FortiGate Certificates

[TobiasHan]

Hello,

i have a FortiGate 500 in use.

I have a question to the certificates.

Currently we have several Fortinet certificates in use, as well as our own certificate.List of Fortinet Certificates: Certificates: [ul]Fortinet_FactoryFortinet_SSLFortinet_SSLProxyFortinet_Wifi Local[/ul] CA Certificates: [ul]Fortinet_CA_SSLFortinet_CA_SSLProxyFortinet_CA_Untrusted[/ul] External CA Certificates: [ul]Fortinet_CAFortinet_Wifi_CAFortinet Wifi_CA2G_CA_Cert_1[/ul] Where are the Fortinet Certificates needed for?And where is the difference between "Certificates" "Local CA Certificates" and "external CA Certificates"? In advance, many thanks for all informations I get. Kind regardsTobias

[emnoc]

Ok where to start

1: Cert are used in various location such as webadmin-GUI

2: SSLVPN

Local means exactly that ; " a local  server service"

External  CA means  exactly tha; a root-Cert only for a CA or a CA bundle "

FortiOS has a pre-canned list of CAs pre-installed. You can install your private CA or any non pre-CA  certs in external CA

Keep  in mind  a default  cert based on hardware serial is used for all local services and default SSL cert for  SSL-inspection.

Ken