Certificates
The FortiIsolator allows users to use Self-signed SSL certificates for a specific server or website. Generally, self-signed certificates are very specific and often for an internal enterprise network. In this page you can import, view, and delete these certificates.
|
FortiIsolator only supports “Base-64 encoded X.509 (.CER)” format Certificates. |
Importing certificates
To import a certificate:
- Go to System > Certificates.
- Click Import in the toolbar. The Import Certificate page opens.
- Provide Certificate Name.
- Click View in the toolbar. The View Certificate Detail Information page opens.
- Click OK to return to the certificates list.
Viewing certificate details
To view a certificate's details:
- Go to System > Certificates.
- Select the certificates you need to see details about.
- Provide Certificate Name.
Deleting certificates
To delete a certificate:
- Go to System > Certificates.
- Select the certificate you need to delete.
- Click Delete in the toolbar.
- Click OK in the confirmation dialog box to delete the selected certificate.
Assign Self-signed SSL certificates to user’s profile
Self-signed SSL certificates need to assign to user’s profile in order to take effective.
To assign a certificate to user’s profile:
- Go to Policies and Profile > Profile.
- Select Isolator profile and Edit.
- On the bottom of the page, next to Certificates, select the certificate that just imported and click OK.
- Go to Policies and Profile > Default Policy, select the profile for Default Isolator Profile, and click OK.
|
|
If a Self-signed SSL certificate is a certificate chain that contains Root Certificate and Intermediate Certificates, both certificates need to be imported into FortiIsolator and selected in user’s profile. |