SSL VPN with Smartcard

Hello,

2-factor authentication is possible with Fortinet mobile or hardware tokens.

Refer to https://docs.fortinet.com/document/fortigate/7.0.6/administration-guide/323465/fortitokens for the start.

Regards

Client-certificate-based authentication is definitely supported, even when the certificates are stored on a smartcard. I handled a handful of support tickets in the past where customers were using this.

With that said, be aware that weird edgecases do exist and can cause compatibility issues, so please make sure to perform some tests of your chosen smartcard + PC + FortiClient + FortiGate before you commit to it.

Thanks all, I'm on the right track.