FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
Jonathan_Body_FTNT
Article Id 191516

Description

This article explains how to resolve a certificate error problem when using the SSL VPN Client on a Mac to connect to a FortiGate.


Scope

All FortiOS versions.
FortiClient SSL VPN client 4.0.2082.


Solution

The following error messages may be seen when trying to connect to a FortiGate using SSL VPN Client with Mac running MacOS 10.6 (Snow Leopard):

[1080:root] Require client certificate for potvinn
[1080:root] rmt_logincheck.c:207 user[bsmith],auth_type=1 failed [insufficient credential]

The following steps may resolve this issue:

1. Install the latest FortiClient VPN SSL (forticlientsslvpn_macosx_4.0.2082.dmg).
2. Export the certificate with all chains in it (.pfx).
3. Import the certificate in the System Keychain access on the Mac. The following Apple KB article provides additional guidance:

http://docs.info.apple.com/article.html?path=Mac/10.6/en/9082.html


Contributors