Technical Tip: EMS does not support private keys with passphrases

[kyoneda1]

Description	This article describes issues related to uploading SSL certificates to the EMS.
Scope	FortiClient EMS.
Solution	FortiClient EMS does not support private keys with passphrases. The keys must be decrypted before they can be uploaded. When uploading a private key protected by a passphrase, the following error may occur. 'Invalid certificate and private key: []' Recommendations: ・Decrypt the passphrase in advance. ・Verify file uploads in a test environment before proceeding.  Note: FortiGate has a field for entering a password (passphrase) when uploading.  Related documents: Adding an SSL certificate to FortiClient EMS | FortiClient 7.2.7 | Fortinet Document Library Import a certificate | FortiGate / FortiOS 7.2.10 | Fortinet Document Library How to convert certificates or export a decrypted private key: Request an SSL digital certificate from a... - Fortinet Community