When attempting to access my Fortinet firewall by entering its address in the web page's URL, I encounter a warning. How can I authorize its address or, perhaps, its SSL certificate to prevent the display of this warning page?
Best regards,
2 Answers
This article should cover the basics of how and why you would want to obtain and install an SSL certificate on your Fortinet Fortigate firewall:
You will need to purchase an SSL certificate from a trusted certificate authority.
There are additional details on this page: https://docs.fortinet.com/document/fortigate/7.0.9/administration-guide/825073/procuring-and-importing-a-signed-ssl-certificate
-
1"You will need to purchase an SSL certificate from a trusted certificate authority." OR you can get one for free: letsencrypt.org Commented Nov 30, 2023 at 17:12
-
1... OR you can use your own CA to generate one or sign a CSR from the Fortigate.– Zac67 ♦Commented Nov 30, 2023 at 17:34
-
Nice! I had no idea they added Let's Encrypt support on FortiOS. That is very helpful. blogs.iuvotech.com/… Commented Dec 1, 2023 at 14:01
-
Yes, I have created a certificate from Active Directory, and it was signed by Fortinet. However, I am still encountering the same problem.– Asma BCommented Dec 3, 2023 at 9:34
-
Please note that I am attempting to access the Fortinet web page from an internal, not a public address– Asma BCommented Dec 3, 2023 at 10:54
You need to install a signed certificate on the Fortigate from a trusted certificate authority (CA), either public, or private and with its root certificate installed in your trust store.
A self-signed certificate from the Fortigate itself can only be used when the user hits Advanced → Accept the risk and continue (in Firefox).
If you use the certificate for a captive portal you'll need to obtain a public CA certificate, either commercial or by Let's Encrypt.
-
Thanks for your answer , How i can install a signed certificate on the Fortigate from a trusted certificate authority (CA)?– Asma BCommented Nov 30, 2023 at 13:11
-
Either you obtain one from a public CA or generate one on your CA server, import it on the Fortigate, and configure the web GUI to use it.– Zac67 ♦Commented Nov 30, 2023 at 17:31
-
Yes, if your organization already has their own CA and uses/trusts it on your managed devices then you can simply create your own trusted certificates and install them on the Fortigate. If you do not already run your own CA then you probably want to buy a certificate from a publicly trusted CA or use Let's Encrypt for a free one. Commented Dec 1, 2023 at 14:03
-
Yes, I have created a certificate from Active Directory, and it was signed by Fortinet. However, I am still encountering the same problem.– Asma BCommented Dec 3, 2023 at 9:28