FortiGate Administration Guide - FirewallShop.com

VPN Certificates
Local Certificates
Importing a signed server certificate
Your CA will provide you with a signed server certificate to install on the FortiGate
unit. When you receive the signed certificate from the CA, save the certificate on a
computer that has management access to the FortiGate unit.
To install the signed server certificate, go to VPN > Certificates > Local
Certificates and select Import. Install the signed certificate through the Upload
Local Certificate dialog box at the top of the page. The certificate file can be in
either PEM or DER format. The other dialog boxes are for importing previously
exported certificates and private keys.
Figure 242:Upload Local Certificate
Certificate File
Browse
Enter the full path to and file name of the signed server certificate.
Alternatively, browse to the location on the management computer
where the certificate has been saved, select the certificate, and
then select OK.
Importing an exported server certificate and private key
The server certificate and private key to import must have been exported
previously as a single PKCS12 file through the execute vpn certificate
key export CLI command. The file is associated with a password, which you
will need to know in order to import the file. Before you begin, save a copy of the
file on a computer that has management access to the FortiGate unit. For more
information, see the FortiGate Certificate Management User Guide.
To import the PKCS12 file, go to VPN > Certificates > Local Certificates and
select Import.
Figure 243:Upload PKCS12 Certificate
Certificate with key
file
Browse
Password
Enter the full path to and file name of the previously exported
PKCS12 file.
Alternatively, browse to the location on the management computer
where the PKCS12 file has been saved, select the file, and then
select OK.
Type the password needed to upload the PKCS12 file.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 373