Troubleshooting Tip: FSSO status down due to poor key strength

[dkochhar]

Description	This article describes an issue where the status of the FSSO secure connection appears as down due to poor key strength.
Scope	FortiGate.
Solution	The FSSO secure connection is displayed as down. In the Packet Captures, the FortiGate has sent 'Alert (Level: Fatal, Description: Bad Certificate)'. This alert message is triggered when FortiGate is unable to validate the server certificate presented by the Collector agent.   Ensure that the certificate's key strength is not too low. The certificate used for establishing the FSSO SSL connection should have a minimum key strength of 2048 bits.