| Description | This article describes how the .P7B certificate is already being signed with the CSR generated from the FortiGate device itself. |
| Scope | FortiOS 7.0.x and FortiOS 7.2.x. |
| Solution |
1. Make sure the CSR is generated on FortiGate and provided to the certificate issuer to sign and the certificate issuer had provided one in p7b format.
2. To convert the .P7B to .CER format. The steps shown below are done on a Windows 10 with Microsoft native tool.
a. Download the P7B certificate file to Windows 10 machine. Select the P7B certificate file and the Windows certmgr application will open as shown. The Pb7 file contains 4 certificates.
b. Select install the cert that shows 'Client Authentication, Server Authentication'. Then, select install the certificate.
c. Choose 'Local Machine' and select Next. In the next screen, choose to place certificates in a particular store, and select browse. Locate the 'Store' and choose 'Personal'.
Note: Select Finish and it will show 'The import was successful'.
d. On the Windows search box, type in 'cert' and it should display a control panel option to Manage Computer Certificates. Select to launch the mmc.exe with the certificate option already enabled.
e. Navigate to the Personal Certificates folder and locate the certificate installed earlier. 'Right-click' on the certificate -> All Tasks -> Export...
f. The Certificate export wizard will start. Select Next. The Certificate export wizard will start. Select Next. Export file format to 'Base-64 encoded X.509(.CER)'.
g. Specify a filename. This can be anything wanted to be.
Note: Import the .cer into the FortiGate device. |
