Troubleshooting Tip: Unable to update SSL Certificate on FortiNAC v7.6.3 or v7.6.4 in HA mode

In some deployments, there are cases in FortiNAC v7.6.3 and 7.6.4 where SSL Certificates of either or both of the nodes are not updated in actual, even though it appears updated in the GUI under System -> Certificates.
In such cases, FortiNAC presents the same old self-signed certificate that comes pre-installed. Below are some screenshots:

Certificates appear as updated in System -> Certificates:

However, FortiNAC is still presenting a self-signed certificate when the Admin UI is opened.

Also, when checking via CLI, certificates are not updated, and a self-signed certificate is presented, for example:

Solution:

To update the certificate:

1. Remove high availability configuration.
2. Update certificates on each node individually.
3. Re-create high availability.

This behavior will be addressed in FortiNAC v7.6.5.