FortiGate Administration Guide - FirewallShop.com

CA Certificates
VPN Certificates
Figure 247:CA Certificates list
View Certificate Detail
Download
Import
Name
Subject
Delete icon
View Certificate
Detail icon
Download icon
Import a CA root certificate. See “Importing CA certificates” on
page 376.
The names of existing CA root certificates. The FortiGate unit assigns
unique names (CA_Cert_1, CA_Cert_2, CA_Cert_3, and so on) to
the CA certificates when they are imported.
Information about the issuing CA.
Delete a CA root certificate from the FortiGate configuration.
Display certificate details.
Save a copy of the CA root certificate to a local computer.
Importing CA certificates
For detailed information and step-by-step procedures related to obtaining and
installing digital certificates, see the FortiGate Certificate Management User
Guide.
After you download the root certificate of the CA, save the certificate on a PC that
has management access to the FortiGate unit.
To import a CA root certificate, go to VPN > Certificates > CA Certificates and
select Import.
Figure 248:Import CA Certificate
SCEP
Local PC
Select to use an SCEP server to access CA certificate for user
authentication. Enter the URL of the SCEP server from which to
retrieve the CA certificate. Optionally, enter identifying information
of the CA, such as the file name. Select OK.
Select to use a local administrator’s PC to upload a public
certificate. Enter the location, or browse to the location on the
management computer where the certificate has been saved,
select the certificate, and then select OK.
When you select OK and you have elected to import a certificate via the SCEP
server, the system starts the retrieval process immediately.
The system assigns a unique name to each CA certificate. The names are
numbered consecutively (CA_Cert_1, CA_Cert_2, CA_Cert_3, and so on).
FortiGate Version 3.0 MR5 Administration Guide
376 01-30005-0203-20070830