| Description | This article indicates why FortiWeb's server policy shows its certificate (and also its intermediate certificate) in grey and cannot be modified in the FortiWeb GUI. |
| Solution |
In a server policy configuration, the policy's certificate configuration (and also its intermediate certificate) could appear in grey, not being able to be changed or modified. No matter if the server policy is a Single Server/Server Balance:
Or the policy is an HTTP Content Routing Policy:
This situation happens because 'Enable Strict SNI' is enabled; to check this, select Advanced SSL settings. An SNI Policy should be configured.
Important: If the server policy is in production, it is very important to be clear if the SNI policy is being used by this policy. Disabling this setting could affect the HTTPS access of all the published web sites configured in this server policy.
To enable again the server policy certificate, disable 'Enable Strict SNI' and select 'OK'.
The policy's certificate and intermediate certificate will be enabled to be configured in the FortiWeb's GUI. |
