To renew the built-in certificates on FortiProxy on v2.0.X, refer to the commands below: Â Fortinet_CA_SSL: Â execute certificate local generate default-ssl-ca
 Fortinet_CA_Untrusted:
execute certificate local generate default-ssl-ca-untrusted
 Renew all SSL Key Certificates:  execute certificate local generate default-ssl-key-certs
 Fortinet_SSL:  execute certificate local generate default-ssl-serv-key
 To renew the built-in certificates on FortiProxy on v7.0 and above, refer to the commands below.  Fortinet_CA_SSL:  execute vpn certificate local generate default-ssl-ca Â
 Fortinet_CA_Untrusted:  execute vpn certificate local generate default-ssl-ca-untrusted
 Renew all SSL Key Certificates:  execute vpn certificate local generate default-ssl-key-certs
 Fortinet_SSL:  execute vpn certificate local generate default-ssl-serv-key
 Fortinet_GUI_Server:  execute vpn certificate local generate default-gui-mgmt-certÂ
Note: Only the built-in certificates can be renewed using the commands above. Externally imported certificates will need to be renewed manually.
Use the command below to restart the IPS engine if the updated certificate is not visible:
diagnose test app ipsmonitor 99
| 
