FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
jkoay
Staff
Staff
Article Id 316210
Description

This article describes how to configure certificate filter to show only matched subject and issuer.

Scope FortiClient v7.0.
Solution

Sometimes in the endpoint, there might be many client certificates available in the personal certificate store and it could be tedious for the end user to know which client certificate to select in order to establish a VPN tunnel.

 

It is possible to use an XML certificate tag to filter based on common name and issuer. For instance, if it is desired to filter to only show certificates issued by MANGOCA, include the following XML tags:

 

Client Certificate 1.png

 

To filter only client certificates issued by MANGOCA, include the following XML codes:

 

<sslvpn>

<connections>

<connection>

<name>Lab SSL VPN</name>

<certificate>
<common_name>
<match_type>wildcard</match_type>
<pattern>*</pattern>
</common_name>
<issuer>
<match_type>simple</match_type>
<pattern>MANGOCA</pattern>
</issuer>
</certificate>

</connection>

</connections>

</sslvpn>

 

Results:

 

Filtered client certificate.png

 

This feature is no longer available in the latest version of FortiClient EMS v7.2.