Adding a certificate to a Fortigate Captive portal to prevent browser errors

Enable the Certificates feature

If you are unable to see Certificates under the System menu, enable it here:

Go to System -> Feature Visibility

Enable it:

Install your certificate

Go to System -> Certificates and choose Local Certificate:

Upload your certificate file:

NOTE: You can use Fydelia's wildcard certificate if needed, which will provide SSL for the domain: "login.fydelia.com". Contact us for more information.

Once installed, open User & Authentication -> Authentication Settings

Select your certificate:

DNS Settings

You can either set up the internal DNS Database with Fortigate, or you can use the pre-defined domain fortigate-portal1.fydelia.com that points to the IP/Netmask in your guest SSID settings:

Using domain instead of an IP

Since we are doing all of this to ensure that Fydelia can post customer data securely back to your Fortigate device over an SSL connection, this final step is vital to ensure that your Fortigate firewall will use the above domain and not the IP. To do this:

Open the command line console:

Enter the commands:

config firewall auth-portal
    set portal-addr "fortigate-portal1.fydelia.com"
end

You're all set! You will now be able to submit the Fydelia login form with no browser errors.