Certificates

There are three types of certificates that FortiProxy units use:

• Local certificates—Local certificates are issued for a specific server or web site. Generally they are very specific and often for an internal enterprise network.
• CA certificates—External CA certificates are similar to local certificates, except they apply to a broader range of addresses or to whole company. A CA certificate would be issued for an entire web domain, instead of just a single web page. External CA certificates can be deleted, downloaded, and their details can be viewed, in the same way as local certificates.
• Remote certificates—These remote certificates are public certificates without private keys. They can be deleted, imported, and downloaded, and their details can be viewed in the same way as local certificates.

The FortiProxy unit generates a certificate request based on the information you entered to identify the FortiProxy unit. After you generate a certificate request, you can download the request to a computer that has management access to the FortiProxy unit and then forward the request to a CA.

The certificate window also enables you to export certificates for authentication, importing, and viewing.

This section describes the following:

• Certificate list
• Certificate Signing Requests
• Import a local certificate
• Import a CA certificate
• Upload a remote certificate
• Import a CRL
• View certificate details
• Default certificate authority