Technical Tip: Accessing the FortiGate GUI Triggers a Browser Prompt to Select a Certificate

[ametkola]

Description	The article below describes an issue where FortiGate prompts the user to choose a certificate, despite the admin settings not being configured to require a client certificate. This behavior impacts usually the devices after the firmware upgrade to v7.0.17, v7.2.11, v7.4.6, and v7.6.2 or later.
Scope	FortiGate.
Solution	The behavior applies to the devices that have any of the following setups in place: IKE2VPN with Client Certificate authentication enabled. SSL VPN requires Client Certificate Authentication. IKEv1 Site-to-Site VPN with Certificate Authentication required for peers. Ensure the following requirements are met: config system global     set admin-https-pki-required disable end Additionally, if a PKI user is configured, it should not be assigned to the admin user: config user peer     edit "cert_ca"         set ca "cert_CA2"     next end This issue has been resolved in v7.4.8 and v7.6.3.