Limit Certificates Presented for use with SSL VPN

[shocko]

Using FortiClient 7.2.1 with Fortigate 6.4 and FortiClient EMS 7.2.1. We have an SSLVPN define for our users. When they get to the Windows sign-in screen they have an option to connect with the PVN but must select a certificate form the drop down list. This presents ALL certificates with usage Client Authentication from our local trust stores. Since we use Intune there maybe 3-4 certificates presented here. 

Is there any way to restrict/limit this list to certificates issued from a specific CA? 

[dbhavsar]

Hello @shocko 

- you can use the windows GPO to manage that 
https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/distribute-certificates-t...

[shocko]

Eh? No I cant :) AzureAD joined so no GPO.

[shocko]

Can anyone assist?