Certificates
FortiOS leverages certificates in multiple areas, such as VPNs, administrative access, and deep packet inspection. This section contains topics about uploading certificates and provides examples of how certificates may be used to encrypt and decrypt communications, and represent the identity of the FortiGate. This sections assumes the reader has a high level understanding of the public key infrastructure (PKI) system, particularly how entities leverage trusted certificate authorities (CAs) to verify the authenticating party, and how public and private certificate keys work to secure communications.
The certificates feature is hidden by default in FortiOS. In the GUI, go to System > Feature Visibility and enable Certificates.
For additional capabilities and enhanced certificate management, please review the FortiAuthenticator Administration Guide and Cookbook.
The following topics provide information about certificates:
The following topics provide examples of how to use certificates:
- Administrative access using certificates
- Configuring certificates for SAML SSO
- Configuring FortiClient EMS
- Creating certificates with XCA
- Microsoft CA deep packet inspection
- Procuring and importing a signed SSL certificate
- Protecting an SSL server
- Site-to-site VPN with digital certificate
- SSL VPN with certificate authentication
- SSL VPN with LDAP-integrated certificate authentication
- Using the default certificate for HTTPS administrative access