Installing the CA certificates

The CA certificate is used for verifying the identity of the remote FortiGate’s client certificate imported earlier.

1. On HQ, go to System > Certificates and select Import > CA Certificate.

   Set Type to File and upload the CA certificate that issued HQ’s certificate.

   

2. Go to System > Certificates and select Import > CA Certificate.

   Set Type to File and upload the CA certificate that issued Branch’s certificate.

   

3. Both CA certificates now appear in HQ’s list of External CA Certificates.
4. Repeat this procedure on Branch to import both CA certificates.