How to import public CA certificate bundl...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 243068

Description

This article describes the steps for manually importing a public CA certificate bundle into FortiGate.

This can be needed in cases where for some reason some CA certificates or the whole bundle is removed from FortiGate or if the customer wants to manually downgrade or upgrade the CA certificate bundle.

Scope

All FortiGate models and supported firmware.

Solution

Prerequisites:

TFTP server.
CA certificate bundle package. It is needed to contact Fortinet support to get the CA certificate bundle package.

The below command is used to import the CA certificate bundle from FortiGate CLI:

execute vpn certificate ca import bundle <CA bundle filename with .pkg extension> <TFTP server IP>

Note:

Ensure that the local firewall (if any) on the TFTP server allows access from FortiGate for retrieving the certificate package file before initiating the command.

2832

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: How to import public CA certificate bundle in FortiGate

You are leaving our website