Forticlient prompting for cert at logon

[ikome]

Hi All,

We are deploying FC via Intune. We have gotten it to work with Autopilot and show up at login.

However, everytime I attempt to login the cert box pops up to specify a cert but there are no certs listed to choose from.

We went away with the whole cert thing in FC and instead do host checker option. Not sure why the cert box is even popping up.

My only guess if it's a machine cert of sorts it's looking?

Anyone else run into this issue and solved it? Or a workaround?

[ebilcari]

As soon as the FCT is connected to an EMS, a certificate is automatically generated from EMS CA and pushed to the end host. If you check under managed endpoints the FCT ID will be the certificate that you can find in end host, User Certificates > Personal > Certificates

Can you check if the certificate is enrolled on this host?

[Dhruvin_patel]

Hello ikome,

I'm assuming that the forticlient is not managed through EMS. You are directly connecting to Fortigate to create an sslvpn tunnel.

In this case, It shows the certificate popup, if you are using the fortigate factory certificate. The reason is that the FortiGate factory certificate is a self-signed certificate and the client cannot verify the server certificate (in this case FortiGate certificate as Fortigate is acting as a server). If you would like to resolve the warning, please purchase and import the signed SSL certificate, it was shown in this document: https://docs.fortinet.com/document/fortigate/6.2.3/cookbook/825073/purchase-and-import-a-signed-ssl-...

Best Regards,