Skip to main content
CyberNET_eu
New Member
January 4, 2023
Question

https certificate for every VDOM

  • January 4, 2023
  • 2 replies
  • 3151 views

Hi,

 

For administration purpose, I would like to use différent certificate for each admin interface of each VDOM.

I cannot find how to.

 

regards

2 replies

gfleming
Staff
Staff
January 4, 2023

I'm pretty sure you cannot do this. The FortiGate is a single "web server" protected by a single certificate. A VDOM is just a separate URL on the "Web server". Is there a reason you want separate certificates for each VDOM? What issue are you facing?

CyberNET_eu
New Member
January 5, 2023

simple reason, FortiOS do not allow admin to logon to interface that not in the VDOM...

seshuganesh
Staff
Staff
January 5, 2023

Hi Team,

 

You cannot do that since that admin cert configuration is same to all vdom. Instead you can use wild card certificate to the admin portal and point multiple subdomains to multiple vdom IP address, so you can access different vdom with different ip address with same wild card certificate.

For example, you can sign wild card cert wtih "*.xyz.com"

You can use vdom1 URL as "vdom1.xyz.com"

VDOM2 URL as "vdom2.xyz.com"

VDOM3 URL as "vdom3.xyz.com"

Hope this helps

CyberNET_eu
New Member
January 5, 2023

Yes it will works...

But is would be much cleaner that the url must be based on hosted Company VDOM domain...

Thanks for the proposal

 

seshuganesh
Staff
Staff
January 5, 2023

I can certainly understand, as per my knowledge its not possible because admin-cert would be same for all vdoms