Explorer III

Question

Fortigate and ACME

Forum|Forum|2 years ago
October 18, 2023
5 replies
2907 views

Hello,

We have deployed Fortigate in Azure, we have configured fortivpn for remote access vpn. We use letsencrypt certificate for VPN. This certificate should renew automatically because we use ACME.

https://docs.fortinet.com/document/fortigate/7.0.0/new-features/822087/acme-certificate-support#:~:text=The%20ACME%20interface%20can%20later,to%20the%20Local%20Certificate%20list.

For some reasons I would like to change ACME interface on my fortigate, but I cant:

how I can change interface?

FortiGate

DanNSits

Explorer III

Did you already try to change it via CLI?

config system acme

mle2802

Staff

Hi @1mm,

Can you try the following command instead

config system acme     set interface port1 end

Regards,
Minh

1mmAuthor

Explorer III

Hello, will try and let you know. Thanks.

hbac

Staff

Hi @1mm,

Please make sure that 'Redirect HTTP to SSL-VPN' is not enabled under SSL-VPN settings and make sure port 443 and 80 are not being used for GUI access or VIPs. Refer document for more information on ACME : https://docs.fortinet.com/document/fortigate/7.2.4/administration-guide/822087/automatically-provision-a-certificate

Regards,

1mmAuthor

Explorer III

Hello @hbac, thanks for your reply.

There are no any VIPs, just SSL vpn running on 443 port.

Sign up

Login with SSO

Login to the community

Login with SSO