Lesson 7 of 14
Not started
Certificate Operations
Use X.509 certificates for admin access, VPN, and SSL inspection; distinguish certificate vs deep inspection; and troubleshoot trust and warning issues.
FortiGate uses X.509 certificates for HTTPS admin access, SSL/IPsec VPN authentication, and SSL inspection. It ships with factory certificates (e.g., Fortinet_CA_SSL) and can import CA certs, local server certs, and act as a subordinate CA that signs on-the-fly certificates during deep inspection.
Key building blocks: the CA certificate (trust anchor), the local certificate (identity + private key), the CRL/OCSP for revocation checking, and certificate verification in VPN peer authentication.
What is the role of a CA certificate on the FortiGate?