Installing the CA certificates
The CA certificate is used for verifying the identity of the remote FortiGate’s client certificate imported earlier.
- On HQ, go to System > Certificates and select Import > CA Certificate.
Set Type to File and upload the CA certificate that issued HQ’s certificate.
- Go to System > Certificates and select Import > CA Certificate.
Set Type to File and upload the CA certificate that issued Branch’s certificate.
- Both CA certificates now appear in HQ’s list of External CA Certificates.
- Repeat this procedure on Branch to import both CA certificates.