Created on
09-26-2022
01:09 AM
Edited on
02-02-2025
10:07 PM
By
Anthony_E
Description | This article discusses the 'untrusted HTTPS server certificate' warning on Administrator widget. |
Scope | FortiGate v7.2.1 and later. |
Solution |
In v7.2.1, a new default certificate 'Fortinet_GUI_Server' is introduced for HTTPS administrative access.
If a self-signed certificate is used, the error 'Untrusted HTTPS server certificate' will be shown on the dashboard.
It is best practice to use a signed and trusted HTTPS server certificate (refer: FortiGate-HTTPS-SSL-Certificate-Installation), but it is also possible to remove this warning by using the 'Fortinet_GUI_Server' certificate.
Go to System -> Settings -> HTTPS Server Certificate, select 'Fortinet_GUI_Server', and select 'Apply'.
Download the certificate from System -> Settings -> HTTPS Server Certificate. In this step, select 'Download HTTPS CA certificate'. 'Fortinet_CA_SSL' will be downloaded: Install the certificate in the PC's trusted root CA certificate store: Clear the browser cache and log in to the GUI in a new browser window to verify the HTTPS server certificate is now trusted by the PC. 'Untrusted HTTPS server certificate' has been replaced with a link to download the current HTTPS CA certificate.
Note: To assign an HTTPS server certificate for older versions, use the following commands: config system global set admin-server-cert <new_cert>
Related documents: A guide to FortiGate and certificate issues New default certificate for HTTPS administrative access 7.2.1 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.