Fortinet 5.0 Patch 6 Grouping trusted CAs certificates

Fortinet 282 FortiWeb 5.0 Patch 6 Administration Guide

4. To select a certificate, either:

•Enable SCEP and in the field to the right of it, type the URL of the applicable Simple

Certificate Enrollment Protocol server. (SCEP allows routers and other intermediary

network devices to obtain certificates.)

To specify a specific CA, type an identifier in the field below the URL.

•Enable Local PC and browse to find a certificate file.

5. Click OK.

6. To use the CA certificate when validating clients’ personal certificates, select it in a CA

certificate group, which is then selected in a certificate verification rule (see “Grouping

trusted CAs’ certificates” on page 282).

7. To test your configuration, cause your appliance to initiate a secure connection to an LDAPS

server (see “To configure an administrator remote authentication query group” on page 218).

If the query fails, verify that your CA is the same one that signed the LDAP server’s

certificate, and that its certificate’s extensions indicate that the certificate can be used to

sign other certificates. Verify that both the appliance and LDAP server support the same

cipher suites and SSL/TLS protocols. Also verify that your routers and firewalls are

configured to allow the connection.