Windows server 2019 HTTP, HTTPS fortigate SSL/TLS Certificate for deep inspection.

SSL Certificate for deep inspection must have CA=True, this kind of certificates isn't availables for purchasing, you need to auto-sign with MS-Windows certificate manager or OpenSSL.

Check the pdf attached on this article:

https://community.fortinet.com/t5/FortiGate/Technical-Note-How-to-sign-a-CA-certificate-on-Windows-server/ta-p/190943

And this youtube link for enable certificate manager feature in Windows server:

https://www.youtube.com/watch?v=wl5aJrWaoYI

Dear @JOSIAH_BOZIAH,

Thank you for posting to the Fortinet Community Forum.

Problem Description:-

Windows server 2019 HTTP, HTTPS fortigate SSL/TLS Certificate for deep inspection.

For more understanding of deep inspection:-

https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/122078/deep-inspection

Make sure CA should be true to be used in deep inspection cert. in FGT

Let us know if this helps.

Thanks

Also keep in mind that these are self-signed so you have to have that ca installed on every server and client as trusted ca or you would get lots of security warnings in your browsers!