VPN Certificates Local Certificates
FortiGate Version 3.0 MR4 Administration Guide
01-30004-0203-20070102 313
Importing a signed server certificate
Your CA will provide you with a signed server certificate to install on the FortiGate
unit. When you receive the signed certificate from the CA, save the certificate on a
computer that has management access to the FortiGate unit.
To install the signed server certificate, go to VPN > Certificates > Local
Certificates and select Import. Install the signed certificate through the Upload
Local Certificate dialog box at the top of the page. The certificate file can be in
either PEM or DER format. The other dialog boxes are for importing previously
exported certificates and private keys.
Figure 191:Upload Local Certificate
Importing an exported server certificate and private key
The server certificate and private key to import must have been exported
previously as a single PKCS12 file through the execute vpn certificate
key export CLI command. The file is associated with a password, which you
will need to know in order to import the file. Before you begin, save a copy of the
file on a computer that has management access to the FortiGate unit. For more
information, see the FortiGate Certificate Management User Guide.
To import the PKCS12 file, go to VPN > Certificates > Local Certificates and
select Import.
Figure 192:Upload PKCS12 Certificate
Certificate File Enter the full path to and file name of the signed server certificate.
Browse Alternatively, browse to the location on the management computer
where the certificate has been saved, select the certificate, and
then select OK.
Certificate with key
file
Enter the full path to and file name of the previously exported
PKCS12 file.
Browse Alternatively, browse to the location on the management computer
where the PKCS12 file has been saved, select the file, and then
select OK.
Password Type the password needed to upload the PKCS12 file.
To Next Page
Loading...
