- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Your connection is not private in Google Chrome
Hi
We are getting the below error while login home page for authentication.
Your connection is not private
Attackers might be trying to steal your information from www.example.com (for example, passwords, messages, or credit cards). Learn more about this warning
net::ERR_CERT_AUTHORITY_INVALID
Please help me how to address the issue.
- Labels:
-
FortiGate
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
I suspect that authentication page is signed with FortiGate built-in certificate. You may consider to download FortiGate built-in certificate and import. After this you should be able to open the web page.
https://docs.fortinet.com/document/fortigate/7.6.0/administration-guide/278904/export-a-certificate
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Abarushka,
After install the certificate, we are facing still same issue.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello Neeraj,
Can you please check which certificate you see in the browser when you get an error that the connection is not private. Is it showing fortigate certificate.
Are you using certificate inspection or deep inspection in firewall policy?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
the Message "ERR_CERT_AUTHORITY_INVALID" basically means that the connection is encrypted with a certificate that was signed by a certificate authority that is either not known or not trusted by chrone.
This happens e.g. when you enable ssl deep inspection using one of the Fortigates built in certificates.
You would in this case not need to download the certificate but you will need to download the CA that signed it (can be seen in the certificate details on the FGT) and install that as a trusted CA on your client.
--
"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams