FortiGate Administration Guide - FirewallShop.com

PKI authentication
User
Protocol
Certificate
Select a secure LDAP protocol to use for authentication. Depending on
your selection, the value in Server Port will change to the default port for
the selected protocol.
Select a certificate to use for authentication from the drop-down list. The
certificate list comes from CA certificates at VPN > Certificates >
CA Certificates.
Figure 258:LDAP server Distinguished Name Query tree
PKI authentication
Public Key Infrastructure (PKI) authentication utilizes a certificate authentication
library that takes a list of ‘peers’, ‘peer’ groups, and/or user groups and returns
authentication ‘successful’ or ‘denied’ notifications. Users only need a valid
certificate for successful authentication - no username or password are necessary.
For more information about certificate authentication, see the FortiGate Certificate
Management User Guide. For information about the detailed PKI configuration
settings only available through the CLI, see the FortiGate CLI Reference.
Go to User > PKI to configure PKI users.
Figure 259:User > PKI user list
Create New
User Name
Subject
Issuer
Delete icon
Edit icon
Add a new PKI user.
The name of the PKI user.
The text string that appears in the subject field of the certificate of
the authenticating user.
The CA certificate that is used to authenticate this user.
Delete this PKI user.
Edit this PKI user.
Note: The following fields in the PKI User List correspond to the noted fields in the PKI
User dialog:
User Name: Name
Subject: Subject
CA: Issuer (CA certificate)
FortiGate Version 3.0 MR5 Administration Guide
384 01-30005-0203-20070830