Description
This article describes how to create an ACME Certificate using CLI on a Multi-VDOM setup.
Scope
FortiGate.
Solution
For the requirements on setting up ACME refer to:
Automatically provision a certificate
On a multi-VDOM FortiGate, ACME is currently only supported on global certificates. It is not possible to configure or deploy this under a specific VDOM.
See sample configuration using CLI on Multi-VDOM:
config global
config certificate local
edit "acme-test"
set enroll-protocol acme2
set acme-domain "fg.test-domain.com"
set acme-email "test-email@fortinet.com"
next
end
config system acme
set interface "External_Interface"
end
end
Make sure that the external interface is part of the management VDOM. Otherwise, it will not be possible to choose it in a global VDOM for an ACME certificate configuration.
