Pushing certificates for VPN authentication to FortiClient (Android)

You can push certificates for VPN authentication from Intune to FortiClient (Android). FortiClient (Android) 7.2.1 and later versions list these certificates in the certificate selection dialog.

To push a certificate for VPN authentication to FortiClient (Android):

1. In Workspace ONE, create a new profile by going to Resources > Profiles & Baselines > Profiles > Add > Add Profile.

   

2. Select Android.
3. Add a Credentials profile.
4. From the Credential Source dropdown list, select Upload.
5. Upload your user certificate.
6. In the Certificate Password field, configure the desired password.
7. Click Attach Certificate.

   

8. Assign the profile to the desired users/groups, then save.
9. After the device enrolls with Workspace ONE, the certificate is installed on the device. When selecting a certificate for VPN authentication, select Keychain for the source. FortiClient (Android) lists the pushed certificate in the selection dialog.