Hi,

We do not use EMS. The client can see the certofocate when creating the profile but when selecting 'connect' the certificate does not show.

FortiNet_Newb

New Member

If you are not using EMS, to accomplish the same thing, just add the following line to the appropriate connection in the XML configuration on the client:

<allow_standard_user_use_system_cert>1</allow_standard_user_use_system_cert>

For example:

...
<allow_standard_user_use_system_cert>1</allow_standard_user_use_system_cert>
</connection>
</connections>
</sslvpn>
</vpn>

Sign up

Login with SSO

Login to the community

Login with SSO