Fortinet Fortigate-5000 series - Importing Remote (OCSP) Certificates; CA Certificates

VPN Certificates CA Certificates
FortiGate Version 3.0 MR4 Administration Guide
01-30004-0203-20070102 315
Importing Remote (OCSP) certificates
To import a Remote (OCSP) certificate, go to VPN > Certificates > Remote and
select Import.
Figure 195:Upload Remote Certificate
The system assigns a unique name to each Remote (OCSP) certificate. The
names are numbered consecutively (REMOTE_Cert_1, REMOTE_Cert_2,
REMOTE_Cert_3, and so on).
CA Certificates
When you apply for a signed personal (administrative) or group certificate to
install on remote clients, you must obtain the corresponding root certificate and
CRL from the issuing CA.
When you receive the signed personal or group certificate, install the signed
certificate on the remote client(s) according to the browser documentation. Install
the corresponding root certificate and CRL from the issuing CA on the FortiGate
unit.
Installed CA certificates are displayed in the CA Certificates list. You cannot
delete the Fortinet_CA certificate. To view installed CA root certificates or import a
CA root certificate, go to VPN > Certificates > CA Certificates. To view root
certificate details, select the View Certificate Detail icon in the row that
corresponds to the certificate.
Import Import a public OCSP certificate. See “Importing CA certificates” on
page 316.
Name The names of existing Remote (OCSP) certificates. The FortiGate unit
assigns unique names (REMOTE_Cert_1, REMOTE_Cert_2,
REMOTE_Cert_3, and so on) to the Remote (OCSP) certificates when
they are imported.
Subject Information about the Remote (OCSP) certificate.
Delete icon Delete a Remote (OCSP) certificate from the FortiGate configuration.
View Certificate
Detail icon
Display certificate details.
Download icon Save a copy of the Remote (OCSP) certificate to a local computer.
Local PC Use a local administrator’s PC to upload a public certificate. Enter
the location, or browse to the location on the management
computer where the certificate has been saved, select the
certificate, and then select OK.