Technical Tip: Using the ZTNA Certificate on VPN Connection (Linux)

[aliyavuzer]

Description	This article describes how to use the ZTNA Certificate on VPN Connection (Linux).
Scope	VPN Certificate authentication with ZTNA Certificate, FortiClient.
Solution	ZTNA device certificate verification from EMS for SSL VPN connections v7.2.1. FortiOS supports VPN authentication with a ZTNA Certificate now. FortiOS side Configuration steps are described in the following documentation: ZTNA device certificate verification from EMS for SSL VPN connections To get a ZTNA Certificate on an SSL VPN connection on Linux endpoints, configure the 'Linux Smart Card Certificate' section. Edit Remote Access Profile, select VPN Tunnel, and Edit. Configure the 'Linux Smart Card Certificate' field with '/opt/forticlient/tpm2/lib/libtpm2_pkcs11.so' then save the profile. Linux Smart Card Certificate When the Linux endpoint receives a new profile, the ZTNA Certificate will be visible on the Remote access certificate selection tab. Note: FortiClient EMS and FortiClient require v7.2.2 GA Release.