You cannot delete the certificate from Fireware Web UI.Īfter the Firebox generates new SSLVPN certificates, existing WatchGuard Mobile VPN with SSL clients automatically download the new certificates the next time your users connect. You must use Firebox System Manager (FSM) to delete certificates. Reboot the Firebox to automatically generate new certificates.The three SSLVPN certificates have these common name (cn) attributes: In the list of certificates, find and delete the three SSLVPN certificates.To generate new SSLVPN certificates for a Firebox, from Firebox System Manager: When the Firebox restarts, it creates new SSLVPN certificates. To generate new SSLVPN certificates, you must delete the SSLVPN certificates from the Firebox and reboot the Firebox. If you upgraded from an earlier version, your certificates might not be compatible with the OpenVPN client.

The certificates for Mobile VPN with SSL must be created with Fireware v11.7.3 or higher.

For more information, see Manually Configure the Firebox for Mobile VPN with SSL. Make sure that Routed VPN traffic is selected in the Mobile VPN with SSL configuration.

The Firebox must be configured to route VPN traffic.

The Firebox must use Fireware v11.7.4 or higher.

Requirementsīefore you download the Mobile VPN with SSL client profile, make sure your Firebox configuration meets these requirements: In Fireware v12.3 or higher, Mobile VPN with SSL supports two-factor, challenge-response authentication for native OpenVPN clients.

Users can then import the profile into the OpenVPN app. To configure the OpenVPN app, users can download a Mobile VPN with SSL client profile from the Firebox.

For example, users can install OpenVPN Connect for Android or iOS, which is available from, the Google Play app store, or the Apple app store. Your users can make an SSL VPN connection to the Firebox with an OpenVPN client. Use Mobile VPN with SSL with an OpenVPN Client

Fortinet vpn client certificate error