An administrator has configured a FortiGate unit so that end users must authenticate against the firewall using digital certificates before browsing the Internet. What must the user have for a success

While LDAP can be used to manage user information, it is not a mandatory component for digital certificate authentication itself, as the certificate serves as the primary credential.

For certificate-based authentication, the FortiGate unit can validate a digital certificate issued by any Certificate Authority (CA) that the FortiGate has been configured to trust.

Digital certificate authentication typically relies on the certificate itself for identity verification, often replacing the need for a separate username and password.

Digital certificates for authentication can be issued by any trusted Certificate Authority, not exclusively by the FortiGate unit itself.

After successful certificate validation, the user must be a member of a configured firewall user group for the FortiGate to apply appropriate security policies and grant access.