How to deploy FortiPAM CA to Windows host using EMS and FortiClient

After FortiPAM installation, 2 certificates are available by default:

• Fortinet_CA_SSL:

  A CA certificate used to resign https server certificate when launching a secret with Web Proxy enabled.

  Before launching a web proxy secret, the CA certifiate must be installed on Windows.

• Fortinet_SSL:

  FortiPAM GUI certificate used for FortiPAM HTTPS GUI and ZTNA tunnel with FortiClient. By default, the web browser displays Not secure warning when you log in to the FortiPAM GUI.

This example introduces how to deploy Fortinet_CA_SSL to Windows by EMS and FortiClient automatically and how to avoid the web browser warning.

To deploy FortiPAM CA to Windows using EMS and FortiClient:

1. Deploying FortiPAM CA using EMS
2. Avoiding the web browser warning on the FortiPAM GUI
3. Downloading FortiPAM CA from the FortiPAM GUI