Procedure Overview

Step 1: Determine FortiNAC Certificate Targets to Secure

Step 2: Obtain a Valid SSL Certificate from a Certificate Authority (CA)

Step 3: Upload the Certificates to FortiNAC

Step 4: Activate Portal Certificates

Required when securing the Captive Portal.

Step 5: Configure Certificate Expiration Warning Alarms

Create alarms to notify when FortiNAC's SSL Certificate is approaching its expiration date.

Step 6: Apply Certificates to Secondary Server (High Availability configurations)

Option 1: Admin UI Method – Requires a failover to the Secondary Server. A maintenance window may be required.

Option 2: CLI Method – A maintenance window is not required.