Technical Tip: Verify if the CA certificate in Win...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 359818

Description

The article describes a troubleshooting step for a specific certificate issue and provides steps on how to make sure the CA that has generated the certificate is available in the Customer PC/laptop Windows OS

Scope

FortiGate.

Solution

The CA that has generate the certificate needs to be available in the OS.
In order to check, go to Start -> Run -> Mmc -> Add -> Certificate store.

run and run system.png

Select OK.

2nd of 1st.png

2nd of 2nd.png

2nd of 3rd.png

After selected the 'Certificates' click on 'Add'.

Download the certificate from the FGT GUI: Security Profiles -> SSL/SSH Inspection and select 'deep-inspection' -> select the specific CA certificate related to the captive portal -> Select 'Download'.
At this point install it on the PC and test:

Cname must match URL
Expiry date should be valid.

157

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: Verify if the CA certificate in Windows PC/laptop is matching the Certificate in FortiGate