× SSL247 joins forces with Sectigo CA - Find Out More...
Our accreditations and awards:
Cookies
0 items Total $0

Knowledge Base

  

Problem

This error message occurs:

 "There is a problem with this website's security certificate"

 

Cause

You usually receive a warning message when SSL content inspection is enabled on a FortiGate device, if the CA is not known by the browser.

When you click on "continue to this website (not recommeded)" you certificate will be accepted for this session but not for the following ones

 

Resolution

Store the Fortigate CA root in Internet Explorer to avoid this issue in future

1. You have to download the FortiGate CA from the GUI:

  • Go to System, then Certificates and Local Certificates
  • Then select Fortinet_CA_SSLProxy (applies to another certificate useful for SSL inspection) and click Download
  • And save Fortinet_CA_SSLProxy.cer ( or related CA file if another SSL certificate must be used)

 

2. You can install the root CA in the trusted root SSL of IE8

  • On IE8 window, select Tools then Internet Options, Content, Certificates and Trusted Root Certificate on Authorities
  • Choose Import  and select the cer. file you saved (Fortinet_CA_SSLProxy.cer) and keep all the other default option. Then accept the New Fortigate SSL installation
  • Check if the new root is present in the Trusted Root Certification Authorities list and if the warning message no longer occurs when browsing an HTTPS website.
Was this information Useful?
Comments

Privacy Policy