Problem
This error message occurs:
"There is a problem with this website's security certificate"
Cause
You usually receive a warning message when SSL content inspection is enabled on a FortiGate device, if the CA is not known by the browser.
When you click on "continue to this website (not recommeded)" you certificate will be accepted for this session but not for the following ones
Resolution
Store the Fortigate CA root in Internet Explorer to avoid this issue in future
1. You have to download the FortiGate CA from the GUI:
- Go to System, then Certificates and Local Certificates
- Then select Fortinet_CA_SSLProxy (applies to another certificate useful for SSL inspection) and click Download
- And save Fortinet_CA_SSLProxy.cer ( or related CA file if another SSL certificate must be used)
2. You can install the root CA in the trusted root SSL of IE8
- On IE8 window, select Tools then Internet Options, Content, Certificates and Trusted Root Certificate on Authorities
- Choose Import and select the cer. file you saved (Fortinet_CA_SSLProxy.cer) and keep all the other default option. Then accept the New Fortigate SSL installation
- Check if the new root is present in the Trusted Root Certification Authorities list and if the warning message no longer occurs when browsing an HTTPS website.