Skip to main content
JosefKarliak
JosefKarliak
New Member
October 24, 2025
Question

New Feature Request - customize ACME provider

  • October 24, 2025
  • 2 replies
  • 294 views

Good afternoon,

according to SSL certificate shortening, is there possible to NFR customizing ACME provider (GEANT CA), not only Letsencrypt ? 

In this time I found that customizing ACME provider in not possible, right ?

FortiWeb ? FortiGate ?

Thanks and best regards

J.Karliak

2 replies

Anthony_E
Staff
Anthony_E
Staff
October 27, 2025

Hello Josef,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Best Regards
Anthony_E
Staff
Anthony_E
Staff
October 29, 2025

Hello Josef,

 

Yes, it is possible to customize the ACME provider on FortiGate to use a service other than Let's Encrypt, such as GEANT CA. However, starting with FortiGate v7.0.2, this option is only available via the CLI. Here are the steps to configure it:

  1. Access the FortiGate CLI.

  2. Enter the following commands to configure the ACME certificate:

    config vpn certificate local edit <certificate_name> set enroll-protocol acme2 set acme-ca-url <url>  # Enter the GEANT CA server/CA URL. set acme-domain <domain which resolves to FortiGate public IP address> set acme-email <valid email address> next end

Make sure to replace <certificate_name>, <url>, <domain>, and <email> with your specific details.

Best Regards
Terms & ConditionsAccessibility statement