Secure connections and certificates
Page 106
FortiRecorder 2.4.2 Administration Guide
2.
Append the certificate of each intermediary CA in order from the intermediary CA who
signed the local certificate to the intermediary CA whose certificate was signed directly by a
trusted root CA.
For example, an appliance’s certificate that includes a signing chain might use the following
structure:
-----BEGIN CERTIFICATE-----
<server certificate>
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
<certificate of intermediate CA 1, who signed the server certificate>
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
<certificate of intermediate CA 2, who signed the certificate of
intermediate CA 1 and whose certificate was signed by a trusted
root CA>
-----END CERTIFICATE-----
3.
Save the certificate.
To upload a certificate
1.
Go to
System > Certificate > Local Certificate
.
2.
Click
Import
.
A dialog appears.
3.
Configure these settings:
Setting name
Description
Type
Select the type of certificate file to upload, either:
•
Local Certificate
— An unencrypted certificate in PEM format.
•
Certificate
— An unencrypted certificate in PEM format. The
private key is in a separate file.
•
PKCS12 Certificate
— A PKCS #12 encrypted certificate with
private key.
Other available settings vary depending on this selection.
Certificate file
Click
Browse
to locate the certificate file that you want to upload.
This option is available only if
Certificate
or
Local Certificate
.
Key file
Click
Browse
to locate the private key file that you want to upload with
the certificate.
This option is available only if
Certificate
.
Certificate with key
file
Click
Browse
to locate the PKCS #12 certificate-with-key file that you
want to upload.
This option is available only if
PKCS12 Certificate
.
Password
Type the password that was used to encrypt the file, enabling the
FortiRecorder appliance to decrypt and install the certificate.
This option is available only if
Certificate
or
PKCS12
Certificate
.
