FortiOS 7.6.3 and 7.6.4 are affected by a known issue where the ACME service can trigger repeated crashes of the "httpsd" process, preventing access to the FortiGate GUI. The "httpsd" process handles administrative HTTPS connections to the FortiGate. When the process crashes continuously, the GUI may become inaccessible even though CLI access through SSH or the console remains available.
The following symptoms may be observed:
The FortiGate GUI does not load or becomes inaccessible after a firmware upgrade. HTTPS connections to the administrative interface are rejected or reset. The "httpsd" process repeatedly crashes. The crash log contains "Segmentation fault" entries associated with "httpsd". Restarting the FortiGate does not permanently resolve the issue.
 First, verify whether the issue matches the known issue by executing these commands:
get system status
diagnose debug crashlog read
 Crash-log snippet to compare:
2025-06-16 11:38:18 <10313> firmware FortiGate-60F v7.6.3,build3510b3510,250415 (GA.F) (Release)
2025-06-16 11:38:18 <10313> application httpsd
2025-06-16 11:38:18 <10313> *** signal 11 (Segmentation fault) received ***
2025-06-16 11:38:18 <10313> Register dump:
 Check the ACME configuration. Execute:
show system acme
Verify whether an interface and source IP address have been configured for the ACME service.
If ACME is enabled and the symptoms match the known issue, proceed with the following workarounds.
Before making changes, create a FortiGate configuration backup.
 Execute this command in the FortiGate CLI Console to purge the ACME configuration data:
diagnose sys acme purge-all
After executing the command, verify whether the "httpsd" process becomes stable and the FortiGate GUI is accessible again.
If the issue persists, proceed with the next workaround.
Remove the ACME interface and source IP settings:
config sys acme
  unset interface
  unset source-ip
end
Removing these settings prevents the ACME service from using the previously configured interface and source IP address.
Verify whether the FortiGate GUI becomes accessible after applying the changes.
Note: Removing the ACME interface configuration interrupts automatic certificate issuance and renewal through the affected configuration.
If ACME certificates are being used for administrative access or other services, verify their expiration dates and plan the necessary changes to prevent certificate-related issues.
If the issue persists, collect the updated crash logs and the FortiGate TAC report for further investigation:
execute tac report
Related articles:
|