Open topic with navigation

Certificates

Each SSL certificate installed on FortiADC includes a certificate and its associated private key.

In SSL off loading, FortiADC terminates the SSL connection with the client, decrypts the client request using a certificate and key, sends the request on to the appropriate server, and encrypts the server response before forwarding it on to the client.

Certificates are uploaded to FortiADC and then associated with one or more clusters. Two types of certificates may be used to authenticate HTTPS cluster connections:

• A cluster certificate is required to authenticate the cluster to the client and to decrypt the client request (these are also called server certificates). For cluster certificates, both a certificate file and a private key file must be uploaded to FortiADC.
• A cluster may also be configured to ask for, or require, a client certificate -- a certificate used to authenticate the client to FortiADC. For client certificates, only a certificate file is uploaded to FortiADC (no keyfile is used).

Installing a Certificate

To install an SSL certificate using the GUI:

1. Click on the host name at the top of the left navigational pane and then click on Global Certificates to display the following.

2. Click on Add Certificate to display the Add Certificate dialogue form as shown below.

3. Click on Choose File to select a locally stored CertificateFile. Repeat the same for adding a locally stored Key File.
4. Click on Commit to save the upload the new Certificate File and Key File.

To install an SSL Certificate using the CLI:

Refer to Certificate Commands for Certificate commands.