Skip to main content
moseiz
moseiz
Visitor III
November 17, 2024
Question

cannot import certificate in FortiAnalyzer

  • November 17, 2024
  • 1 reply
  • 1767 views

my FortiAnalyzer  https certicate expired. got a wildcard ssl for my domain from sectigo. when i import it in analyzer it fails with its already imported but i cannot see it on the list of certificates. my analyzer vm was on version 7.4.5, updated to 7.6.1 and its the same behaviour

1 reply

abelio
SuperUser
abelio
SuperUser
November 18, 2024

Hello moseiz

Let's assume that you didn't generate a CSR file from your FAZ directly and gave to Sectigo's CA to sign it. If so, you have your private key somewhere safe.

The easiest way to import a certificate signed by an external CA is importing it as a PFX container (that includes keys, and your and CA certificates) .
Go to Import Local Certificate > Type PKCS#12 Certificate , add your pre-built pfx 
You' ll also need import Sectigo CA chain certificate if needed.


(*) Sectigo and other comercial CA's provides just a .pem certificate and its own CA certificate (or certificate chain used to sign your certificate); in order to build PFX container , you can use any online tool or  better , use openssl commands in your station

 

 

    Terms & ConditionsAccessibility statement