FortiGate Administration Guide - FirewallShop.com

Local Certificates
VPN Certificates
Locality (City)
State/Province
Country
e-mail
Key Type
Key Size
Enrollment Method
File Based
Online SCEP
Type the name of the city or town where the FortiGate
unit is installed.
Type the name of the state or province where the
FortiGate unit is installed.
Select the country where the FortiGate unit is installed.
Type the contact email address.
Only RSA is supported.
Select 1024 Bit, 1536 Bit or 2048 Bit. Larger keys are
slower to generate but they provide better security.
Select File Based to generate the certificate request.
Select Online SCEP to obtain a signed SCEP-based
certificate automatically over the network.
CA Server URL: Enter the URL of the SCEP server from
which to retrieve the CA certificate.
Challenge Password: Enter the CA server challenge
password.
Downloading and submitting a certificate request
You have to fill out a certificate request and generate the request before you can
submit the results to a CA. For more information, see “Generating a certificate
request” on page 370.
To download and submit a certificate request
1 Go to VPN > Certificates > Local Certificates.
2 In the Local Certificates list, select the Download icon in the row that corresponds
to the generated certificate request.
3 In the File Download dialog box, select Save to Disk.
4 Name the file and save it to the local file system.
5 Submit the request to your CA as follows:
• Using the web browser on the management computer, browse to the CA web
site.
• Follow the CA instructions to place a base-64 encoded PKCS#12 certificate
request and upload your certificate request.
• Follow the CA instructions to download their root certificate and Certificate
Revocation List (CRL), and then install the root certificate and CRL on each
remote client (refer to the browser documentation).
6 When you receive the signed certificate from the CA, install the certificate on the
FortiGate unit. See “Importing a signed server certificate” on page 373.
FortiGate Version 3.0 MR5 Administration Guide
372 01-30005-0203-20070830