Skip to main content
gsharma
Staff
Staff
October 18, 2024

Technical Tip: How to know the module(s) which is still using the old certificate

  • October 18, 2024
  • 0 replies
  • 215 views
Description This article describes how to check which module is still using old certificate.
Scope FortiWeb, FortiWeb-VM.
Solution

There are scenarios where the Certificate needs to be deleted, however, deletion cannot be executed because of some other module using that Certificate.

 

certchange.JPG

 

There is no option to check on the GUI on which exact module this Certificate is being used. So if there are hundreds of policies and modules then it is time-consuming to go through each Policy.

 

There is a workaround to check this. For that below steps can be performed:

  • Backup the entire config file.

 

backupconfig.JPG

 

  •  After downloading, extract the file from the ZIP file and open the config file on Notepad++.
  •  After opening file on Notepad++, search the Certificate name by Find (ctrl+f).
  •  Select 'Find All in Current Document'.

 

certsave-1.png

 

  • After selecting it, it will list down all the lines of config where this certificate is being used. From there user can list which modules are using this Certificate.

Related document:
Local certificates - FortiWeb 7.6.4 administration guide

Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!