Certificates
FortiOS leverages certificates in multiple areas, such as VPNs, administrative access, and deep packet inspection. This section contains topics about uploading certificates and provides examples of how certificates may be used to encrypt and decrypt communications, and represent the identity of the FortiGate. This sections assumes the reader has a high level understanding of the public key infrastructure (PKI) system, particularly how entities leverage trusted certificate authorities (CAs) to verify the authenticating party, and how public and private certificate keys work to secure communications.
The certificates feature is hidden by default in FortiOS. In the GUI, go to System > Feature Visibility and enable Certificates.
The following topics provide an overview of how to add certificates to the FortiGate:
- Uploading a certificate using the GUI
- Uploading a certificate using the CLI
- Uploading a certificate using an API
The following topics provide examples of how to use certificates:
See Also
- ACME certificate support
- Administrative access using certificates
- Configuring certificates for SAML SSO
- Configuring FortiClient EMS
- Creating certificates with XCA
- Microsoft CA deep packet inspection
- Procuring and importing a signed SSL certificate
- Protecting an SSL server
- Site-to-site VPN with digital certificate
- SSL VPN with certificate authentication
- SSL VPN with LDAP-integrated certificate authentication