Skip to main content
mhe
Explorer II
July 13, 2016
Question

Install intermediate certificate for SSL

  • July 13, 2016
  • 1 reply
  • 14005 views

How do I install a intermediate certificate from a public CA to use it for SSL?? Import the .cer to Local Services ends with:

Import has failed: There is no matching certificate request for server certificate "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA"

 

thanks!

    1 reply

    mhe
    mheAuthor
    Explorer II
    July 14, 2016

    found a solution

    Carl_Windsor_FTNT
    Staff
    Staff
    July 14, 2016

    Glad you sorted, just for the benefit of others:

     

    Local services is used to provision certificates on the use on the FortiAuthenticator itself e.g. for use by internal systems such as the WebUI or 802.1X.  This is why FAC was expecting there to be a matching certificate request to match the Cert.

     

    To create an FAC as an intermediary CA, you need to go to Certificate Management > Certificate Authorities > Local CAs and there you have options to create either a Root or Intermediary CA.

    mhe
    mheAuthor
    Explorer II
    July 14, 2016

    if you add an intermediate certificate (for SSL) you also have to set it active under "System" -> "Admin" -> "GUI".