FortiGate Administration Guide - FirewallShop.com

VPN Certificates
Local Certificates
VPN Certificates
This section explains how to manage X.509 security certificates using the
FortiGate web-based manager. Refer to this module to generate certificate
requests, install signed certificates, import CA root certificates and certificate
revocation lists, and back up and restore installed certificates and private keys.
For additional background information, see the FortiGate Certificate Management
User Guide.
This section describes:
• Local Certificates
• Remote Certificates
• CA Certificates
• CRL
Local Certificates
Certificate requests and installed server certificates are displayed in the Local
Certificates list. After you submit the request to a CA, the CA will verify the
information and register the contact information on a digital certificate that
contains a serial number, an expiration date, and the public key of the CA. The CA
will then sign and send the signed certificate to you to install on the FortiGate unit.
To view certificate requests and/or import signed server certificates, go to VPN >
Certificates > Local Certificates. To view certificate details, select the View
Certificate Detail icon in the row that corresponds to the certificate.
The first entry in the list is the FortiGate unit’s self-signed certificate, which you
cannot delete.
Figure 239:Local Certificates list
Download
View Certificate Detail
Delete
Generate
Import
Name
Subject
Generate a local certificate request. See “Generating a certificate
request” on page 370.
Import a signed local certificate. See “Importing a signed server
certificate” on page 373.
The names of existing local certificates and pending certificate
requests.
The Distinguished Names (DNs) of local signed certificates.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 369