Fortinet_Factory Certificate Issue

[gsarica]

We just got a brand new FortiGate 100D and are trying to prevent the certificate error when logging into the firewall as an admin via the web gui. I've downloaded the Fortinet_Factory Cert that appears to be used on that login page but it is not recognized by IE or Chrome after importing it into the Trusted Root Certification Authorities.

When viewing the downloaded cert, it says 'Windows does not have enough information to verify this certificate.' where it would normally list the intended purposes and such.

Other certifications like the SSLProxy ones import just fine, just having an issue with this one cert.

[Jeff_FTNT]

Try to download  Fortinet_CA and import to  Trusted Root Certification Authorities.Thanks.

[gsarica]

Hi Jeff,

Thanks for the reply. I actually had tried that previously too and neither Chrome nor IE work after that either. Still says there is a problem with the certificate chain even though in Chrome if I view the certificate details it does say they're ok.

[Jeff_FTNT]

That may be "Fully Qualified Domain Name" check fail  on Fortinet_Factory Certificate(CN= Serial number of FGT), it can not be fixed.Thanks.

[gsarica]

Thanks again. After some research, I'm pretty sure that is the case. We're going to try generating our own cert and see how that goes.