Remote Certificates System Certificates
FortiGate Version 4.0 MR1 Administration Guide
306 01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
Importing separate server certificate and private key files
You need to use the Upload Certificate dialog box to import a server certificate and the
associated private key file when the server certificate request and private key were not
generated by the FortiGate unit. The two files to import must be available on the
management computer.
Figure 155: Upload Certificate
Remote Certificates
For dynamic certificate revocation, you need to use an Online Certificate Status Protocol
(OCSP) server. Remote certificates are public certificates without a private key. The
OCSP is configured in the CLI only. For more information, see the FortiGate CLI
Reference.
Installed Remote (OCSP) certificates are displayed in the Remote Certificates list.
To view installed Remote (OCSP) certificates or import a Remote (OCSP) certificate, go to
System > Certificates > Remote. To view certificate details, select the View Certificate
Detail icon in the row that corresponds to the certificate.
Browse Alternatively, browse to the location on the management computer where the
PKCS12 file has been saved, select the file, and then select OK.
Password Type the password needed to upload the PKCS12 file.
Certificate file Enter the full path to and file name of the previously exported certificate file.
Browse Alternatively, browse to the location of the previously exported certificate file,
select the file, and then select OK.
Key file Enter the full path to and file name of the previously exported key file.
Browse Alternatively, browse to the location of the previously exported key file, select the
file, and then select OK.
Password If a password is required to upload and open the files, type the password.
Note: The certificate file must not use 40-bit RC2-CBC encryption.
Note: There is one OCSP per VDOM.
To Next Page
Loading...
Need help?
General