Troubleshooting Tip: Reasons for the error 'sslvpn_login_cert_checked_error' when connecting via FortiClient

[Umer221]

Description	This article describes how to troubleshoot an issue where users receive the error 'sslvpn_login_cert_checked_error' when connecting via FortiClient due to different reasons.
Scope	FortiOS, FortiGate, SSL VPN.
Solution	Case 1: Users cannot connect to SSL VPN where an error is observed after running the following debugs: diagnose debug reset diagnose debug disable diagnose debug application sslvpn -1 diagnose debug console timestamp enable diagnose debug enable Verify that 'Require Client Certificate' is already disabled but the error persists. See this article Troubleshooting Tip: Failure to connect via SSL VPN with 'Credential or SSLVPN configuration is wron... for the troubleshooting steps. Look for the entry 'set ztna-trusted-client enable' by running commands as shown in the following photo: config vpn ssl settings If 'set ztna-trusted-client enable' is observed in SSL-VPN Settings, unset it by running the following command: config vpn ssl settings     unset ztna-trusted-client end Case 2: Check whether the TLS settings on the user machine and FortiGate are similar to each other or not. If it is not the same, then it is possible to make changes to TLS for SSL VPN in FortiGate as shown below: