Category Archives: Certificate

10 January, 2020

Configuring Microsoft CA Services

Deploy Microsoft CA Services using Server Manager. Learn to install Active Directory Certificate Services and configure an Enterprise Root CA for secure certificate management.

7 January, 2020

What Diffie-Hellman (DH) Group Should I Use

Learn Diffie-Hellman group selection for secure VPNs. Choose the right DH group for AES 128 or 256-bit keys and avoid weak groups like 24.

26 November, 2019

FortiAuthenticator as a CA Server

Configure FortiAuthenticator CA server to create, export, and validate root certificates. Follow this step-by-step guide to set up your local CA for enterprise security.

15 May, 2019

UPDATED – Certificate Pinning you SSL VPN with Microsoft CA and Fortigate Forticlient Using ‘user’ certificates

Configure FortiGate SSL VPN certificate pinning using Microsoft CA and OCSP. Secure access with user certificates and FortiClient for trusted devices.

14 April, 2019

Disabling Weak Ciphers on Fortigate Firewalls

Learn how to disable weak ciphers on FortiGate SSL VPN using the banned-cipher command. Fix Qualys SSL test scores and enforce strong crypto settings.

7 April, 2019

Using OpenSSL for your SSL Decryption and distributing the cert via GPO

Generate an SSL decryption certificate with OpenSSL for FortiGate. Import the cert into FortiGate and distribute it to endpoints via GPO for deep inspection.

11 February, 2019

Site-to-Site VPN Between Fortigates using Certificates instead of PSK

Configure Fortigate site-to-site VPN certificates for IPsec authentication. Learn to generate CSRs, sign them with OpenSSL, and set up PKI users for secure tunnel...

11 February, 2019

Using Certificate to Login into a Fortigate

Configure Fortigate SSH certificate login using SecureCRT. Generate RSA keys, export OpenSSH format, and map the public key to a Fortigate user for secure...

3 January, 2019

Using OpenSSL to Provision Wildcard Certificate

Generate a wildcard certificate using OpenSSL and import it into FortiGate. Learn to create CSRs, handle private keys, and install certs for lab testing.