FortiAuthenticator - Certificates for Firewalls

Notes needing a home:

I followed this guide to deploy the VM onto Proxmox: https://docs.fortinet.com/document/fortipam/1.8.0/administration-guide/111844/installation-on-proxmox

FortiAuthenticator Initial Setup

The first time I logged into FortiAuthenticator I configured the following via Dashboard -> Status:

• Device FQDN

• Host Name 

• Time Zone

Root CA setup

• Enable HTTP, then enable SCEP and CRL

• Create a root Certification Authority (CA) UPDATE THIS SCREENSHOT

Export the certificate from the new root CA

SCEP Configuration

• Enable SCEP globally REVIEW 

Configure enrollment requests

FortiManager - Certificate template and CA cert import

Open the Certificate provisiong template section and Create New. If you can't see Certificate, enable it under Feature Visibility (Feature Visibility is shown on the right in my screenshot below)..

Fill out the settings. 

Double check your CA Identifier in the FortiManager template (shown below - mine is shaunlabrootca) exactly matches your "Certificate ID" in FortiAuthenticator under Certificate Management -> Certificate Authorities -> Local CAs -> under the Certificate ID column.

FortiManager - Import Root CA Certificate

Go to Feature Visibility and enable Dynamic Local Certificate (for viewing only no config), as well as CA Certificates (needed to import the root cert).

Go to Import:

Import the certificate downloaded earlier from FortiAuthenticator:

SECTION NEEDS A NAME

At this point I am trying to run the FMG install wizard