question

Alexander McMillen avatar image
2 Likes"
Alexander McMillen asked

Fabric Connector for EMS Cloud returns "Failed to verify the certificate for server"

When attempting to connect an on-premise FortiGate to EMS Cloud, it returns this error:

image008.png

Failed to verify the certificate for server "FortiSASE"

The server certificate cannot be authenticated with installed CA certificates. Please install its CA certificates on this FortiGate.

FortiSASEFortiClient EMS
image008.png (67.0 KiB)
10 |600
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

2 Answers

·
Alexander McMillen avatar image
3 Likes"
Alexander McMillen answered

The CA certificate used for EMS Cloud communication is included as part of FortiOS certificates, and should be valid on a FortiGate with a valid licensing entitlement.

This error is the result of an upstream Man-in-the-Middle (MiTM) between your FortiGate and EMS Cloud. Confirm that you don't have an upstream device returning an invalid/self-signed CA certificate when attempting to connect. For example, an upstream FortiGate with DPI configured.

10 |600
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

networksupport avatar image
0 Likes"
networksupport answered

we are getting same error in On premise EMS and FW connection on same segment.

· 1
10 |600
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Alexander McMillen avatar image Alexander McMillen commented ·
This FAQ is specific to FortiSASE with the EMS Cloud connector.
0 Likes 0 ·

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Welcome to FortiAnswers

FortiAnswers is the space dedicated to FortiSASE and FortiOS questions and suggestions.

  • Please review the Community guidelines
  • If you are a moderator, please refer to the Moderation guidelines
  • If something in the above guidelines is unclear, please post your question to the Community Feedback space or the Moderators' space