Skip to main content
ndumaj
Staff
Staff
February 16, 2026

Technical Tip: FortiNAC GUI shows details of new certificate recently updated but FortiNAC service still present the old certificate

  • February 16, 2026
  • 0 replies
  • 123 views
Description This article describes the procedure for resolving certificate-related issues that occur after uploading a new certificate to FortiNAC targets. Although the GUI correctly displays the newly uploaded certificate details, the FortiNAC may continue to present the previous (old) certificate for the associated target or service.
Scope FortiNAC-F.
Solution

Create a customized fixKeystorePrimaryLink script via CLI using the steps below:


FortiNAC_CLI# execute enter-shell
FortiNAC_CLI:~$ cd /home/cm/scripts

FortiNAC_CLI:~$ vi fixKeystorePrimaryLink

#/bin/bash

ln -sf /bsc/campusMgr/.keystorePrimary /bsc/campusMgr/.keystore
chown -h nac:cmdb /bsc/campusMgr/.keystore

Press the 'Esc' button.
Type :wq to save the file.

FortiNAC_CLI:/home/cm/scripts$ ll
4 -rw-r--r-- 1 admin admin 118 Feb 14 17:21 fixKeystorePrimaryLink

Perform 'chmod +x fixKeystorePrimaryLinkto give execute permission:

FortiNAC_CLI:/home/cm/scripts$ chmod +x fixKeystorePrimaryLink
FortiNAC_CLI:/home/cm/scripts$ ll
4 -rwxr-xr-x 1 admin admin 118 Feb 14 17:21 fixKeystorePrimaryLink*


Create a new scheduled job in the FortiNAC GUI to run the customized script created.
In the FortiNAC Admin GUI, go to System -> Scheduler, and create a new job:

  • Action type: System
  • Action: Custom Script
  • Command: fixKeystorePrimaryLink (the new script just created)
  • Schedule Type: Once

After, select a time a couple of minutes later than the current time.

Figure 1. Scheduler Job.Figure 1. Scheduler Job.

 

After the script execution is complete, the Scheduler Job will automatically be removed.

Figure 2. Scheduler view.Figure 2. Scheduler view.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!