Skip to main content
raphael_lage
raphael_lage
New Member
October 13, 2021
Question

HTTPS server certificate not enable

  • October 13, 2021
  • 3 replies
  • 4080 views

Hello everyone. I want to set up GUI access in my Fortigates to use SSL certificate (HTTPS). In my homologation firewall using OS version 6.4.7 the HTTPS server certificate option is available for me to choose the certificate I want to use. But in my two production firewalls that use OS version 6.4.2 this option is not available. My question is whether this option is only available in version 6.4.7, if yes, would you have any way to configure GUI access to use HTTPS otherwise?

    3 replies

    Vichu_94
    Staff
    Vichu_94
    Staff
    May 14, 2022

    The SSL/HTTPS certificate could also be mapped from the CLI by the following command:

    config system global
    set auth-cert <Certificate Name >
    end


      sjoshi
      Staff
      sjoshi
      Staff
      May 14, 2022

      Hi Raphael,

       

      As per your request I have checked on v6.4.2 in GUI and HTTPS server certificate is present in the GUI. I have attached the Snapshot for it.

      Go to System> Settings>HTTPS server certificate

       

       

       

      Thanks, Salon
      Markus_M
      Staff & Editor
      Markus_M
      Staff & Editor
      May 14, 2022

      Hi Raphael,

       

      it will be available on all FortiGate versions, I can speak only from 5.2 and newer.

      On CLI you will be able to see/set it here:

      config system global
         set admin-server-cert "mywebservercert"
      end

       

      On GUI, lacking the description, it is supposed to be here:

      GUI > System (on global VDOM, if you have VDOMs) > Settings

      And there "HTTPS server certificate"

      If there is no "Settings", you are in a VDOM, you will have to switch to global.

      An indicator, at least for me, whether I am in the VDOM is on the browser address bar, it says vdom=<vdomname>, for example
      https:/....      /ng/firewall/policy/policy/standard?vdom=root

       

      Best regards,

       

      Markus

      Terms & ConditionsAccessibility statement