Technical Tip: How to export root CA from Certificate Authority Server and import to FortiGate

[simonz_FTNT]

Description	This article describes how to export root CA certificate from Active Directory or CA server and then import it into FortiGate.
Scope	FortiGate.
Solution	Login to Active Directory Server and launch the Certificate Authority application by holding the Windows button + R then type certsrv.msc 'Right-click' on the CA and select Properties. Under General, select View Certificate to display the certificate.   Then under Detail, select Copy to File to start the exporting wizard process.   Follow the wizard process to complete the exporting, and select DER Encoded binary X.509 (.cer) format. Select browse, choose the save location for the certificate, and press next to complete the exporting process. Once done with the exporting process, log to FortiGate and browse to System -> Certificates then select Create/Import -> CA Certificate Select File, select Upload, and select the previously exported certificate.    Select OK to import, it will show under the Remote CA Certificate section as CA_CERT_1.