Your connection is not private in Google Chrome

[NeerajSofat]

Hi

We are getting the below error while login home page for authentication.

Your connection is not private

Attackers might be trying to steal your information from www.example.com (for example, passwords, messages, or credit cards). Learn more about this warning

net::ERR_CERT_AUTHORITY_INVALID

Please help me how to address the issue.

[abarushka]

Hello,

I suspect that authentication page is signed with FortiGate built-in certificate. You may consider to download FortiGate built-in certificate and import. After this you should be able to open the web page.

https://docs.fortinet.com/document/fortigate/7.6.0/administration-guide/278904/export-a-certificate

https://docs.fortinet.com/document/fortigate/5.6.0/cookbook/370963/importing-the-certificate-into-we...

[NeerajSofat]

Hi Abarushka,

After install the certificate, we are facing still same issue.

[tpatel]

Hello Neeraj, 

Can you please check which certificate you see in the browser when you get an error that the connection is not private. Is it showing fortigate certificate. 

Are you using certificate inspection or deep inspection in firewall policy?

[sw2090]

the Message "ERR_CERT_AUTHORITY_INVALID" basically means that the connection is encrypted with a certificate that was signed by a certificate authority that is either not known or not trusted by chrone.

This happens e.g. when you enable ssl deep inspection using one of the Fortigates built in certificates.

You would in this case not need to download the certificate but you will need to download the CA that signed it (can be seen in the certificate details on the FGT) and install that as a trusted CA on your client.