SSL Certificate
Certificates provide security assurance validated by a Certificate Authority (CA). Server certificates are generated based on a specific Certificate Signing Request (CSR). The CSR is a request sent from an applicant to a CA in order to apply for a digital identity certificate. When a CSR is generated, the associated private key to sign and/or encrypt connections is also generated.
By default, the FortiPresence VM is equipped with self signed certificates to use with the FortiPresence GUI and FortiPresence Connect services. However, you can replace the default self signed (with internal CA) SSL certificates with externally signed SSL certificates for your domains.
- Navigate to Admin > SSL Certificate and select the server to generate the certificate.
- In the Certificate Signing Request tab, enter the following.
- Common Name - The FQDN or IP address of the server.
- Organization - The name of your establishment or organization.
- Locality - The city or area where your organization is located.
- State or Province - The state or province of the above mentioned area.
- Optionally, you can enter the Organization Unit and the Country.
- Click Create & Download to download the CSR.
- Select Regenerate Private Key to generate a new private key. Since the new key replaces the existing one, default/current certificates stop working. Note that creating a temporary certificate automatically replaces default/current certificates.
- In the Manage Certificate tab, you can generate a temporary certificate with the existing private key and replace the default/current certificates. Download and upload the externally signed SSL certificate.