Skip to main content
Yngve0
New Member
February 26, 2010
Question

Exporting certificate and private key

  • February 26, 2010
  • 2 replies
  • 3605 views
InFortiGateâ„¢ Certificate Management User Guide Version 4.0 it say:
Connect to the FortiGate unit through the CLI.  Note: As an alternative, you can back up and restore the entire FortiGate configuration  through the System > Maintenance page of the web-based manager. The backup file is  created in a FortiGate-proprietary format. For more information, see the “System  Maintenance” chapter of the FortiGate Administration Guide.  Using certificates to verify identity Backing up and restoring local certificates  FortiGateâ„¢ Certificate Management User Guide Version 4.0  01-30005-0182-20071005 17  2 Type the following command:  execute vpn certificate key export <cert_name> <exp_filename>  <tftp_ip> <password>  where:  • <cert_name> is the name of the server certificate; typing ? displays a list of  installed server certificates.  • <exp_filename> is a name for the output file.  • <tftp_ip> is the IP address assigned to the TFTP server host interface.  • <password> is a password that will need to be entered later to import the  PKCS12 file.
Unfortunately; " key" is aloowed syntax on my box (fg200@v4.0.3,build0106,090616) with vdom activated, only accepted syntax is:
 fortigate (global) # execute vpn certificate  ca        ca  crl       crl  local     local  remote    remote  
How to export certicate with private key?

    2 replies

    abelio
    SuperUser
    SuperUser
    February 26, 2010
    humm.. it seems a typo in the doc try:
      exec vpn certificate local export tftp <certificate name>  <exported_certificate.name> <IP_TFTP_server>  
    Yngve0
    Yngve0Author
    New Member
    March 2, 2010
    humm.. it seems a typo in the doc try: exec vpn certificate local export tftp <certificate name> <exported_certificate.name> <IP_TFTP_server>
    Unfortunately, this command only export the certificate without the key.