Fortinet black logo

Administration Guide

Certificates

Certificates

The FortiIsolator allows users to use Self-signed SSL certificates for a specific server or website. Generally, self-signed certificates are very specific and often for an internal enterprise network. In this page you can import, view, and delete these certificates.

Note

FortiIsolator only supports “Base-64 encoded X.509 (.CER)” format Certificates.

Importing certificates

To import a certificate:

  1. Go to System > Certificates.
  2. Click Import in the toolbar. The Import Certificate page opens.
  3. Provide Certificate Name.
  4. Click View in the toolbar. The View Certificate Detail Information page opens.
  5. Click OK to return to the certificates list.
Viewing certificate details

To view a certificate's details:

  1. Go to System > Certificates.
  2. Select the certificates you need to see details about.
  3. Provide Certificate Name.
Deleting certificates

To delete a certificate:

  1. Go to System > Certificates.
  2. Select the certificate you need to delete.
  3. Click Delete in the toolbar.
  4. Click OK in the confirmation dialog box to delete the selected certificate.
Assign Self-signed SSL certificates to user’s profile

Self-signed SSL certificates need to assign to user’s profile in order to take effective.

To assign a certificate to user’s profile:

  1. Go to Policies and Profile > Profile.
  2. Select Isolator profile and Edit.
  3. On the bottom of the page, next to Certificates, select the certificate that just imported and click OK.
  4. Go to Policies and Profile > Default Policy, select the profile for Default Isolator Profile, and click OK.
Note

If a Self-signed SSL certificate is a certificate chain that contains Root Certificate and Intermediate Certificates, both certificates need to be imported into FortiIsolator and selected in user’s profile.

Certificates

The FortiIsolator allows users to use Self-signed SSL certificates for a specific server or website. Generally, self-signed certificates are very specific and often for an internal enterprise network. In this page you can import, view, and delete these certificates.

Note

FortiIsolator only supports “Base-64 encoded X.509 (.CER)” format Certificates.

Importing certificates

To import a certificate:

  1. Go to System > Certificates.
  2. Click Import in the toolbar. The Import Certificate page opens.
  3. Provide Certificate Name.
  4. Click View in the toolbar. The View Certificate Detail Information page opens.
  5. Click OK to return to the certificates list.
Viewing certificate details

To view a certificate's details:

  1. Go to System > Certificates.
  2. Select the certificates you need to see details about.
  3. Provide Certificate Name.
Deleting certificates

To delete a certificate:

  1. Go to System > Certificates.
  2. Select the certificate you need to delete.
  3. Click Delete in the toolbar.
  4. Click OK in the confirmation dialog box to delete the selected certificate.
Assign Self-signed SSL certificates to user’s profile

Self-signed SSL certificates need to assign to user’s profile in order to take effective.

To assign a certificate to user’s profile:

  1. Go to Policies and Profile > Profile.
  2. Select Isolator profile and Edit.
  3. On the bottom of the page, next to Certificates, select the certificate that just imported and click OK.
  4. Go to Policies and Profile > Default Policy, select the profile for Default Isolator Profile, and click OK.
Note

If a Self-signed SSL certificate is a certificate chain that contains Root Certificate and Intermediate Certificates, both certificates need to be imported into FortiIsolator and selected in user’s profile.