FortiAuthenticator as a CA Server

In other articles, I have covered creating CA servers on Microsoft Windows and OpenSSL, here is an article using FortiAuthenticator.  FortiAuthenticator or FAC is a versatile solution that can be used for RADIUS, Certificate Authority, 2FA, Guest Portal, BYOD portal.

Stay tuned to the monkey for additional FAC articles.  I plan on doing an 802.1x, Guest Portal, 2FA, RADIUS &  SSL VPN to name a few.

Creating the CA Certificate

Step 1 – Creating the CA Certificate 

First, lets create the CA certificate pair.

1. Go to Certificate Management
2. Then choose Certificate Authorities
3. Choose Local CAs
4. Then Create New

Step 2 – Filling out the Certificate Attributes

1. Name the Certificate
2. Make sure the Root CA certificate is selected.
3. Choose Field-by-field
4. Give it the CN (Common Name)
5. Fill in the Department
6. Fill in the Company Name
7. Fill in the City
8. Fill in the State
9. Choose the correct country.
10. Provide an email
11. Choose the lifetime for the CA certificate. (3650 days = 10 Years)
12. Choose OK.

Step 3 – Export Certificate

1. Select the square box on the left of the CA name you created in Step 2
2. Then select Export Certificate

Step 4 – Validate Correct Format

By NOT selecting the “square box” in step 3 and clicking on the certificate name, you will be able to see the details of the certificate.  What you WANT to see is the CA:TRUE

Hope this helps