Troubleshooting Tip: The error message 'Unable to load VPN map from server' appears when selecting 'VPN Location Map'

[bbae]

Description	This article describes how to resolve the 'Unable to load VPN map from server' error.
Scope	FortiGate, IPSec VPN, VPN, 7.0.11 and above, 7.2.1 and above.
Solution	When selecting 'VPN Location Map', sometimes the GUI may not load and will instead raise the error 'Unable to load VPN map from the server'. For example: A feature to validate certificates of 'mapserver.fortinet.com' was introduced in versions 7.2.1 and 7.0.11. FortiGate's default certificate store does not trust all of the certificates in the chain of 'mapserver.fortinet.com' to load. After manually downloading all CA in the chain from 'mapserver.fortinet.com' and uploading them to FortiGate as a trusted CA, the VPN Location Map will successfully load. See the steps below. Manually download the CA in the chain from 'mapserver.fortinet.com'. Alternatively, download the certificate from DigiCertGlobal here. Upload it to FortiGate as a trusted CA. Test to see if it works as intended. Related article: Technical Tip: Working of VPN location map.