SSL Certificates

The SSL Certificates page allows you to install and manage certificates. Also, you can generate a Certificate Signing Request (CSR).

Notes:

• If the FortiPresence VM is inaccessible using Google Chrome, to generate a new self-signed certificate, see Help.

• You can upload certificates only in the .pem format. If the certificate is in another format, then convert it into the .pem format to upload.

• To generate a certificate, it is mandatory to provide Subject Alternative Names (SAN).

Installing certificate

Perform the following steps to install a certificate.

1. Navigate to Configuration > SSL Certificates.

2. Click Install Certificates.

3. Browse and upload the Full certification chain and Private Key in .pem format.

4. Click OK.

Generating CSR

Server certificates are generated based on a specific CSR. The CSR is a request sent from an applicant to a CA in order to apply for a digital identity certificate. When a CSR is generated, the associated private key to sign and/or encrypt connections is also generated. Click on the Generate CSR button and fill in the required information to generate a CSR for your certificate.

In the Generate CSR window, enter the following.

• Certificate Name - A name for the certificate.
• Common Name - The FQDN or IP address of the server.
• Organization - The name of your establishment or organization.
• Locality - The city or area where your organization is located.
• State or Province - The state or province of the above mentioned area.
• Key Size - Either 2048 or 4096.
• Subject Alternative Name (SAN) - Valid SAN values for FortiPresence VM include presence.<DOMAIN_NAME>, connect.<DOMAIN_NAME>, and presenceapi.<DOMAIN_NAME>, where <DOMAIN_NAME> is your preferred domain.
• Optionally, you can enter the Organization Unit and the Country.
• Click OK.

Note: Refresh the browser to view the installed license.