Certificates

FortiProxy uses three types of certificates:

• Local: Local certificates are issued for a specific server or web site. They are usually very specific, and often for an internal enterprise network.
• CA: External CA certificates are similar to local certificates, but apply to a broader range of addresses or to whole company. A CA certificate would be issued for an entire web domain, instead of just a single web page.
• Remote: Remote certificates are public certificates without private keys.

The FortiProxy unit generates a certificate request based on the information entered to identify the FortiProxy unit. After generating a certificate request, it can be downloaded and then forward to a CA.

The certificate page also enables you to export certificates for authentication, importing, and viewing.

The certificates feature is hidden by default in FortiProxy. In the GUI, go to System > Feature Visibility and enable Certificates.

The following topics provide information about certificates:

• Certificate list
• Certificate Signing Requests
• Import a local certificate
• Import a CA certificate
• Upload a remote certificate
• Import a CRL
• View certificate details
• Default certificate authority