Skip to main content
awasfi_FTNT
Staff
Staff
July 15, 2025

Technical Tip: FortiGate local certificate generated from FortiManager is backdated by seven days

  • July 15, 2025
  • 0 replies
  • 227 views
Description This article explains how, when generating a local certificate for the FortiGate device from FortiManager, the certificate's validity will begin seven days prior to the current date.
Scope FortiManager.
Solution

For example, create a new local certificate on FortiManager to be used on FortiGate(s).

 

cert_1.jpg

 

Generate the certificate:

 

cert_5.jpg

Install it on the device(s):

 

cert_2.jpg

 

Check the installed local certificate on FortiGate and the certificate is valid starting from 2025/07/07, whereas FortiManager's system time is 2025/07/14, which is seven days ahead of the certificate’s start date.

 

cert_4.jpg

 

FortiManager system time.

 

FMG_date.jpg

This is intentionally done to avoid synchronization issues between FortiManager and FortiGate when relying on the current system time. 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!