FortiGate Administration Guide - FirewallShop.com

Remote Certificates
VPN Certificates
Importing separate server certificate and private key files
Use the Upload Certificate dialog box to import a server certificate and the
associated private key file when the server certificate request and private key
were not generated by the FortiGate unit. The two files to import must be available
on the management computer.
Figure 244:Upload Certificate
Certificate file
Key file
Browse
Password
Enter the full path to and file name of the previously exported
certificate file.
Enter the full path to and file name of the previously exported key
file.
Browse to the location of the previously exported certificate
file/key file, select the file, and then select OK.
If a password is required to upload and open the files, type the
password.
Remote Certificates
Note: The certificate file must not use 40-bit RC2-CBC encryption.
For dynamic certificate revocation, an OCSP (Online Certificate Status Protocol)
server is used. Remote certificates are public certificates without a private key.
The OCSP is configured in the CLI only. For more information, see the FortiGate
CLI Reference.
Note: There is one OCSP per vdom.
Figure 245:Remote certificate list
Installed Remote (OCSP) certificates are displayed in the Remote Certificates list.
To view installed Remote (OCSP) certificates or import a Remote (OCSP)
certificate, go to VPN > Certificates > Remote. To view certificate details, select
the View Certificate Detail icon in the row that corresponds to the certificate.
FortiGate Version 3.0 MR5 Administration Guide
374 01-30005-0203-20070830