Skip to main content
ebilcari
Staff
Staff
March 12, 2026

Troubleshooting Tip: Revoked certificate prevent Admin UI access

  • March 12, 2026
  • 0 replies
  • 131 views
Description This article describes how to regain admin access to the Admin UI after the certificate has been revoked.
Scope FortiNAC.
Solution

Most browsers will refuse to open the Admin UI page if the web service certificate has been revoked. To resolve this issue, it is required to reset the web service certificate to a self‑signed certificate and then upload the new valid certificate through Admin UI.

 

  1. Delete the revoked certificate:

 

keytool -delete -alias tomcat -keystore /bsc/campusMgr/.keystore -storepass ^8Bradford%23

  1. Generate a new certificate:

 

keytool -genkey -alias tomcat -keyalg RSA -keysize 2048 -validity 3650 -dname 'CN=bradfordnetworks.com,OU=Bradford Networks,O=bni,L=Concord,ST=NH,C=US' -keypass ^8Bradford%23 -keystore /bsc/campusMgr/.keystore -storepass ^8Bradford%23

  1. After login, upload the new certificate from Admin UI in System -> Certificate Management -> Admin UI. After the service is restarted, the new certificate should be applied. The same certificate can also be copied to the Persistent Agent and the Portal service.

     

 

Useful CLI commands:

 

adminguitool SHOW

adminguitool STATUS

adminguitool RESTART

 

Related articles:

Technical Tip: Correctly upload a certificate and its trust chain in the Captive Portal

Technical Tip: How to create a certificate request and apply it to a service