Fortinet Client VPN software cannot see the local computer certificate

[asho22]

Hi,

We have an issue where the Fortinet Client VPN software cannot see the local computer certificate when launching the software as a standard user.  The software can see the certificate when configuring the VPN settings but when the client is launched it cannot see the certificate.  We think this is permissions related, the users are not local admins. 

Thanks!

[FortiNet_Newb]

You need to enable the option for "Allow Non-Administrators to Use Machine Certificates".  If you are using EMS to manage your clients, you can find the toggle under your VPN Tunnel's Advanced Settings located in your applicable Remote Access Profile.

[asho22]

Hi,

We do not use EMS.  The client can see the certofocate when creating the profile but when selecting 'connect' the certificate does not show.

[FortiNet_Newb]

If you are not using EMS, to accomplish the same thing, just add the following line to the appropriate connection in the XML configuration on the client:

<allow_standard_user_use_system_cert>1</allow_standard_user_use_system_cert>

For example:

<vpn>
   <sslvpn>
        <connections>
            <connection>

                ...
                <allow_standard_user_use_system_cert>1</allow_standard_user_use_system_cert>
            </connection>
        </connections>
    </sslvpn>
</vpn>