Certificate settings

The <certificates></certificates> XML tags contain certificate settings. Following are the subsections:

• CRL: uses Online Certificate Status Protocol (OCSP).
• HDD
• CA certificate: base 64 encoded CA certificate.

<forticlient_configuration>

<system>

<certificates>

<crl>

<ocsp />

</crl>

<hdd />

<ca>

<certificate> <![CDATA[-----BEGIN CERTIFICATE-----
MIID8zCCAtugAwIBAgIIL8XAg5HYn7owDQYJKoZIhvcNAQELBQAwgakxCzAJBgNV ................................................................
1/LXOCM24niwVTn2pnik9mspwxygAwExE9gQPfbXaV14BrZcp5yzaorHLXKFNQmA NdVcSlvoMqsDpeKU2Ohz+MXj1GsowHor96x88wbLe0CpeJLkwgmmH5TO37ke2Awp H9idHn5MdQ==
-----END CERTIFICATE----- ]]>

</certificate>

</ca>

</certificates>

</system>

</forticlient_configuration>

The following table provides the XML tags for certificate settings, as well as the descriptions and default values where applicable.

XML tag	Description	Default value
<crl><OCSP> elements
<enabled>	Use OCSP. Boolean value: [0 | 1]
<server>	Enter the server IP address.
<port>	Enter the server port number.
<ca><certificate>	Contains a certificate in PEM format. FortiClient installs this certificate if it is embedded in the configuration.