Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
ck8882
New Contributor II

FortiGate login wepage still show "not secure" in the address bar

HI 

 

Anyone have experience and idea how to configure and process generate CSR at FGT and sign by FAC for internal access in order the webpage won't show warning and address bar show "not secure" ?

 

I did try generate CSR in fortigate and signed by FAC. I did import the local CA from FAC to the end user devices. However, still see the warning and address bar show "not secure" 

 

Appreciate anyone could share the idea and the step i missing

 

I did refer link below as well

https://docs.fortinet.com/document/fortiauthenticator/6.5.0/cookbook/628126/fortiauthenticator-as-a-...

 

 

 

 

2 Solutions
srajeswaran

https://docs.fortinet.com/document/fortigate/7.2.0/new-features/499047/new-default-certificate-for-h... This document confirms that if the SAN is not valid the browsers will give the error as you have observed.

Regards,
Suraj
- Have you found a solution? Then give your helper a "Kudos" and mark the solution.

View solution in original post

ebilcari

Yes, SAN is added as a requirement on modern browser for every web page (not related to FGT only). You will still need to add the SAN even if you have specified the same domain as the common name.

- Emirjon
If you have found a solution, please like and accept it to make it easily accessible for others.

View solution in original post

13 REPLIES 13
dbu
Staff
Staff

Hi @ck8882 ,

Could you please share more, possibly a screenshot of the warning details. 

 

Regards!

Regards!
If you have found a solution, please like and accept it to make it easily accessible for others.
ck8882
New Contributor II

HI Dbu,

 

Please see the error screen below. According to the document link, i didn't configured the SAN value, would like to know is it required must configured SAN?

 

 

webpage error.JPG

smayank
Staff
Staff

Hello

I request you to refer this video link to make it secure.

https://www.youtube.com/watch?v=gMWEH32L4aE\

Thanks  & Regards

Mayank Sharma

ck8882
New Contributor II

HI Smayank,

 

I have to sign the CSR by other side instead of use built-in self create cert.

 

Thanks

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors