Skip to main content
EasyDoesIT
Explorer II
May 1, 2025
Solved

Generating CSR fails - message: etc/cert/local/root_"certname".key: Read-only file system"

  • May 1, 2025
  • 2 replies
  • 648 views

I am trying to generate a CSR on the Fortigate and getting the message "etc/cert/local/root_"certname".key: Read-only file system".

I have full super-admin permissions on the Fortigate. Has anyone seen this before?

Best answer by AEK

When a filesystem is in read-only while it shouldn't, that usually mean the FS is corrupted and the kernel mounted it in RO mode to protect it.

Try enable auto FS check and reboot the FG.

Under System > Settings:

fschk.png

2 replies

AEK
SuperUser
AEKAnswer
SuperUser
May 1, 2025

When a filesystem is in read-only while it shouldn't, that usually mean the FS is corrupted and the kernel mounted it in RO mode to protect it.

Try enable auto FS check and reboot the FG.

Under System > Settings:

fschk.png

AEK
EasyDoesIT
Explorer II
May 5, 2025

The customer rebooted the Fortigate and I was able to update the certificate. I don't believe a FS check was performed. 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.