Install intermediate certificate for SSL

[mhe]

How do I install a intermediate certificate from a public CA to use it for SSL?? Import the .cer to Local Services ends with:

Import has failed: There is no matching certificate request for server certificate "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA"

thanks!

[mhe]

found a solution

[Carl_Windsor_FTNT]

Glad you sorted, just for the benefit of others:

Local services is used to provision certificates on the use on the FortiAuthenticator itself e.g. for use by internal systems such as the WebUI or 802.1X.  This is why FAC was expecting there to be a matching certificate request to match the Cert.

To create an FAC as an intermediary CA, you need to go to Certificate Management > Certificate Authorities > Local CAs and there you have options to create either a Root or Intermediary CA.

[mhe]

if you add an intermediate certificate (for SSL) you also have to set it active under "System" -> "Admin" -> "GUI".